Community discussions

MUM Europe 2020

Search found 29 matches

by Biker111
Thu Oct 31, 2019 5:28 pm
Forum: The Dude
Topic: Limits for Dude
Replies: 0
Views: 288

Limits for Dude

Hi guys and girls I'm building a solution with interconnecting customer locations using ipsec. For monitoring, I will use 2 pcs. RB1100AHx4 Dude edition. Customer location-routers,- when fired up, will establish a ipsec connection to RB1100's,- open a tunnel over ipsec, and connect to the Dude. Cust...
by Biker111
Fri Aug 16, 2019 5:03 pm
Forum: The Dude
Topic: The Dude 6.43.7 - Database IO disk error
Replies: 5
Views: 1104

Re: The Dude 6.43.7 - Database IO disk error

Hi Thank's for your answer, very solid arguments you have. It's a bit sad, I like the Dude, I would wish Mikrotik realised that they must maintain the "whole packet". We want solutions, router, switches, management etc. Like a friend told me,- Mikrotik is too expensive. The hardware is cheap, but ev...
by Biker111
Fri Aug 16, 2019 3:43 pm
Forum: The Dude
Topic: The Dude 6.43.7 - Database IO disk error
Replies: 5
Views: 1104

Re: The Dude 6.43.7 - Database IO disk error

Hi guys

Any solution to this?
I'm designing some major customer solution right now.
I've build monitoring around LibreNMS,- but recently changed to Dude.
So far, running everything with a RB1100AHx4 Dude edition.

Reading this worries me :?

Cheers
Biker
by Biker111
Tue Jul 23, 2019 12:40 am
Forum: General
Topic: Possible to do ipsec + DHCP WAN + certificate ??
Replies: 4
Views: 410

Re: Possible to do ipsec + DHCP WAN + certificate ??

Thanks Sindy

Looking at it now.
I've been reading a lot of your posts,- you're very, very skilled :)

Best regards
Biker
by Biker111
Mon Jul 22, 2019 11:22 pm
Forum: General
Topic: Possible to do ipsec + DHCP WAN + certificate ??
Replies: 4
Views: 410

Re: Possible to do ipsec + DHCP WAN + certificate ??

Hi Sindy Oh,- I want ipsec,- I just mentioned OpenVPN because of it's ability to connect using DHCP assigned ip address. I haven't been able to find/compose a configuration making ipsec connect. I thought I tried every possible configuration :) Hub -> static WAN ip Spokes -> DHCP assigned WAN ip add...
by Biker111
Mon Jul 22, 2019 7:09 pm
Forum: General
Topic: Possible to do ipsec + DHCP WAN + certificate ??
Replies: 4
Views: 410

Possible to do ipsec + DHCP WAN + certificate ??

Hi guys I' working on a solution with a hub-spoke setup interconnecting with ipsec. I would like to run with certificates,- but PSK could be ok. So far I've been unable to produce a working configuration, if a spoke have a DHCP assigned WAN ip address. I've been testing and trying, reading a lot of ...
by Biker111
Mon Feb 18, 2019 11:53 am
Forum: General
Topic: More detaled ipsec wiki
Replies: 3
Views: 600

Re: More detaled ipsec wiki

Hi Thanks for your answer. I thought I understood that page, but I give it a second look :) I'm trying to figure out how to make a ipsec tunnel between 2 Mikrotik's, hub-spoke, but only with the client certificate on the spoke site. It runs fine with both ends having both certificates, but it's a li...
by Biker111
Tue Feb 12, 2019 4:49 pm
Forum: General
Topic: More detaled ipsec wiki
Replies: 3
Views: 600

More detaled ipsec wiki

Hi

Does anyone know where to find detailed explanations regarding ipsec with rsa certificates?
I need some explanations and examples using rsa key, rsa signature and rsa signature hybrid ... site-to-site and self-signed.
I'm tired of using Google, Youtube and guessing.

Cheers
Biker
by Biker111
Thu Jan 03, 2019 1:36 pm
Forum: General
Topic: VLANS+2 Bridges + 2 DHCP [SOLVED]
Replies: 14
Views: 1386

Re: VLANS+2 Bridges + 2 DHCP [SOLVED]

Hi Sindy

You really nailed this, thank's a lot.
Could I ask,- if each vlan should have a seperate DHCP server running, then i guess "one bridge per vlan" is the way to go?

Cheers
Biker
by Biker111
Fri Sep 21, 2018 10:40 pm
Forum: General
Topic: VPP for Mikrotik?
Replies: 2
Views: 1020

Re: VPP for Mikrotik?

So, I guess no-one has a glue about this?

Cheers
Biker
by Biker111
Thu Aug 16, 2018 8:37 pm
Forum: General
Topic: VPP for Mikrotik?
Replies: 2
Views: 1020

VPP for Mikrotik?

Hi I recently read, that pfSense threw away their planned roadmaps for future improvements. They drop FreeBSD and go Linux. Cisco made their VPP go public, -I had never heard of it before. It's a software that makes a Linux kernel go crazy in networking performance. pfSense expects up to 100GB IPSec...
by Biker111
Tue Mar 06, 2018 3:58 pm
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1295

Re: Slower ipsec with 6.41

Hi guys

Just received a email from Mikrotik on this:

"For now we will revert the hEX IPsec optimization to the state it was prior version 6.41."

That's fine with me, thanks to Mikrotik for assistance.

Cheers
Biker
by Biker111
Mon Mar 05, 2018 10:58 pm
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1295

Re: Slower ipsec with 6.41

Unfortunately no news about this, I hope it can be solved.
by Biker111
Tue Jan 30, 2018 1:24 am
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1295

Re: Slower ipsec with 6.41

And support ticket number to Mikrotik is?

Ticket#2018012922004625
by Biker111
Sun Jan 28, 2018 2:51 pm
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1295

Re: Slower ipsec with 6.41

Thanks guys I haven't been able to configure any setup, that could give the old SW performance. Now I know I'm not nuts :shock: I hope Mikrotik makes a fix,- until then they should stop advertising the 750Gr3 doing 470Mb ipsec. Not even half that number ... Ipsec performance was the main reason for ...
by Biker111
Sun Jan 28, 2018 11:23 am
Forum: General
Topic: Slower ipsec with 6.41
Replies: 7
Views: 1295

Slower ipsec with 6.41

Hi I have tried different ipsec configurations with 6.41, and I think it gives a ipsec throughput decrease around 30%. Have you really testet this and still claim HW support is functioning properly? I'm still testing, mostly on 750Gr3, but I can't find the throughput performance I've seen before. On...
by Biker111
Sun Jan 28, 2018 5:12 am
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 80643

Deleted ...

Deleted ...
by Biker111
Mon Oct 30, 2017 4:44 am
Forum: RouterBOARD hardware
Topic: RB750Gr3 - Report and questions
Replies: 112
Views: 33808

Re: RB750Gr3 - Report and questions

RB750Gr3 switch chip does not have full VLAN tagging/untagging support yet, it is planned to implement it in future. Currently, you should use RB750Gr3 switch chip only for basic switching. RB750Gr3 is also powerful enough to handle software based VLANs: http://wiki.mikrotik.com/wiki/Manual:Interfa...
by Biker111
Fri Oct 27, 2017 3:07 am
Forum: General
Topic: Monitor ipsec traffic with snmp?
Replies: 0
Views: 490

Monitor ipsec traffic with snmp?

Hey guys

I would like to monitor ipsec tunnels with snmp. up/down and utilization (bandwidth monitoring)
Some oid's seems to be missing to do that.

Any ideas?
by Biker111
Tue Sep 26, 2017 5:18 pm
Forum: General
Topic: Have this been tested?
Replies: 0
Views: 330

Have this been tested?

Hi guys I need some help here :) Let's say we have port "fasttracking" to the WAN port. It's able to do wire speed ~ 920Mb Another circuit want's to establish a Ipsec connection (no fasttracking), help from hardware,- normal max throughput ~ 300Mb. Which circuit will eat the available bandwidth on t...
by Biker111
Tue Aug 22, 2017 12:09 am
Forum: SwOS
Topic: Bandwidth shaping in hardware or software?
Replies: 0
Views: 533

Bandwidth shaping in hardware or software?

Hi guys

I'm interested in Mikrotik switches.
A friend told me that bandwidth limiting is done in software, resulting in very poor throughput because the CPU gets cooked.

Is this true, I can't find any dokumentation?

Cheers
Biker
by Biker111
Sun Jan 22, 2017 12:55 am
Forum: Announcements
Topic: The Dude, v6.38 [current] release.
Replies: 77
Views: 24481

Wrong thread, sorry
by Biker111
Thu Dec 22, 2016 12:39 am
Forum: Scripting
Topic: Logging part of traffic
Replies: 4
Views: 801

Re: Logging part of traffic

Hi msatter

I will certainly tell about it, when I know.
I'm in the middle of a large development work, and I'm coming to this part soon. I have to dig through a lot of challenges first :)

Thanks again
Biker111
by Biker111
Thu Dec 01, 2016 12:40 am
Forum: Scripting
Topic: Logging part of traffic
Replies: 4
Views: 801

Re: Logging part of traffic

Hi msatter

Thanks for your input, nice one :)

Good idea !!

Regards
Biker111
by Biker111
Sun Nov 27, 2016 10:13 pm
Forum: Beginner Basics
Topic: Mode button on RB750r3
Replies: 2
Views: 4012

Re: Mode button on RB750r3

A million thanks, Fraction :)

I was going crazy ... and was not clever enough to find that post.
by Biker111
Sun Nov 27, 2016 10:09 pm
Forum: Scripting
Topic: Logging part of traffic
Replies: 4
Views: 801

Logging part of traffic

Hi guys The EU dictates logging of free wifi data tranfers. Could be in hotels, cafe's and such. We do have excellent descriptions how log voucher and user names into logs. But the collected data sums up fast, even if only dst ip, src ip, ports, time and user is logged. The law suggests only one in ...
by Biker111
Sun Nov 27, 2016 9:50 pm
Forum: Beginner Basics
Topic: Mode button on RB750r3
Replies: 2
Views: 4012

Mode button on RB750r3

Hi guys I just bought a RB750r3. On the side it has a "Mode" button. Does anyone know what that's used for? It's not a reset button, it's on the front. It's not a WPS button, it has no wifi. I've been reading documentation og Google for hours without any success :( It is not mentioned in any Mikroti...
by Biker111
Sat Aug 27, 2016 1:47 am
Forum: RouterBOARD hardware
Topic: Hardware type/identity
Replies: 7
Views: 1255

Re: Hardware type/identity

Hi honzam Thanks a lot for your answer :) I have that "5" in the serial number,- that's what I was hoping for, - a precise answer. I had the fear, that my 850 was a old one which had spend many months under the desk somewhere. I better buy one more to test properly,- I'm testing against a Ubiquiti E...
by Biker111
Fri Aug 26, 2016 8:13 pm
Forum: RouterBOARD hardware
Topic: Hardware type/identity
Replies: 7
Views: 1255

Hardware type/identity

Hi Guys First post from me. A couple of months ago I bough a RB850Gx2 for testing. I'm interested in the IPsec part. In other threads I've read about the first models was without hardware acceleration for IPsec. How do I see if my 850 is the model with it? I can't find the right documentation. From ...