Community discussions

Search found 60 matches

  • 1
  • 2
by netflow
Tue Jun 04, 2019 11:12 pm
Forum: General
Topic: PPP Profile InterfaceList [Solved]
Replies: 1
Views: 125

Re: PPP Profile InterfaceList [Solved]

My very bad, I forgot to adapt one of my prerouting rule in the FW.
by netflow
Tue Jun 04, 2019 10:57 pm
Forum: General
Topic: PPP Profile InterfaceList [Solved]
Replies: 1
Views: 125

PPP Profile InterfaceList [Solved]

Is
ppp profile interface-list
working to add dynamically interfaces into FW rules ? And if yes since which version ?
Running 6.44 and while I correctly see the dynamic interface into the list for some reason it seems not to consider it in the FW rules...
by netflow
Sun May 26, 2019 3:06 pm
Forum: Forwarding Protocols
Topic: L2TP+ipsec speeds
Replies: 7
Views: 851

Re: L2TP+ipsec speeds

I obtain comparable measures using iPerf2 (using stresslinux_32bit_11.4.i686-0.7.106.vmx) so I won't repost the table as there are no significant changes to results highlighted earlier. The only new interesting part was to run iPerf using -m switch. ROS 'iPerf -m' Mode MTU MSS MTU Routing 1500 1448 ...
by netflow
Wed May 22, 2019 12:33 am
Forum: Forwarding Protocols
Topic: L2TP+ipsec speeds
Replies: 7
Views: 851

Re: L2TP+ipsec speeds

As I mentioned above the MRRU is the slowest of all options which seems normal to me. It is not designed to solve speed issues. Fragmentation is to avoid. I feel a bit puzzle why IPSec alone without adjustments to MTU did not exhibited any comparable slowness. I used BTest server for practical reaso...
by netflow
Sun May 19, 2019 6:25 pm
Forum: Forwarding Protocols
Topic: L2TP+ipsec speeds
Replies: 7
Views: 851

Re: L2TP+ipsec speeds

Can you test L2TP ipsec with Multilink Protocol activated - MRRU=1600 on both sides ? Don't use tcp mss clamping - ppp profile set=no on both sites too !
Unsure how to use that setting properly, however with MTU=1420 and MRRU=1600, no clamp in FW nor PPP, I got about 5% less than with MTU=1460.
by netflow
Sun May 19, 2019 4:36 pm
Forum: Forwarding Protocols
Topic: L2TP+ipsec speeds
Replies: 7
Views: 851

Re: L2TP+ipsec speeds

After lowering the MTU/MRU to 1420 for L2TP+ipsec to avoid fragmentation, I have some expected results:
L2TP+IPSec	280	280	120/120	208	200	80/80
by netflow
Sun May 19, 2019 3:07 pm
Forum: Forwarding Protocols
Topic: L2TP+ipsec speeds
Replies: 7
Views: 851

L2TP+ipsec speeds

I did some throughput measurements using 4 identical VirtualBoxes running RouterOS 6.44.3 with 1 CPU hosted on the same Xeon with 12 cores. Basically L2TP tunnel is as fast as direct routing (even sometimes slightly faster). Hence counting reduction of less than 5%. IPSec alone bring a 20-25% throug...
by netflow
Mon Jan 07, 2019 9:05 pm
Forum: Beginner Basics
Topic: same VLAN id for both WiFI and ethernet breaks WiFi on hAPac
Replies: 5
Views: 307

Re: same VLAN id for both WiFI and ethernet breaks WiFi on hAPac

This can be marked as solved I believe.
CPU port needs to be involved as it is enabling the link with the bridge. You can omit only in VLAN that are concerning pure ethernet forwarding ports.
by netflow
Fri Jan 04, 2019 3:16 pm
Forum: Announcements
Topic: Product comparison matrix
Replies: 30
Views: 4289

Re: Product comparison matrix

It will be nice to include ethernet test results as well.
by netflow
Fri Jan 04, 2019 12:33 pm
Forum: RouterBOARD hardware
Topic: hAP AC2 availability
Replies: 26
Views: 4034

Re: hAP AC2 availability

Seems like this device is exhausted everywhere. @normis could you please explain us why MT is no longer providing any distributor with this product ? If demand is high so must be production, so what is the problem, chip or sub-component availability ?
by netflow
Sat Dec 22, 2018 6:58 pm
Forum: RouterBOARD hardware
Topic: ARM based new goodies on the horizon
Replies: 76
Views: 13783

Re: ARM based new goodies on the horizon

3x3 its rarely used and make the equipment far more expensive and power hungry Well hAP AC2 is announced using 3W more and does not even have an SFP socket which is itself allowed to draw up to 2 Watts. It is a completely different product category, hence the notable price drop. Triple and quad cha...
by netflow
Mon Dec 17, 2018 11:19 pm
Forum: Beginner Basics
Topic: Block a MAC address
Replies: 7
Views: 618

Re: Block a MAC address

Wireless ACL is enough to block connection.
To block the connection attempt you need to either access the settings of the printer or unplug it ;-)
by netflow
Sun Dec 09, 2018 5:59 pm
Forum: Beginner Basics
Topic: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]
Replies: 25
Views: 16502

Re: Very slow WiFi download speed. (MikroTik hAP ac2) [SOLVED]

I had the same problem. Upgraded to 6.42rc52, and get acceptable WiFi throughput. But now I am experiencing complete WiFi blackouts at 5Ghz in some irregular basis. It can be for 10 seconds after some 30 minutes, sometimes for 1 minute and more. The feeling is like somebody would run jammer at 5Ghz...
by netflow
Wed Dec 05, 2018 8:02 pm
Forum: General
Topic: It's Mikrotik warehouse burned ???
Replies: 15
Views: 2944

Re: It's Mikrotik warehouse burned ???

Thanks Normis, will look elsewhere then ;)
by netflow
Wed Dec 05, 2018 12:35 am
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 561
Views: 397852

Re: Public-Mikrotik-Bandwidth-Test-Server(s)

For me it works about 20 sec, then traffic is completely blocked for XX minutes. I am not sure if it is by design but this turns out to be a bit short to do any sort of stability controls. Tested using UDP with a 100mbps symmetrical connection. My bad actually, I have an automatic synflood rule tha...
by netflow
Wed Dec 05, 2018 12:17 am
Forum: General
Topic: Public-Mikrotik-Bandwidth-Test-Server(s)
Replies: 561
Views: 397852

Re: Public-Mikrotik-Bandwidth-Test-Server(s)

Hi Tom, This is a great service, thanks for offering to the community. For me it works about 20 sec, then traffic is completely blocked for XX minutes. I am not sure if it is by design but this turns out to be a bit short to do any sort of stability controls. Tested using UDP with a 100mbps symmetri...
by netflow
Tue Dec 04, 2018 11:54 pm
Forum: General
Topic: It's Mikrotik warehouse burned ???
Replies: 15
Views: 2944

Re: It's Mikrotik warehouse burned ???

One Swiss distributor still claims that RBD52G-5HacD2HnD-TC is on back order until mid January because of that fire. Is the capacity really resumed to normal conditions ?
by netflow
Mon Sep 17, 2018 11:58 am
Forum: Announcements
Topic: Newsletter #84
Replies: 47
Views: 12456

Re: Newsletter #84

I am testing a file transfer using OVPN between 2 RB2011 and the transfer literally sucks (Less than 1 Mbps of throughput) when we have 25 Mbps total BW between the 2 endpoints. I understand that the new RB4011 has IPSec HW acceleration but I want to run OpenVPN tunnels instead of IPSec ones. Pls a...
by netflow
Sat Sep 08, 2018 8:37 pm
Forum: Scripting
Topic: disable rules by comment [SOLVED]
Replies: 27
Views: 1490

Re: disable rules by comment [SOLVED]

To answer your first question, why not simply use?
/ppp secret disable [find where comment>="1" and comment<="720"]
by netflow
Sat Jul 28, 2018 2:24 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: New IP cloud is coming.
Replies: 83
Views: 25292

Re: New IP cloud is coming.

Free dyndns per device. What more can u ask Well some sort of control and completely brand agnostic solution... Not to say there are hundreds of more important features requests than IP Cloud or Kids Control https://forum.mikrotik.com/viewtopic.php?f=1&t=45934 to tackle first and clearly most of th...
by netflow
Fri Jul 27, 2018 9:51 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: New IP cloud is coming.
Replies: 83
Views: 25292

Re: New IP cloud is coming.

I am amazed by the amount of responses and effort from MT team for a set of 2 features that can easily be replaced by ntp and duckdns, both being better alternatives.
by netflow
Sat Jul 21, 2018 12:06 am
Forum: SwOS
Topic: CRS328-4C-20S-4S+ SwOS mode bugs ?
Replies: 6
Views: 1572

Re: CRS328-4C-20S-4S+ SwOS mode bugs ?

CRS328 series shares same CPU as CRS326. Not other brand seems to have picked the same HW. Reading through the forum I see problems similar to yours everywhere and this give me the clear impression they are not production ready yet. I sometimes even wonder how MT managed to bench them at all. Althou...
by netflow
Tue Jul 17, 2018 10:36 pm
Forum: SwOS
Topic: CSS326 slow SFP+ speed
Replies: 24
Views: 6122

Re: CSS326 slow SFP+ speed

Not sure if that could help someone, but reading the spec sheet of the Marwell, the 10Gb ports are rated as uplink for stacking or cascading providing up to 48 non blocking ports. So I think it was designed to let pass 10x 1Gb without much issue but not to provide decent downscaling support from 10G...
by netflow
Fri Jul 06, 2018 10:22 pm
Forum: Announcements
Topic: v6.42.5 [current]
Replies: 124
Views: 22007

Re: v6.42.5 [current]

Does anyone else observe higher than usual TX drops with this release on RB760Gr3 ? In fact, I observe TX drops increase even with almost no traffic. Got >100k packet drops after 48h whereas I used to have only a few over monthes with 6.42.2 before. This seems to affect only VLAN interfaces below p...
by netflow
Wed Jul 04, 2018 10:22 pm
Forum: Announcements
Topic: v6.42.5 [current]
Replies: 124
Views: 22007

Re: v6.42.5 [current]

Does anyone else observe higher than usual TX drops with this release on RB760Gr3 ? In fact, I observe TX drops increase even with almost no traffic. Got >100k packet drops after 48h whereas I used to have only a few over monthes with 6.42.2 before. This seems to affect only VLAN interfaces below ph...
by netflow
Mon May 28, 2018 7:43 pm
Forum: Announcements
Topic: Winbox 3.14 released!
Replies: 77
Views: 23720

Re: Winbox 3.14 released!

*) make winbox self upgrade check .exe signature; I just tested this.. it checks for a signature, but not Mikrotik's signature! I sign it myself and winbox blindly runs it :-? https://imgur.com/7k8e09p Is that really certificate based ? Or simply some MD5 hash ? In the later case this should not be...
by netflow
Sat May 26, 2018 9:56 am
Forum: Announcements
Topic: v6.42.3 [current]
Replies: 80
Views: 22328

Re: v6.42.3 [current]

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it? A simple reboot usually removes those invisible left overs. If still not enough, a trick I use on an overloaded 941-2nD. Push manually first only some core packages (system and as much ...
by netflow
Sun May 20, 2018 7:30 pm
Forum: RouterBOARD hardware
Topic: What can be improved in hEX (RB750Gr3)?
Replies: 22
Views: 3510

Re: What can be improved in hEX (RB750Gr3)?

hEX S is out. I would have preferred with 2 SFP ports but at least the SFP lineup continues to expand. Terrific price point when you think how capable is already the RB750Gr3. Good job MT !
by netflow
Sat Apr 28, 2018 6:46 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Interface lists include/exclude
Replies: 1
Views: 549

Interface lists include/exclude

Hi Mikrotik, I like the include/exclude feature in the interface lists, but I believe it should be both improved and fixed: A) Improve: Mark all entries coming from include feature with "D" (dynamic) B) Improve/Fix: Make sure recursive lists works (eg: if we have list L1 include list L2 include list...
by netflow
Sun Apr 22, 2018 4:26 pm
Forum: Announcements
Topic: v6.42 [current]
Replies: 147
Views: 26912

Re: v6.42 [current]

I'm pretty happy with this version so far. :) Speedtest history shows the difference - upgrade at 4:10am. No configuration changes. Sadly this will not protect my beloved RB from replacement - I have available 500Mbps downlink since 2 weeks. ;( I am really surprised you don't get more out of this d...
by netflow
Tue Apr 10, 2018 8:37 pm
Forum: Announcements
Topic: v6.41.4 [current]
Replies: 37
Views: 9491

Re: v6.41.4 [current]

@strods I have juste installed 6.42RC56, so far so good, no issue with LTE on USB. Thanks.
by netflow
Mon Apr 09, 2018 11:11 pm
Forum: Announcements
Topic: v6.41.4 [current]
Replies: 37
Views: 9491

Re: v6.41.4 [current]

Sadly still no fix for the issue introduced with 6.41.3 with LTE modem Huawei ME909s-120 connected through USB port.
by netflow
Sun Apr 08, 2018 2:00 pm
Forum: SwOS
Topic: CSS326 slow SFP+ speed
Replies: 24
Views: 6122

Re: CSS326 slow SFP+ speed

I don't understand how could this happen and how the distance could determine the speed of a connection through such a switch. I attached some examples. Stupid question: where can i find the 2.3 swos firmware? On the Mikrotik website there is only an archive for routeros versions, not for the swos....
by netflow
Sat Mar 31, 2018 3:23 pm
Forum: RouterBOARD hardware
Topic: CRS317 10G -> 1G traffic slow, everything else fine
Replies: 21
Views: 6796

Re: CRS317 10G -> 1G traffic slow, everything else fine

Have not such devices yet, however interested by any findings.
Have you tried using RED queues https://wiki.mikrotik.com/wiki/Manual:Queue#RED ?
Good resource for common problems listed here: https://fasterdata.es.net/network-tunin ... ze-issues/
by netflow
Fri Mar 30, 2018 5:53 pm
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 30193

Re: v6.41.3 [current]

Anybody experiencing the extremely frustrating bug whereby you go to add an interface to a bridge and it just disconnects you from Winbox?? What makes you think it is a bug ? If you play with the interface you are connected with, you can expect that behavior. Be sure of what you do, do not activate...
by netflow
Sun Mar 25, 2018 2:30 pm
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 30193

Re: v6.41.3 [current]

Problem with DHCP Server in this (6.41.3) release! I periodically see series warning messages from some clients in Log. Mesages have the form: dhcp_server offering lease 192.168.88.X for XX:XX:XX:XX:XX:XX without success . I have the same with an HP Printer connected over wifi through a non MT devi...
by netflow
Sun Mar 25, 2018 2:20 pm
Forum: Announcements
Topic: v6.41.3 [current]
Replies: 139
Views: 30193

Re: v6.41.3 [current]

With 6.41.3, LTE interface on USB is not longer passing any packets after running for example a speed test. Have to power reset the USB to get it back to life.
As I cannot work like this, I downgraded to 6.41.2 which is behaving properly.
by netflow
Fri Mar 23, 2018 9:16 pm
Forum: Announcements
Topic: Securing your device is important
Replies: 31
Views: 9914

Re: Securing your device is important

If you are familiar with mikrotik ros its a matter of 5-10 mins to secure your router with the above recomendations. yes it is, but the problem is not the people who are familiar with RouterOS or security. the problem is the users who buy a device, plug it in, look on youtube for a movie made by an...
by netflow
Sun Mar 11, 2018 8:06 pm
Forum: General
Topic: RB750Gr3 Individual VLANs per Port [SOLVED]
Replies: 11
Views: 1914

Re: RB750Gr3 Individual VLANs per Port [SOLVED]

Hello and welcome to the beauty of routeros. Setup VLAN interfaces for each physical ethernet ports you want to use. Add proper IP addresses by attaching to VLAN interfaces you just created. Then when ready remove the ethernet ports from the default bridge. This will cut your actual connexion but ho...
by netflow
Sat Feb 24, 2018 2:07 pm
Forum: General
Topic: VLAN in new "Bridge Only" config
Replies: 64
Views: 16270

Re: VLAN in new "Bridge Only" config

Reading #13, I understood you bridged wifi and ethernet. I guess that was for simplicity. Then you saw unexpected traffic on wifi and decided for whatever reason to solve it by creating VLANs. Seems you are just making trials but keep ignoring some hardware facts. You cannot avoid CPU when going to ...
by netflow
Thu Feb 22, 2018 9:19 am
Forum: General
Topic: VLAN in new "Bridge Only" config
Replies: 64
Views: 16270

Re: VLAN in new "Bridge Only" config

What you do not have in Mikrotik unless you permit vlan-filtering in bridge configuration or do some middle level wizardry on switch configuration (and I deeply trust you should not do both unless you are really sure what you do) is filtering of VLANs on ports. So if some neighbouring equipment dec...
by netflow
Wed Feb 21, 2018 12:32 am
Forum: General
Topic: VLAN in new "Bridge Only" config
Replies: 64
Views: 16270

Re: VLAN in new "Bridge Only" config

You are right, hence the current move to bridge with automatic optimizations.
From a conceptual prospective understanding bridge feature is enough and you may skip the switch feature completely.
by netflow
Tue Feb 20, 2018 10:23 pm
Forum: General
Topic: VLAN in new "Bridge Only" config
Replies: 64
Views: 16270

Re: VLAN in new "Bridge Only" config

I am a software guy. Let me explain how I see it, even after 6.41: Switch is to pilot the hardware switch. This is your best bet to control/achieve top notch performance. Bridge was (initially) pure software to realize non homogenous switches (L2 link between wifi, ethernet, vpn, ...). They both hav...
by netflow
Fri Aug 18, 2017 6:35 pm
Forum: Beginner Basics
Topic: How to type AT Command with ? char in CLI
Replies: 2
Views: 817

Re: How to type AT Command with ? char in CLI

Thanks perfect !
by netflow
Thu Aug 17, 2017 9:22 pm
Forum: Beginner Basics
Topic: How to type AT Command with ? char in CLI
Replies: 2
Views: 817

How to type AT Command with ? char in CLI

How do you type the following command in CLI ?
 /interface lte at-chat lte1 input="AT+CCLK?"
As soon as type or copy anything that as a "?", I got the inline help...
Alternatively how to disable this help on the question mark? I can always type "help" if I need it back.
by netflow
Wed Aug 02, 2017 8:47 pm
Forum: Announcements
Topic: v6.40 [current]
Replies: 101
Views: 22073

Re: v6.40 [current]

huawei lte modem me909s-120 in 6.40 stops data transfer every 10-20 mins, it is active, no warning logs but wan is down the same modem worked fine on <= 6.39.2 Issue on my side with me909s-120 already after approx. 20 sec. Noticed port USB1 @ 9600 bauds appeared. Downgraded to the thrustworthy 6.39...
by netflow
Sat Mar 11, 2017 3:17 pm
Forum: RouterOS v6 RC and v7 BETA
Topic: Feature Request: Multipath TCP
Replies: 11
Views: 3609

Re: Feature Request: Multipath TCP

+1

The fact it is still fairy new is not a reason not to consider. RouterOS team is working hard to solve (all) stability, compatibility and performance issues. Adding top notch features will be the next logical step in order to gain traction in enterprise.
by netflow
Sun Feb 26, 2017 11:45 pm
Forum: General
Topic: RAW table rules will decrease L2TP/IPsec throughput capacity
Replies: 7
Views: 784

Re: RAW table rules will decrease L2TP/IPsec throughput capacity

Well you do filter by content...
by netflow
Thu Feb 16, 2017 9:55 pm
Forum: Scripting
Topic: getting LTe info in V6.36
Replies: 5
Views: 1148

Re: getting LTe info in V6.36

RSSI is visible in the log for me (Firmware 3.36, ROS 6.38.1)

Image
by netflow
Wed Feb 15, 2017 8:23 pm
Forum: RouterBOARD hardware
Topic: Firmware 3.36
Replies: 5
Views: 1571

Firmware 3.36

Hi Mikrotik,

I just noticed the firmware 3.36 is available for my mips routers. Could you please update http://wiki.mikrotik.com/wiki/RouterBOOT_changelog so that we know what we can expect moving from 3.33 :)

Thanks.
  • 1
  • 2