Community discussions

MikroTik App

Search found 37 matches

by Biker111
Tue May 12, 2020 2:51 am
Forum: The Dude
Topic: Dude not responding [SOLVED]
Replies: 1
Views: 1242

Re: Dude not responding [SOLVED]

Case solved,- I downgraded to old and stabel 6.45.9.
Everything worked again.
by Biker111
Mon May 11, 2020 5:36 pm
Forum: The Dude
Topic: Dude not responding [SOLVED]
Replies: 1
Views: 1242

Dude not responding [SOLVED]

Hi guys I have a lab setup,- running Dude on the 1100AHx4 Dude edition. 6.46.6 software Running perfect for many months. I've been connecting with a client on a Ubuntu computer running wine. No problems. Suddenly the Dude server stopped responding? I have no clue why. I tried to stop and start the D...
by Biker111
Thu Apr 23, 2020 3:38 pm
Forum: General
Topic: QinQ advice needed!
Replies: 12
Views: 2812

Re: QinQ advice needed!

Sorry, don't like problems just thrown over the wall hoping someone will catch it and do it for you. What have you tried so far, export of config what you tried? Strange reply? The basic problem is that Mikrotik doc's sucks. QinQ on Cisco is a piece of cake,- search their docs, and you find 10 grea...
by Biker111
Sat Apr 04, 2020 6:37 am
Forum: General
Topic: Mikrotik to Cisco QinQ Tunneling behind an MLPS network
Replies: 2
Views: 1528

Re: Mikrotik to Cisco QinQ Tunneling behind an MLPS network

Hi mkx

Great post, vlan on Mikrotik really makes your head spin :)

One thing I can't find in your configuration is a psysical port connected to the ISP? The one carrying the ISP "outer" vlan.

Cheers
Biker
by Biker111
Mon Feb 03, 2020 5:44 am
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 5
Views: 4177

Re: VRF Lite [SOLVED]

Hi again As I wrote, it's a hub and spoke topology. Ipsec, OSPF, tunnels, - everything runs fine. Connected clients on the spokes gets a iperf3 throughput ~180Mb. That's fine. If I implement "VRF Lite" on a spoke router,- thoughput becomes very unstable, 180Mb - then 1Kb - then 0 - then 10Mb etc. No...
by Biker111
Sat Jan 25, 2020 10:31 pm
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 5
Views: 4177

Re: VRF Lite [SOLVED]

Hi Thank's for your info,- I've been thinking the same thing about scalability,- either stub areas + default route or BGP. That's the way to go. Regarding my throughput problem - could it be missing markings (?),- I found this one: https://mum.mikrotik.com/presentations/RU17M/presentation_4939_15101...
by Biker111
Sat Jan 25, 2020 8:16 am
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 5
Views: 4177

Re: VRF Lite [SOLVED]

VRF Lite in MIkroTik would be using the routing marks as a standalone without MPLS/VPNv4. This is supported. Are you trying to use routing protocols in a VRF as well? Thank's a lot for your answer :D Yes,- there is several layers: 1. Ipsec connections in a Hub-and-Spoke setup, using certificates. R...
by Biker111
Mon Jan 13, 2020 5:20 am
Forum: Forwarding Protocols
Topic: VRF Lite [SOLVED]
Replies: 5
Views: 4177

VRF Lite [SOLVED]

Hi guys I'm working on a hub and spoke ipsec solution. The usual stuff,- Ipsec, tunnels, certificates, QoS, ospf running over tunnels. Everything is running fine,- I did have some problems at a point, I contacted Mikrotik support,- and they found a configuration error in my setup. Simply me missing ...
by Biker111
Thu Oct 31, 2019 5:28 pm
Forum: The Dude
Topic: Limits for Dude
Replies: 0
Views: 2130

Limits for Dude

Hi guys and girls I'm building a solution with interconnecting customer locations using ipsec. For monitoring, I will use 2 pcs. RB1100AHx4 Dude edition. Customer location-routers,- when fired up, will establish a ipsec connection to RB1100's,- open a tunnel over ipsec, and connect to the Dude. Cust...
by Biker111
Fri Aug 16, 2019 5:03 pm
Forum: The Dude
Topic: The Dude 6.43.7 - Database IO disk error
Replies: 5
Views: 3016

Re: The Dude 6.43.7 - Database IO disk error

Hi Thank's for your answer, very solid arguments you have. It's a bit sad, I like the Dude, I would wish Mikrotik realised that they must maintain the "whole packet". We want solutions, router, switches, management etc. Like a friend told me,- Mikrotik is too expensive. The hardware is cheap, but ev...
by Biker111
Fri Aug 16, 2019 3:43 pm
Forum: The Dude
Topic: The Dude 6.43.7 - Database IO disk error
Replies: 5
Views: 3016

Re: The Dude 6.43.7 - Database IO disk error

Hi guys

Any solution to this?
I'm designing some major customer solution right now.
I've build monitoring around LibreNMS,- but recently changed to Dude.
So far, running everything with a RB1100AHx4 Dude edition.

Reading this worries me :?

Cheers
Biker
by Biker111
Tue Jul 23, 2019 12:40 am
Forum: General
Topic: Possible to do ipsec + DHCP WAN + certificate ??
Replies: 4
Views: 669

Re: Possible to do ipsec + DHCP WAN + certificate ??

Thanks Sindy

Looking at it now.
I've been reading a lot of your posts,- you're very, very skilled :)

Best regards
Biker
by Biker111
Mon Jul 22, 2019 11:22 pm
Forum: General
Topic: Possible to do ipsec + DHCP WAN + certificate ??
Replies: 4
Views: 669

Re: Possible to do ipsec + DHCP WAN + certificate ??

Hi Sindy Oh,- I want ipsec,- I just mentioned OpenVPN because of it's ability to connect using DHCP assigned ip address. I haven't been able to find/compose a configuration making ipsec connect. I thought I tried every possible configuration :) Hub -> static WAN ip Spokes -> DHCP assigned WAN ip add...
by Biker111
Mon Jul 22, 2019 7:09 pm
Forum: General
Topic: Possible to do ipsec + DHCP WAN + certificate ??
Replies: 4
Views: 669

Possible to do ipsec + DHCP WAN + certificate ??

Hi guys I' working on a solution with a hub-spoke setup interconnecting with ipsec. I would like to run with certificates,- but PSK could be ok. So far I've been unable to produce a working configuration, if a spoke have a DHCP assigned WAN ip address. I've been testing and trying, reading a lot of ...
by Biker111
Mon Feb 18, 2019 11:53 am
Forum: General
Topic: More detaled ipsec wiki
Replies: 3
Views: 857

Re: More detaled ipsec wiki

Hi Thanks for your answer. I thought I understood that page, but I give it a second look :) I'm trying to figure out how to make a ipsec tunnel between 2 Mikrotik's, hub-spoke, but only with the client certificate on the spoke site. It runs fine with both ends having both certificates, but it's a li...
by Biker111
Tue Feb 12, 2019 4:49 pm
Forum: General
Topic: More detaled ipsec wiki
Replies: 3
Views: 857

More detaled ipsec wiki

Hi

Does anyone know where to find detailed explanations regarding ipsec with rsa certificates?
I need some explanations and examples using rsa key, rsa signature and rsa signature hybrid ... site-to-site and self-signed.
I'm tired of using Google, Youtube and guessing.

Cheers
Biker
by Biker111
Thu Jan 03, 2019 1:36 pm
Forum: General
Topic: VLANS+2 Bridges + 2 DHCP [SOLVED]
Replies: 14
Views: 2228

Re: VLANS+2 Bridges + 2 DHCP [SOLVED]

Hi Sindy

You really nailed this, thank's a lot.
Could I ask,- if each vlan should have a seperate DHCP server running, then i guess "one bridge per vlan" is the way to go?

Cheers
Biker
by Biker111
Fri Sep 21, 2018 10:40 pm
Forum: General
Topic: VPP for Mikrotik?
Replies: 2
Views: 1339

Re: VPP for Mikrotik?

So, I guess no-one has a glue about this?

Cheers
Biker
by Biker111
Thu Aug 16, 2018 8:37 pm
Forum: General
Topic: VPP for Mikrotik?
Replies: 2
Views: 1339

VPP for Mikrotik?

Hi I recently read, that pfSense threw away their planned roadmaps for future improvements. They drop FreeBSD and go Linux. Cisco made their VPP go public, -I had never heard of it before. It's a software that makes a Linux kernel go crazy in networking performance. pfSense expects up to 100GB IPSec...
by Biker111
Tue Mar 06, 2018 3:58 pm
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1718

Re: Slower ipsec with 6.41

Hi guys

Just received a email from Mikrotik on this:

"For now we will revert the hEX IPsec optimization to the state it was prior version 6.41."

That's fine with me, thanks to Mikrotik for assistance.

Cheers
Biker
by Biker111
Mon Mar 05, 2018 10:58 pm
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1718

Re: Slower ipsec with 6.41

Unfortunately no news about this, I hope it can be solved.
by Biker111
Tue Jan 30, 2018 1:24 am
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1718

Re: Slower ipsec with 6.41

And support ticket number to Mikrotik is?

Ticket#2018012922004625
by Biker111
Sun Jan 28, 2018 2:51 pm
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1718

Re: Slower ipsec with 6.41

Thanks guys I haven't been able to configure any setup, that could give the old SW performance. Now I know I'm not nuts :shock: I hope Mikrotik makes a fix,- until then they should stop advertising the 750Gr3 doing 470Mb ipsec. Not even half that number ... Ipsec performance was the main reason for ...
by Biker111
Sun Jan 28, 2018 11:23 am
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1718

Slower ipsec with 6.41

Hi I have tried different ipsec configurations with 6.41, and I think it gives a ipsec throughput decrease around 30%. Have you really testet this and still claim HW support is functioning properly? I'm still testing, mostly on 750Gr3, but I can't find the throughput performance I've seen before. On...
by Biker111
Sun Jan 28, 2018 5:12 am
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 95098

Deleted ...

Deleted ...
by Biker111
Mon Oct 30, 2017 4:44 am
Forum: RouterBOARD hardware
Topic: RB750Gr3 - Report and questions
Replies: 112
Views: 38662

Re: RB750Gr3 - Report and questions

RB750Gr3 switch chip does not have full VLAN tagging/untagging support yet, it is planned to implement it in future. Currently, you should use RB750Gr3 switch chip only for basic switching. RB750Gr3 is also powerful enough to handle software based VLANs: http://wiki.mikrotik.com/wiki/Manual:Interfa...
by Biker111
Fri Oct 27, 2017 3:07 am
Forum: General
Topic: Monitor ipsec traffic with snmp?
Replies: 0
Views: 681

Monitor ipsec traffic with snmp?

Hey guys

I would like to monitor ipsec tunnels with snmp. up/down and utilization (bandwidth monitoring)
Some oid's seems to be missing to do that.

Any ideas?
by Biker111
Tue Sep 26, 2017 5:18 pm
Forum: General
Topic: Have this been tested?
Replies: 0
Views: 440

Have this been tested?

Hi guys I need some help here :) Let's say we have port "fasttracking" to the WAN port. It's able to do wire speed ~ 920Mb Another circuit want's to establish a Ipsec connection (no fasttracking), help from hardware,- normal max throughput ~ 300Mb. Which circuit will eat the available bandwidth on t...
by Biker111
Tue Aug 22, 2017 12:09 am
Forum: SwOS
Topic: Bandwidth shaping in hardware or software?
Replies: 0
Views: 1714

Bandwidth shaping in hardware or software?

Hi guys

I'm interested in Mikrotik switches.
A friend told me that bandwidth limiting is done in software, resulting in very poor throughput because the CPU gets cooked.

Is this true, I can't find any dokumentation?

Cheers
Biker
by Biker111
Sun Jan 22, 2017 12:55 am
Forum: Announcements
Topic: The Dude, v6.38 [current] release.
Replies: 77
Views: 28375

Wrong thread, sorry
by Biker111
Thu Dec 22, 2016 12:39 am
Forum: Scripting
Topic: Logging part of traffic
Replies: 4
Views: 1018

Re: Logging part of traffic

Hi msatter

I will certainly tell about it, when I know.
I'm in the middle of a large development work, and I'm coming to this part soon. I have to dig through a lot of challenges first :)

Thanks again
Biker111
by Biker111
Thu Dec 01, 2016 12:40 am
Forum: Scripting
Topic: Logging part of traffic
Replies: 4
Views: 1018

Re: Logging part of traffic

Hi msatter

Thanks for your input, nice one :)

Good idea !!

Regards
Biker111
by Biker111
Sun Nov 27, 2016 10:13 pm
Forum: Beginner Basics
Topic: Mode button on RB750r3
Replies: 2
Views: 4614

Re: Mode button on RB750r3

A million thanks, Fraction :)

I was going crazy ... and was not clever enough to find that post.
by Biker111
Sun Nov 27, 2016 10:09 pm
Forum: Scripting
Topic: Logging part of traffic
Replies: 4
Views: 1018

Logging part of traffic

Hi guys The EU dictates logging of free wifi data tranfers. Could be in hotels, cafe's and such. We do have excellent descriptions how log voucher and user names into logs. But the collected data sums up fast, even if only dst ip, src ip, ports, time and user is logged. The law suggests only one in ...
by Biker111
Sun Nov 27, 2016 9:50 pm
Forum: Beginner Basics
Topic: Mode button on RB750r3
Replies: 2
Views: 4614

Mode button on RB750r3

Hi guys I just bought a RB750r3. On the side it has a "Mode" button. Does anyone know what that's used for? It's not a reset button, it's on the front. It's not a WPS button, it has no wifi. I've been reading documentation og Google for hours without any success :( It is not mentioned in any Mikroti...
by Biker111
Sat Aug 27, 2016 1:47 am
Forum: RouterBOARD hardware
Topic: Hardware type/identity
Replies: 7
Views: 1573

Re: Hardware type/identity

Hi honzam Thanks a lot for your answer :) I have that "5" in the serial number,- that's what I was hoping for, - a precise answer. I had the fear, that my 850 was a old one which had spend many months under the desk somewhere. I better buy one more to test properly,- I'm testing against a Ubiquiti E...
by Biker111
Fri Aug 26, 2016 8:13 pm
Forum: RouterBOARD hardware
Topic: Hardware type/identity
Replies: 7
Views: 1573

Hardware type/identity

Hi Guys First post from me. A couple of months ago I bough a RB850Gx2 for testing. I'm interested in the IPsec part. In other threads I've read about the first models was without hardware acceleration for IPsec. How do I see if my 850 is the model with it? I can't find the right documentation. From ...