MikroTik

kos

My new RB1100x4 hung twice in last week. I had to make factory reset to return it to life both times

Does anyone have RB1100x4 working stable with this version?

Is it rev 2?
/system routerboard print
revision: r2

kos

Believe me Normis " clearly labeled INTERNET " is not enough for tipical residential Customers ;-D Is some cases they are even not able to find out an electrical plug... ;-D Rgds Deployed a FTTh solution in a golf estate, first question sked when customers calls in and say they have no in...

kos

Date of first post here is Jun 12, 2017. I think that a lot of tickets have been opened and until now nobody has been helped.

kos

Some of the worst reasons: No one cares about CCR1072 watchdog reboot: https://forum.mikrotik.com/viewtopic.php?f=3&t=122525&start=100 You bought a very nice product once and normally after that, you buy another one, which is in the same box, but consist only the half of the content: https:/...

kos

Traffic exists on a single 10G SFP port with a VLAN tag as well on top of this. Traffic consists mostly of small packets - TX/RX 65-127 is actually the largest number out of all of them. The cause of the watchdog reboots its probably some specific features/items indeed. CCR1072 -> Doing a total of ...

kos

CCR1072 -> Doing a total of 5G throughput with a lot of connections and 1 DHCP Server + IPV6 + DNS Server + SNMP + 33 Vlans + NAT (106 rules) + Firewall (46 rules) + Raw firewall (66 rules) + Routing (2776 routes) + 7 BGP peers and 2 instances + OSPF + Watchdog enabled - no queuing, no discovery, n...

kos

Probably you have to generate far more sessions in order to see the other cores working.

kos

Just FYI, Brand new one we just turned up.. Same issues as all 4 before it.. Watchdog reboots.. CG-NAT/firewall/10+gb traffic = reboot.. Sent a supout.. probably get the same answer as everyone else.. R Welcome to the club! Better don't waste your time contacting the support. I think that your only...

kos

I have asked similar thing once. No answer!

viewtopic.php?f=2&t=150484

kos

I disassembly older n younger hw, n they both have exactly the same hardware. They prevent downgrade for what purpose?
Did you contact support with this question?

Mikrotik devices can't be downgraded below factory-software version, which is the current ROS version at the time of manufacture.

kos

Long time ago, Long Term / Bugfix channel really good for mission critical system, because its already stable n tested. But now LT channel is just a name. In fact, the only latest real stable LT is 6.43.16. So why MT create LT n Stable channel if both unstable just like Testing channel? +1 That's w...

kos

Here you could find a link for 6.46.6:

viewtopic.php?f=2&t=161034

Also a long term version is available:

https://download.mikrotik.com/routeros/ ... 6.45.9.npk

kos

Already more than 50 pcs installed with last stable version 6.46.2 and all of them works good! Tested all of them and all CPU works!

Same with 6.46.2. Tested with two different hAPac^2s.
Do you use connection-tracking features or features that bypass it?

kos

No answer from Mikrotik? The new hAP ac2's already can't be downgraded! Should we stop using that model?

kos

It is just routing. Two routes in the routing table. That is not the point. The point is that the configuration is the same in both cases!

kos

Very, very bad finding about performance of hAP ac2 for all ROS version after 6.43.16. Triple checked - for clear routing in all new versions the load is distributed over only 2 cores, which results in half of the performance in comparison with 6.43.16!!! Test1 - ROS 6.43.16 clear routing of 700Mbps...

kos

Very, very bad finding about performance of hAP ac2 for all ROS version after 6.43.16. Triple checked - for clear routing in all new versions the load is distributed over only 2 cores, which results in half of the performance in comparison with 6.43.16!!! Test1 - ROS 6.43.16 clear routing of 700Mbps...

kos

Don't waste your time! The only thing that would save you is: /ip firewall connection tracking set enabled=no On the video below you could clearly see, that the problem doesn't depends on other configuration: https://www.youtube.com/watch?v=TAWQRaplnsM&t=26s Remember that some features depends o...

kos

viewtopic.php?f=3&t=122525&start=100

kos

please show the firewall section. did you enable FAST TRACK ? Fast track just bypasses conn-track. It is clear that without conn-track the device performs much better. Connection-tracking is mandatory in many setups! Mikrotik do not warn users that CCR1072 is not able to perform normal with connect...

kos

Go back to 6.38.3 and all will works fine... (close service ports for avoid vulnerabilities)

Absolutely the same with 6.38.3. I tested again. There is no working ROS version!

kos

disable connection tracking

So, connection-tracking ON is wrong configuration?

kos

So, could someone who has a working CCR1072 tell me what is wrong with the configuration on the video:

https://www.youtube.com/watch?v=J5arAJnI62I

kos

Can u record a video for this. I think if u do this Mikrotik will relate the topic.

Please refer to #103

I could make the conversation with Mikrotik support public, but it is very long and disappointing.

kos

you may be experiencing this problem:

viewtopic.php?f=3&t=122525&p=765099&hil ... ot#p765099

kos

Control Panel\Network and Internet\Network Connections > Properties of L2TP connection > Networking > IPv4 > Advanced > Use default gateway of remote network

By default it is checked!

kos

I wrote it before. It is clear: Reboot min requirements: - connection-tracking activated - clear routing between two interfaces - 1G bidirectional traffic, 600B packets (each interface handles 1G in each direction) If the packets are bigger (1500B): - ~2,5G bidirectional traffic If the traffic is mo...

kos

Pe1chl, it is an answer to question #3!

Yes, it is possible CCR1072 to run stable for many users, but keep in mind that all of them are vulnerable!

kos

viewtopic.php?f=3&t=122525&hilit=ccr

kos

Hi mkx, as you can read in first post, the packets are small (618B in fact). Profile of CPU usage shows networking . I have tested almost every single RouterBoard and no one of them is able to crypt even the quarter of the results that Mikrotik announced. According to RFC2544 the results are showing...

kos

Hi mrz,

could you tell me please what is wrong with the configuration below:

traffic-->------hAPac^2-1-----crypto------hAPac^2-2------->----

kos

Hello Mikrotik team, could you please provide us configuration by which we would accomplish the announced IPSec test result. I'm trying to crypt 200Mbps (one session, one direction, 512B UDP packets) by two hAP ac^2. I don't need any other features, just crypto. Your test results: RBD52G-5HacD2HnD-T...

kos

Has anyone notice one and the same mac address on sfp+ and wlan1 interfaces???

Just after upgrade and reset-config:

kos

viewtopic.php?f=3&t=122525&hilit=ccr&si ... &start=100

kos

Yes, when connection-tracking is disabled the device performs much better. When I contacted Mikrotik support about device reboots they requested access to device. I provided them a test setup with one CCR1072 to act as traffic-generator and another one acting as DUT. No configuration on DUT, just ro...

kos

Is there a way to prioritize HomePlug AV control packets?

kos

It not depends on features but traffic pattern and interface distribution. Reboot requirements: - connection-tracking activated - clear routing between two interfaces - 1G bidirectional traffic, 600B packets (each interface handles 1G in each direction) If the packets are bigger: - ~2,5G bidirection...

kos

CCR1072 price is 3050$!

kos

RouterOS traffic-generator.

Don't be an optimist, because Mikrotik support claims "There are no hidden fixes"

kos

Upgrading will not help! 1009 is better choice then 1036.

kos

If you try to disconnect/connect them a few times, I think that the problem will appear.

kos

The problem persist with disabled auto negotiation, even between two RB4011 devices.

kos

A problem with flapping 1G optical SFP interfaces. Two different vendors tested (not Mikrotik). There is no issue when using 10G interfaces.

kos

Your traffic is distributed over two interfaces. That is why you are not experiencing more frequent reboots. I am speaking about situation where two interface are loaded to 1G in every direction (1Gbps bidirectional forwarding). So 1Gbps entering sfp+1 and going out trough sfp+2, and in the same tim...

kos

Hi strods,

as I mentioned earlier, CCR1072 is not capable to handle 1Gbps bidirectional IMIX traffic and 25k sessions with conection-tracking enabled.
To achieve reboot there is no no need of any other configuration, except two IP addresses, two routes and connection-tracking enabled.

kos

Since ROS 6.43 there are entries setting ethernet speed to 100Mbps for every cooper not auto negotiated interface on every MT device. Is it normal?
.....
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
.....

kos

Since ROS 6.39.3 wrong route to VPN server address added when establishing client VPN connection using dongle or PCIe module: # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 10.2.1.1 1 1 DS 0.0.0.0/0 lte1 2 3 ADC 10.2.1.0/24 10.2.1.9 ovpn-out1 0 6 ADC 10.62.71.21/32 10.62.71.21 lte1 0 7 DS X...

kos

Hey, guys After upgrading CCR1072 and CRS317-1G-16+ to version 6.42.2, the kernel crashes have stopped. I hope they have really solved this great problem. Best Regards, Vagner Felipe Becker Unfortunately they are not! Neither in ROS 6.42.2 nor in any other ROS version!!! CCR1072 is not capable to h...

kos

If used in l2tp client "add-default-route=yes", then the routing table is not correctly created and VPN does not work (on ROS 39.3 everything ok). Example: ROS 6.40.8 l2tp client config: [admin@Dom-3G-Router] > /interface l2tp-client print Flags: X - disabled, R - running 0 R name="l...

kos

Hello, What is the correct size of RAM of cAP ac (RBcAPGi-5acD2nD)? On the web page the announced size of ram is 128MB, but if you perform /system resources print: uptime: 13m32s version: 6.41.2 (stable) build-time: Feb/06/2018 12:29:02 factory-software: 6.40.3 free-memory: 210.9MiB total-memory: 23...

kos

Hello,

Why the switch menu in Winbox is not available for these devices?

kos

Hi,
/queue interface configuration is not exportable using this version.

Search found 52 matches