Community discussions

Search found 84 matches

  • 1
  • 2
by hknet
Tue Sep 11, 2018 12:01 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 16952

Re: v6.43 [current] is released!

*bridge - added per-port based "tag-stacking" feature trying to wrap my head around this vs the (previous) QinQ support by using ethertype=0x88a8 if I'm not mistaken this is now the more common support for QinQ using 0x8100 frames packing another 0x8100 frame into it (aka stacking). my question here...
by hknet
Mon Sep 10, 2018 11:44 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 149
Views: 16952

Re: v6.43 [current] is released!

Do I read this correctly as _no_ routerboard-firmware upgrade is usually required coming from 6.43rc or 6.42.7?

thx
hk
by hknet
Sat Aug 25, 2018 10:04 am
Forum: Announcements
Topic: Security announcement blog
Replies: 110
Views: 14821

Re: Security announcement blog

RSS is good, but will be nice to have some mailing list for security announcement and firmware update
+1 for security announcement mailinglist
+2
by hknet
Fri Aug 24, 2018 10:23 am
Forum: Announcements
Topic: v6.42.7 [current] is released!
Replies: 159
Views: 20806

Re: v6.42.7 [current] is released!

Well you guys did want a security blog and more awareness. Now you complain that the issues are not serious enough :D We will try to find a balance. I hope you understand that when you post a new version AND update the bugfix version at the same time, mentioning 4 security issues that have no descr...
by hknet
Tue Jul 31, 2018 11:02 pm
Forum: Forwarding Protocols
Topic: VPLS with QinQ breakouts?
Replies: 1
Views: 264

VPLS with QinQ breakouts?

Hi this might be a tricky one, any food for thought would be appreciated (and consulting offers are welcome too if you know what you're doing). The scenario goes like this: there is one QinQ port that is shared between several users of this shared infrastructure. the s-tags are generated per infrast...
by hknet
Tue Jul 31, 2018 3:38 pm
Forum: General
Topic: CCR1072 microSD howto?
Replies: 0
Views: 117

CCR1072 microSD howto?

Hi
feeling a bit dumb, but has anyone ever managed to use a microSD in the ccr1072?

we seem to be unable to solve this riddle.

and while we are at it any tested smartcards for the smart card slot?

thx
hk
by hknet
Mon Jul 23, 2018 6:23 pm
Forum: Forwarding Protocols
Topic: set next-hop anyhow?
Replies: 2
Views: 261

set next-hop anyhow?

Hi on a cisco router we do something like this: route-map RK permit 50 match ip address RK set ip next-hop 192.168.1.1 this route-map is then bound to an interface that is the incoming gateway for packets like interface vl10 ip policy route-map RK in other words if the source IP matches the RK addre...
by hknet
Sat Jul 21, 2018 7:52 am
Forum: Announcements
Topic: v6.42.6 [current]
Replies: 102
Views: 20410

Re: v6.42.6 [current]

after seeing issues with CRS317 an 1G SFPs (not 10G) not linking with latest 6.43rc44 (getting auto negotiation as incomplete) we tested a downgrade to the current 6.42.6 and see auto negotiation failed. copper 1G SFPs do not see any advertised 10/100/1000M link-speeds while the other end gets auton...
by hknet
Fri Jul 20, 2018 11:44 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 83844

Re: v6.43rc [release candidate] is released!

model: CRS317-1G-16S+
release: v6.43rc44

we use some ports with non-10G SFPs (ie 1G-SX and 1G-TX modules with fiber and copper).

those modules get auto negotiation 'incomplete', while claiming the link is ok but no working datatransmission can be established.

regards,
hk
by hknet
Fri May 18, 2018 5:56 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 558
Views: 83844

Re: v6.43rc [release candidate] is released!

I like: "crs3xx - added initial Q-in-Q hardware offloading support (CLI only);"
could someone please point me to the correct manual/wiki entry on this one?
by hknet
Thu May 17, 2018 9:35 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug: CRS317 cuts off C-tag in qinq packets
Replies: 27
Views: 1367

Re: Bug: CRS317 cuts off C-tag in qinq packets

I don't know the inner workings of CRS3xx but...
q.e.d.
by hknet
Tue May 15, 2018 4:27 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug: CRS317 cuts off C-tag in qinq packets
Replies: 27
Views: 1367

Re: Bug: CRS317 cuts off C-tag in qinq packets

@RoadkillX you do not test your setup on the mentioned HW therefore it's invalid and not what anybody was asking for. @TestCRS thx for the ethertype reminder from RoadkillX I found the relatively simple case to do: set the vlan added to the bridge with "use service tag" and you should be fine. -> se...
by hknet
Sun May 13, 2018 11:33 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug: CRS317 cuts off C-tag in qinq packets
Replies: 27
Views: 1367

Re: Bug: CRS317 cuts off C-tag in qinq packets

QinQ requires intervlan. it's a vlan interface inside another vlan interface so revisit the docs ;-), to be more clear QinQ requires 2 vlan interfaces which can't be hw-offloaded because they are L3. you might brush up your knowledge, you are misinformed and did not read the first post to understan...
by hknet
Sun May 13, 2018 11:07 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug: CRS317 cuts off C-tag in qinq packets
Replies: 27
Views: 1367

Re: Bug: CRS317 cuts off C-tag in qinq packets

it should do 10Gb within the same vlan but not intervlan
the original poster was never talking about inter-vlan-anything maybe you should revisit the original problem-report.
by hknet
Sun May 13, 2018 10:12 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug: CRS317 cuts off C-tag in qinq packets
Replies: 27
Views: 1367

Re: Bug: CRS317 cuts off C-tag in qinq packets

This is not a bug, its clearly misconfiguration respectfully disagree - the CRS and the new bridge-hardware-accelleration config to use it as a switch and get hardware-forwarding is what the original poster tried to achieve imho (and I see no flaw in the config); you are referencing the implementat...
by hknet
Sun May 13, 2018 9:49 am
Forum: RouterOS v6 RC and v7 BETA
Topic: Bug: CRS317 cuts off C-tag in qinq packets
Replies: 27
Views: 1367

Re: Bug: CRS317 cuts off C-tag in qinq packets

I cant se your C tag in your setup. A ctag is a vlan to a vlan interface... You need to paste your complete setup with vlan tagged to another vlan interface. well, I guess there is no specific c-tag configured (as the CRS317 wouldn't support qinq in hardware anyway), therefore the claimed s-tag (vl...
by hknet
Tue May 01, 2018 5:56 am
Forum: RouterBOARD hardware
Topic: CRS 317 support 802.1ad QinQ
Replies: 15
Views: 2326

Re: CRS 317 support 802.1ad QinQ

As other people wonder - Are we/Have we gotten hardware support for QinQ?
Doesn't look like it, though the Marvell 98DX8216 is a metro chipset (marvell's words) which would suggest 802.1ad should be available at the HW level.
But my guess is we won't see this with this HW.

regards,
hk
by hknet
Tue May 01, 2018 1:28 am
Forum: Forwarding Protocols
Topic: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?
Replies: 11
Views: 1372

Re: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?

Did not found how to pm here. Wonna honest answer? Go mx80 for your business. second that. if you could talk your upstreams into limiting your bgp-view (ie only local routes and no full feed) you might still have fun with CCRs. Would you mind elaborating a bit more in detail, why your suggestion to...
by hknet
Tue May 01, 2018 12:07 am
Forum: General
Topic: Which types of ports would you like to see for a high speed router
Replies: 142
Views: 16311

Re: Which types of ports would you like to see for a high speed router

12 x SFP+ (10G)
4 x QSFP (4x10G)
1 x Management (no PoE)
1 x serial management
second that.
by hknet
Wed Apr 25, 2018 3:50 am
Forum: Announcements
Topic: v6.42.1 [current]
Replies: 273
Views: 30076

Re: v6.42.1 [current]

EoIP Ethernet Frame issue is still there (introduced in 6.42 breaking fragmenting big frames somehow broken) verified on RB2011 and sent supout to MT-support.
by hknet
Tue Apr 17, 2018 10:20 pm
Forum: Announcements
Topic: v6.42 [current]
Replies: 147
Views: 18604

Re: v6.42 [current]

it seems we lost packet fragmentation for EoIPs connecting bridges between two MTs we no longer can transport big pppoe-frames there; was working with 6.41.4
by hknet
Mon Apr 16, 2018 7:34 pm
Forum: Forwarding Protocols
Topic: Access Web SSH through VLAN IP in seperate VRF
Replies: 5
Views: 949

Re: Access Web SSH through VLAN IP in seperate VRF

Web, winbox, ssh etc access to the router works only in main routing table. It isn't totally correct. Because if you've got access to the Internet from main route table, mikrotik gets inbound request on VRF interface and sends reply via Internet interface in main route table. Is it possible to chan...
by hknet
Sun Apr 15, 2018 1:37 am
Forum: General
Topic: MLPPP second link flapping
Replies: 2
Views: 139

Re: MLPPP second link flapping

well after fixing the threshold issue on the ciscos-side we see a MLPPP issue on the mikrotk end... it can be reproduced quite simply: if we max out all our mlppp-pppoe-links (using bw-test) then we see dropped links which are established immediately, but the linkd-down causes loss in bandwidth and ...
by hknet
Sat Apr 14, 2018 12:51 pm
Forum: General
Topic: MLPPP second link flapping
Replies: 2
Views: 139

Re: MLPPP second link flapping

it's a cisco issue, the box believes it has to drop link though fully loaded...
by hknet
Fri Apr 13, 2018 6:14 pm
Forum: General
Topic: MLPPP second link flapping
Replies: 2
Views: 139

MLPPP second link flapping

Hi we test MLPP on ROS 6.41.4 using two ethernet-interfaces and a PPPoE interface that uses those interfaces and connect successfully. We tested using 2 and 4 (i.e. using eth1 twice and eth2 twice) links. the interesting phenomenon is that we always loose the second pppoe-session (pppoe1.2) no matte...
by hknet
Sat Mar 31, 2018 10:05 pm
Forum: Forwarding Protocols
Topic: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?
Replies: 11
Views: 1372

Re: What Mikrotik product is the fastest for BGP with 10-gig load with 2 BGP feeds ?

Did not found how to pm here. Wonna honest answer? Go mx80 for your business.
second that. if you could talk your upstreams into limiting your bgp-view (ie only local routes and no full feed) you might still have fun with CCRs.
by hknet
Sat Mar 31, 2018 9:46 pm
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 71434

Re: Urgent security advisory

We see a development (and others too) port scanning for winbox 8291 is dropping while port 2000 (bandwidth-test-service) is going strong.
Also telnet ist still highly active with those hijacked mikrotiks.
by hknet
Thu Mar 29, 2018 3:41 pm
Forum: The Dude
Topic: Dude v6 - Feature request list
Replies: 45
Views: 7814

Re: Dude v6 - Feature request list

please enable the dude to connect to routeros devices on other than the default port (eg. multiple devices on different winbox-ports or multiple devices behind one nat-gateway and portmapping active); connecting to those boxes via winbox is done using ip:port but the dude does not allow this, specif...
by hknet
Wed Mar 28, 2018 11:11 pm
Forum: Announcements
Topic: Urgent security advisory
Replies: 110
Views: 71434

Re: Urgent security advisory

Just to make it clear: only devices running a not up-to-date RouterOS version are affected, whose HTTP port (TCP/80) are open and provides the login facility and management GUI, right? I never allow unencrypted connections and always disable the HTTP and HTTPS interfaces. Only SSH and Winbox is ena...
by hknet
Sat Mar 17, 2018 1:55 am
Forum: RouterBOARD hardware
Topic: CRS 317 support 802.1ad QinQ
Replies: 15
Views: 2326

Re: CRS 317 support 802.1ad QinQ

as we are approaching v6.42 is no-QinQ-in-hardware still the case with the upcoming release?
by hknet
Sun Sep 03, 2017 9:17 pm
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 102
Views: 18216

Re: IPv6 recursive nexthops via iBGP

Well "Nexthop self" in an bgp environment is an abomination. It should not be needed - agreed, but real world teaches us: One looses an external interface and therefore the nexthop is removed from the IGP. In a small network this converges fast and causes virtually no service disruption. Think about...
by hknet
Sun Sep 03, 2017 3:03 pm
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 102
Views: 18216

Re: IPv6 recursive nexthops via iBGP

Hi. RR's need not to be in data path (most often aren't) so please consider your own setup before fiddeling with above statement. ahem, the nexthop delivered by RRs was not implying the nexthop in fact is the RR, in fact the nexthop is usually the IP set by "next-hop self" (or similar) by BGP-route...
by hknet
Tue Aug 29, 2017 5:39 pm
Forum: Forwarding Protocols
Topic: IPv6 recursive nexthops via iBGP
Replies: 102
Views: 18216

Re: IPv6 recursive nexthops via iBGP

Hi saw this thread reactivated :) The only workaround we have seen so far for iBGP IPv6 routes to get active is to add a static ipv6 route for the loopback IP for the next-hop delivered through the route-reflectors. (again tested with RouterOS 6.40.2) If there is any workaround, I'd be glad to hear ...
by hknet
Wed Feb 22, 2017 3:38 am
Forum: RouterOS v7
Topic: RouterOS v7.0 beta1 - when?
Replies: 350
Views: 84119

Re: RouterOS v7.0 beta1 - when?

as we won't get ROSv7 anytime soon, anyone with knowledge how to crosscompile for the CCR platform and build a system to run quagga or similar? But does it support multi thread? Last time I read quaggas docs it says that quagga is planned to support but so does not have the right libs for that... T...
by hknet
Sun Jan 15, 2017 4:09 pm
Forum: Forwarding Protocols
Topic: Redundant / Load Balancing VPN tunnel with 4 routers
Replies: 1
Views: 448

Re: Redundant / Load Balancing VPN tunnel with 4 routers

Hi tunnels sound like a plan, you then could talk ospf on those tunnels and between routers A+B and C+D. In order to get your upstream in the datacenter to make connectivity redundant you would need to speak some routing protocol there too, usually BGP might be an option, alternate you can form VRRP...
by hknet
Sun Jan 15, 2017 1:18 pm
Forum: Forwarding Protocols
Topic: BGP Advertisements Harassing Server
Replies: 2
Views: 440

Re: BGP Advertisements Harassing Server

if you just want to suppress this advertisement - do it using a route-filter.
by hknet
Sat Jan 14, 2017 10:57 pm
Forum: Forwarding Protocols
Topic: BGP Routing Help
Replies: 5
Views: 729

Re: BGP Routing Help

Posting questions and reading answers in forums is already doing some reading. :) Where did you get the two ISP idea? I'd suggest doing some reading on BGP, two ISPs having the same AS is not two ISPs :) probably from: add name=toISP2 add name=toISP1 if you would like to have two links to one ISP a...
by hknet
Sat Jan 14, 2017 12:47 am
Forum: Forwarding Protocols
Topic: Create BGP Peer within VRF
Replies: 7
Views: 2249

Re: Create BGP Peer within VRF

sidenote: you might also notice that you won't see the advertised prefixes in bgp advertisements as vrf advertised prefixes aren't shown there.
by hknet
Sat Jan 14, 2017 12:43 am
Forum: Forwarding Protocols
Topic: BGP Routing Help
Replies: 5
Views: 729

Re: BGP Routing Help

I'd suggest doing some reading on BGP, two ISPs having the same AS is not two ISPs :)
by hknet
Sat Jan 14, 2017 12:32 am
Forum: Forwarding Protocols
Topic: Need Suggestion CCR
Replies: 3
Views: 559

Re: Need Suggestion CCR

The mentioned 154 Mbps by your carrier make the access technology smell like ATM. LACP over ATM might create some issues :) Therefore as you have a CCR you might ask your provider to host a small mikrotik for you at one of their PoPs near you. using eg. EoIP-tunnels over each 100M link you get you c...
by hknet
Sat Jan 14, 2017 12:11 am
Forum: RouterOS v7
Topic: RouterOS v7.0 beta1 - when?
Replies: 350
Views: 84119

Re: RouterOS v7.0 beta1 - when?

as we won't get ROSv7 anytime soon, anyone with knowledge how to crosscompile for the CCR platform and build a system to run quagga or similar?
by hknet
Tue Jan 03, 2017 10:25 pm
Forum: Announcements
Topic: v6.39rc [release candidate] is released
Replies: 391
Views: 68291

Re: v6.39rc [release candidate] is released

"ppp optimized for multicore" - on all platforms?
by hknet
Tue Jan 03, 2017 10:23 pm
Forum: Announcements
Topic: The Dude, v6.38 [current] release.
Replies: 77
Views: 19922

Re: The Dude, v6.38 [current] release.

Is anyone else having issues with the tools > Winbox tool not showing up on the client for the Dude? I tried version 6.38 and 6.39rc4 and am getting the same result. I upgraded from the previous version 6.37.3 and had no issues. Thanks, Lynn the end of the starting post should help :) -> winbox can...
by hknet
Tue Jan 03, 2017 9:30 pm
Forum: Announcements
Topic: v6.38 [current] is released!
Replies: 168
Views: 29595

Re: The Dude, v6.38 [current] release.

any details on the obviously also new RouterBoard Firmware v.3.36?
by hknet
Sat Oct 08, 2016 6:02 am
Forum: Virtualization
Topic: CHR feature requests
Replies: 48
Views: 5514

Re: CHR feature requests

Hi, first of all: loving it ;) specific to CHR I'd ask for a way to automate deployment, be it to do a dhcp-client-request on the first interface found and get a config file specific for this box by eg requesting a tftp-file based on the mac# of this interface. and for an easy system-reset a specifi...
by hknet
Sun Sep 11, 2016 12:50 pm
Forum: Announcements
Topic: v6.36.3 [current] is released!
Replies: 43
Views: 10788

Re: v6.36.3 [current] is released!

Hi
to add to our l2tp-server experience: we have fastpath active - fine.
We also "allow fastpath" for the l2tp-server.

Though as soon as a client connects fastpath is deactivated.

edit: fixed it, got to set "change tcp mss" to no it seems, not quite sure if this is a working way to go...

best,
hk
by hknet
Sun Sep 11, 2016 7:17 am
Forum: Announcements
Topic: v6.36.3 [current] is released!
Replies: 43
Views: 10788

Re: v6.36.3 [current] is released!

Problems with server l2tp!!!
fyi - tested l2tp-server on CHR v6.36.3 - works fine - maybe you should elaborate your problem.

regards
hk
by hknet
Sat Sep 10, 2016 8:20 pm
Forum: General
Topic: mass rollout best practice?
Replies: 4
Views: 624

mass rollout best practice?

We'd like to use some model-configs built for MikroTik CPEs. At the moment a simple way to roll this out is backing up the whole config and restoring it into the new devices, downside is the MAC# are also copied. Is there a sane way to roll out custom "default configs" or more ideally is there a bes...
by hknet
Sat Sep 10, 2016 3:37 am
Forum: Announcements
Topic: v6.36.3 [current] is released!
Replies: 43
Views: 10788

Re: v6.36.3 [current] is released!

ahem, is there by design no dude-client for 6.36.3?
(just let me know if going back to 6.36.2 is the way to go pls)
by hknet
Tue Sep 06, 2016 4:17 pm
Forum: Announcements
Topic: v6.36.3 [current] is released!
Replies: 43
Views: 10788

Re: v6.36.3 [current] is released!

Hi
it seems the dude client is missing for now?

Regards
hk
  • 1
  • 2