MikroTik

merlinthemagic7

Well...

Whilst I am happy and grateful to FINALLY have a v7 AMI on AWS... Reading this thread, I'll skip on 7.14

merlinthemagic7

Hi, I'm wondering which global variable the scripts are using. Is there any variable that may call $temp , which is very likely that I use it in my self-developed scripts. In the spirit of maintaining some type of name space separation, all Globals are prefaced with "Mtm". If $temp is bei...

merlinthemagic7

Hi, Everything that stores a function is global, it has to be in order for different processes to share the loaded tools. For an example see: https://github.com/merlinthemagic/MTM-RouterOS-Scripting/blob/main/src/v7/flash/MTM/Facts/Tools/Hashing.rsc While MtmFacts loads the Tools factory, the tools ...

merlinthemagic7

If you build your own AMI on AWS there are no issues upgrading / downgrading the CHR. The current documentation (https://help.mikrotik.com/docs/display/RKB/Create+an+RouterOS+CHR+7.6+AMI) assumes you know how to create trust policies and roles on AWS. I think that can be quite intimidating for some ...

merlinthemagic7

I'd love $0 to return the script name. It's this case where $0 being the containing array from a function be useful, :jobname does NOT help here: But in essense you are correct the functions are stored as items in an array. The basic design is to attempts to mimic objects and having the ability to ...

merlinthemagic7

While we wait for the builtin functions: https://github.com/merlinthemagic/MTM-RouterOS-Scripting Can manipulate strings, files, md5 hashing, create GUIDs etc. @merlinthemagic7 thx for the nice compilation of missing basic functions :D I'm trying to understand the principle structure, reading: http...

merlinthemagic7

AWS sent me a notification that there is a new ROS Image available, does this mean updates will work now without the Instance type t3 -> t2 -> t3 limbo when freshly deployed? https://aws.amazon.com/marketplace/pp/prodview-sf5gn6js6av54 --Michael yes Please clarify if this means ONLY new 7.14 AWS T3...

merlinthemagic7

@valnic

802.11n/ac interfaces do not support this type of VLAN tagging under the wifiwave2 package, but they can be configured as VLAN access ports in bridge settings.

https://help.mikrotik.com/docs/pages/vi ... properties

merlinthemagic7

@BWC yup the T3 <=> T2 instance change works.

Just dont deploy in regions that dont have any Haswell / Broadwell instances... e.g. eu-south-2

@rajo
We deploy cross platform as well, GCP does not have this issue if you roll your own image that starts out as a V7 instance.

merlinthemagic7

@rajo The issue on AWS likely relates to T3 instances. The Hypervisor is different from T2 (works).

viewtopic.php?p=1027349#p1027349

merlinthemagic7

@Simonej Script has that permission. It looks like it is related to compression. If we instruct the web server to "no-gzip" the download works. Ill open a ticket when its reproducible. Edit: The issue occurs when the http response headers + payload (after being uncompressed) exceeds 65535 ...

merlinthemagic7

Loaded 7.13 on a few AX2 units. Fetch from scripts is currently the only one item that stands out with errors compared to 7.12.1. We have a script that triggers on boot and fetches a few files from our provisioning servers (Basic auth and HTTPS). On 7.12.1 works every time. Using 7.13 the first file...

merlinthemagic7

2c. Would be quite nice if we would be able to lift the limitation on AC interfaces doing vlan tagging based on RADIUS attributes. e.g. lifting the restriction that errors out with: "can not assign VLAN, maximum VLAN count for interface reached". Dont get me wrong, thank you for enabling t...

merlinthemagic7

Had same error. The latest version of netinstall that worked and solved this issue was 7.9.2. https://download.mikrotik.com/routeros/7.9.2/netinstall64-7.9.2.zip The issue is with the vmlinux file that is sent in later versions. I use ISC-DHCP to serve up the image via TFTP. Every image after 7.9.2 ...

merlinthemagic7

Hi,

This is only a problem when using AWS T3 instances. T2 does not have this issue.
Also, you can change the instance to t2, update, change back to t3 and all working.

I have a ticket open on the issue, Support thinks this is an issue with the t3 hypervisor.

merlinthemagic7

Hi, Ran into this same issue on CHR instances in both GCP and AWS. Do an arp ping to the gateway and the console intermittently returned: 105 (no buffer space available ) Monitor traffic on the interface and there is tons of tx-queue-drops. Issue in both my cases was the license had not been applied...

merlinthemagic7

You can un-install the dude before updating to final v6

Then Update to final v6, and update to latest v7

Dont try to add the dude package after, it bricks the CHR instance, wont boot at all. Not even a LoaE01 error.

merlinthemagic7

Hi,

It appears you are correct. Packet capture shows e.g. arp arriving at the AP as broadcasts but at the client as unicasts.

Thank you.

merlinthemagic7

Hi, We use radius to place wireless users in VLANs. Question is: How is broadcast isolation maintained, when there are many different vlans in use on a particular BSSID? Does MT use GTK for encrypting broadcasts? We use "multicast-helper = full", so multicasts are converted to unicast and ...

merlinthemagic7

Make populating the 802.11k/v/r caches accessible to us the integrators. Everyone seems to be asking for centralized change management, but one can build that based on the current APIs. A controller in its purest form is orchestrating client access over a distributed system, while dealing with the i...

merlinthemagic7

Might as well document the process. Cant be the first, nor the last to run into these issues

merlinthemagic7

Hi, To fix a corrupt Dude instance, e.g. ran out of space. First download SQLLite3 prebuild for your OS: https://www.sqlite.org/index.html Stop the dude service, wait for it to finish stopping, it can take awhile, then download dude.db to a local folder. Place sqlite3.exe in the same folder as you d...

merlinthemagic7

@dekiel Yes MSTP is an open issue (no specific confirmation on edge propagation).

Here is another post: viewtopic.php?p=948438#p948438

Recommended work around is using RSTP for the time being.

merlinthemagic7

Back to rSTP for awhile

merlinthemagic7

This is the BUG on v6 and on v7 is fixed.

I believe you. Is there any document that talks about this and other changes? Where did you learn that MT considers this a bug to be fixed in V7? Like the title says, im looking for documentation.

merlinthemagic7

The correct behavior is on v7, the local (=discarded later) variables must not be treated as pointer, and updating local variable must not influence global variable, until is not directly wanted. Shared memory is nice, as long as there the proper locks in place. Is there a document i can read that ...

merlinthemagic7

Both work. Can someone share a code snippet where a global array is set, then an index from that array is set in a local and when the index is changed the global reflects this change. /system/script/environment/remove [find where name="TestVar"]; :global TestVar; :if ($TestVar = nil) do={ ...

merlinthemagic7

Hi Mrz, Lets make sure its apples to apples: /system script add name=script1 policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":global TestVar;\r\ \n:if (\$TestVar = nil) do={\r\ \n\t:set TestVar [:toarray \"\"];\r\ \n\t:set (\$TestVar->\"nbr1\"...

merlinthemagic7

Hi, Is it no longer possible to have a global variable update by reference in v7? :global TestVar; :if ($TestVar = nil) do={ :set TestVar [:toarray ""]; :set ($TestVar->"nbr1") [:toarray ""]; :set ($TestVar->"nbr1"->"count") 0; } :local nbr1 ($TestVa...

merlinthemagic7

Hi, See the same thing on 24x CRS328-24P-4S+ running v7.4. Its not just the local MSTP instance that suffers, edge events are propagated downstream as well. Same result except now every edge event results in all switches in the region quitting forwarding for a short while. The downstream propagation...

merlinthemagic7

Hi, See the same thing on CRS328-24P-4S+ running v7.4. Its not just the local MSTP instance that suffers, the events are propagated downstrem as well, but only if the switch has more than one path. Disable your alternate paths and the edge propagations go away. Local instance still bounces each time...

merlinthemagic7

Hi, To purge all historical data and only keep the devices / network maps this works. Just performed the purge on 6.49, zero issues after cleaning. My results are: 615MBytes -> 1.2MBytes First download SQLLite3 prebuild for your OS: https://www.sqlite.org/index.html Stop the dude service, wait for i...

merlinthemagic7

@merlinthemagic7

Thanks - where did you discover that? Is there any documentation?

Found by just testing, its not in the change log.

merlinthemagic7

HI,

$host is exposed in net watch script, at least as of 6.48.4. Does not appear since, timeout, interval or status are available.

merlinthemagic7

Hi, Appreciate the feedback! The reason every command is executed in full, instead of breaking it up into path / command, was because initially i was uncertain how the state of the command execution shell was maintained across method calls. It seems each { ... } is local in scope even for the shell,...

merlinthemagic7

Good tip on readabillity, thx. The idea behind a lib is that each method should abstract from the environment. E.g. like you said, v7 change in syntax, so the factory will check the version of ROS that is running and return an "instance" of the class that works. The method names, parameter...

merlinthemagic7

..... You show a scripts without descripton what they do... I check code and no details even in it. If someone must try your all scripts and build own info what each script do...then I even not try use them. Try the documentations folder, the vast majority of functions / tools are documented. Also,...

merlinthemagic7

Another one reinvented the wheel... Is better what I do on my Snippets: one simply clear action without interdipendency than can broke someting (or all) if something is changed on "shared" functions... It would seem to me that snippets strewn throughout your code means you are refactoring...

merlinthemagic7

While we wait for the builtin functions:

https://github.com/merlinthemagic/MTM-R ... -Scripting

Can manipulate strings, files, md5 hashing, create GUIDs etc.

merlinthemagic7

Hi, I made a library of functions that can all be invoked with an object like syntax. https://github.com/merlinthemagic/MTM-RouterOS-Scripting 100s of functions, like string split, trim, replace, to uppercase, lowercase, or file functions like getContent, setContent, create, delete. Overcomes lots o...

merlinthemagic7

Hi @TealFrog, I included your MD5 function (with attribution) in my ROS lib, There is no license on your work so let me know if you want it removed. https://github.com/merlinthemagic/MTM-RouterOS-Scripting /import flash/MTM/Facts.rsc; :global MtmFacts; :local md5Tool [($MtmFacts->"execute"...

merlinthemagic7

One liner: :local ifName ""; :foreach id in=[/interface bridge port find where role=[:nothing]] do={ :set ifName [/interface bridge port get $id interface]; :if ([/interface find where name=$ifName] = "" && [/interface list find where name=$ifName] = "") do= { /...

merlinthemagic7

If you need all entries: /system scheduler add interval=5s name=wlanRegsJob on-event="/system script run [ find where name=\"wlanRegTable\" ]" policy=read start-date=jan/01/1970 start-time=00:00:00 /system script add name=wlanRegTable policy=read source="foreach i in=[ /inte...

merlinthemagic7

Even some shorter, since you already are in correct location.
Code: Select all
:put [/ip dhcp-client get [find comment="ISP2"] default-route-distance]]

Right on, I always do absolute paths since tracking cwd in scripting introduces another level of complexity.

merlinthemagic7

I would guess it can use all frequency between 4920 and 6100. 5825-5825 is between this number so no extra line is needed. And for 2.4 GHz 2733-2483 can not be used, so therefor two lines. I see the same number as you on my hAP ac2 Thx for your reply. 2484-2484 also falls within 2312-2732, I mentio...

merlinthemagic7

:put [ /ip dhcp-client get [ /ip dhcp-client find comment="ISP2" ] default-route-distance ] ]

merlinthemagic7

You need an intermediate service to make it safe. e.g. click fires off ajax to a server that performs the addition to the ACL. If you dont mind exposing the address of your router: /ip firewall mangle add action=add-src-to-address-list address-list=knockKnock address-list-timeout=1d chain=prerouting...

merlinthemagic7

Im parsing the output of: /interface wireless info hw-info interface=wlanX Radios that are 2.4GHz only will report something like this: ranges: 2312-2732/5/b,g,gn20,gn40 2484-2484/5/b,g,gn20,gn40 tx-chains: 0,1 rx-chains: 0,1 extra-info: pciinfo:0x0, cid:0, gain:3 According to this post the format s...

merlinthemagic7

Given the push into 40 Gbps QSFP+ equipment, i assume MT is taking aim at enterprise and datacenter customers. With that in mind can we expect to see development work on the Openflow implementation?

merlinthemagic7

I assume this is what you are looking for: :local strData [ /tool fetch mode=https output=user url="https://ipinfo.io/ip" as-value ]; :local arrData [ :toarray $strData ]; :local varData ( $arrData->"data" ); :put [ $varData ]; i broke out the type changes into separate variables...

merlinthemagic7

I might be wrong here, but I believe crypto driver tries to use the same cpu core to process each packet/stream to which it was assigned by ethernet driver. If not mistaken, ethernet classificator for IPQ4018 was changed in the latest beta versions in testing channel to take in action source and de...

merlinthemagic7

That is just how IPsec is processed by this driver. It is not feasable to make a single IPsec stream/policy multithreaded as it will introduce latency, packet reordering and other unnecessary issues. You should still be able to achieve the advertised throughput if certain conditions are met, such a...

merlinthemagic7

You saw one core at 100% - but did You found what was using it? I mean, we know there is something saturating one core - but we don't know what it is. Can you test again, and post the usage by core/process? Here you are. This is the profile for a CPU that is handling an IPSec peer, total IPSec thro...

merlinthemagic7

We did a bunch more tests and found it appears CPUs are assigned based on a hash of the src and dst peers addresses. For example: Concentrator: yyy.yyy.yyy.253 Client WAN interface IP: xxx.xxx.xxx.252 results in CPU3 redlining under IPSec load. xxx.xxx.xxx.254 results in CPU0 redlining under IPSec l...

merlinthemagic7

There is a related post from emils (MT support): https://forum.mikrotik.com/viewtopic.php?t=97880&p=688672#p688540 [..] Please check the IPsec tunnel performance test manual page to see how maximum throughput numbers are achieved for each product. Adding or enabling any additional RouterOS feat...

merlinthemagic7

Hi, We need help understanding why our IPSEC performance is taking such a dramatic drop when deploying hardware assisted IPSEC units. We are getting ready to deploy ~300 hAP ac² units to remote offices around the country. They all trunk data via IPSEC to datacenters around the country, using CCR1036...

merlinthemagic7

bigcw, do you still need to automate the netinstall + custom script process?

I am thinking about turning our automated tool into a service, but maybe no one cares.

MM

merlinthemagic7

EDIT: I did a: /system reset-configuration no-defaults=yes then loaded the config in by hand again and this time it worked. I updated the device from 6.38.x to 6.42.3, it is possible the upgrade that enforces the change from the master-port syntax to bridges might have been the source of the issue. ...

merlinthemagic7

Does your radios have the ability to run the spectrum scan? I know you are looking for a dump of the wireless scan, but a spectrum scan will give you a more complete picture. I assume the challenge is reading the spectrum files generated by i.e.: /interface wireless spectral-scan 0 duration=20 range...

merlinthemagic7

Here is a site that will convert the spectral output file to a csv file.

http://chr-2.martinpetermadsen.com/Merl ... ectrumScan

merlinthemagic7

Know its old, but there does not seem to be any updates so far, so i thought i would contribute my workaround. Here is a site that will convert the spectral output file to a csv file. http://chr-2.martinpetermadsen.com/Merlin/Publictools/Preproduction/ROSSpectrumScan Update: I was sent a few files t...

Search found 61 matches