MikroTik

mafiosa

Please bring mDNS repeater feature in Rosv7. It is a very important feature for home routers.

mafiosa

As confirmed by Mikrotik support setting cost is not available in beta 5 and will be added in next betas. Check the original post.

mafiosa

I have the following networks: 2a0e:b107:xx0::/46 2a0e:b107:xx4::/46 2a0e:b107:xx8::/46 2a0e:b107:xxc::/46 I have added these as blackhole using ipv6 route add dst=2a0e:b107:xx0::/46 blackhole. I have also created an address list with the following networks called bgp-network For route filter as of ...

mafiosa

OSPFv3 is still broken in beta5 - getting "wrong checksum" from everything, same as in beta4. Yes as soon as I add interface for ospfv3 the other routers stop receiving routes (6..48.1). The router keeps receiving ipv4 routes from other routers but ospfv2 stops sending out routes but not ...

mafiosa

From reading the v7 documentation, it seems like this will require a route to exist at the exact prefix length of the network you are trying to advertise. Is it still possible to announce an aggregate? Did you get ospfv3 working? As soon I add ospfv3 interface the ospfv2 loses the neighbors. I have...

mafiosa

To advertise prefixes from specified address list. Replaces "/routing bgp network" configuration of ROS v6

So I create an ipv6 address list and put the name of the address list there or explicitly mention the networks?

mafiosa

What is the use of output.network variable in BGP in v7.1 beta 5?

mafiosa

Hello everyone, where are the promised BGP filters?
This is the only thing that stops me from moving to v7.

same here buddy, would request mikrotik to update the v7 routing protocol status page in help.mikrotik.com ASAP

mafiosa

When can we expect Stable Release of ROS v7?????

2022 end I guess. Since 2019 it's been in beta.

mafiosa

+1 for IS-IS

mafiosa

I don't know what's wrong with mikrotik their ospf doesn't work well with huawei or VyOS at times.

mafiosa

So... Where can i set rpki filter ROAs validation??? I can't find "match-rpki" filter option i could use on v7.1beta3 RouterOS Version [admin@MikroTik] > routing/filter/rule/ .. -- go up to filter add -- Create a new item disable -- Disable items edit -- enable -- Enable items export -- P...

mafiosa

Yes exactly the reason why I stopped testing it yesterday.

Just received reply from support that filters are being reworked and do not work as of now. Will never test betas again unless they don't mention what's know to be not working.

mafiosa

I still can't get routing filters to work, so that OSPF would pick up the default route. I tried the same under beta3, but there OSPF didn't seem to consider the filters at all. Now with beta4, there is only: /routing/filter/rule add chain=ospf_out rule= . There is no match-prfx-value or similar, a...

mafiosa

Creating filters via winbox not working. Certain options in bgp crashes winbox. The AFI option in bgp templates in particular.

mafiosa

So we can now finally use winbox to configure BGP and OSPF?

mafiosa

Hello! I own an rb3011, recently I got my ASN and started some serious homelab experiments. So I had seen high cpu usage on the routerboard. I am trying out CHR on proxmox. The hypervisor config is AMD Athlon 200G and 8GB of ram, a 1TB harddisk. Proxmox version is 6.3-3. CHR version is latest v6.46....

mafiosa

Is there a bug on 6.48 for these devices?
Likely, yes. Read the above messages. So downgrade to long-term version.

Mikrotik should act fast and release a 6.48.1 in stable channel. This is unacceptable to have such a buggy stable release.

mafiosa

See here how to use routing filters:
https://help.mikrotik.com/docs/display/ ... ingFilters

When can we expect the next release of v7.1?

mafiosa

Does pcc loadbalance work in router osv7?

mafiosa

Does pcc loadbalance work in router osv7?

mafiosa

+1 for IS-IS and segment routing.

mafiosa

Hello if you don't mind can you modify the script so that it adds connected routes also to the address list. I think that will solve my issue. I mean both ospf and connected routes will be added to a single address list. Maybe you should exclude your LAN networks with another static list and prerou...

mafiosa

UPDATE: I have finally been able to manage it. Now I can use PCC load balancing while accessing the gre tunnel networks. Now waiting for Mikrotik to FIX port flapping issue on my RB3011 with 6.48 release. I added two mangle rule: 1 to mark new connections with destination address list ospf as vpn_co...

mafiosa

to automate that address list you can use something like :do { :foreach i in=[/ip route find ospf] do={ :local network [/ip route get $i dst-address]; /ip firewall address-list remove [/ip firewall address-list find where timeout=00:00:00]; /ip fire addr add list=OSPF address=$network timeout=00:01...

mafiosa

Since no embedded match condition like dst-address-type=accessible-through-dynamic-route is available, you have to use the address-list named ospf-destinations and populate it on your own, according to the actual address plan of your network. Maybe it is enough that it consists of all three RFC1918 ...

mafiosa

It seems you didn't get what @mbaute wanted to say, so I'll try to re-word it. The routes learned through OSPF are added to routing table called main , which is used to route packets without any routing-mark assigned. Those rules @mbaute has shown were your own rules from the export, and the sugges...

mafiosa

hi, add action=mark-connection chain=prerouting dst-address-type=!local \ new-connection-mark=abspl_conn passthrough=yes per-connection-classifier=\ src-address-and-port:2/0 add action=mark-connection chain=prerouting dst-address-type=!local \ new-connection-mark=sswl_conn passthrough=yes per-conne...

mafiosa

Here is my configuration. I am learning routes from gre/ipsec tunnels via OSPF but cannot reach them. Please help me out. I have PCC with port forwarding configured. # jan/09/2021 00:40:36 by RouterOS 6.46.8 # software id = 7HJJ-N0I9 # # model = RouterBOARD 3011UiAS # serial number = 783D066965C5 /c...

mafiosa

fix port flapping please for 3011 ASAP

mafiosa

@mafiosa make your life easily, play specially with ipsec with same vendors devices. I had unestablished tunnels with mikrotik on different version. When i upgraded to later version bum everything works well. i found dynamic routhing protocol are much more easy (i'm avoiding as much as possible) fo...

mafiosa

@mafiosa make your life easily, play specially with ipsec with same vendors devices. I had unestablished tunnels with mikrotik on different version. When i upgraded to later version bum everything works well. i found dynamic routhing protocol are much more easy (i'm avoiding as much as possible) fo...

mafiosa

I found out that with 3DES and SHA1 and 255 tunnel establishes and traffic moves through it. Having issue with other cipher combinations. tunnel between huawei and mikrotik.

mafiosa

Definitely not IP-ENCAP as GRE is a different protocol. Setting GRE is sufficient if Huawei supports that too, otherwise 255. The Huawei ACL 3000 in your other topic as linked by @msatter doesn't specify any IP protocol, hence 255 (which is the default if you don't specify any protocol) at Mikrotik...

mafiosa

In case of gre over ipsec what ipsec policy should I create? Does it need to be a 255(all) or 4(ip-encap) or 47 gre? I am configuring it between huawei and mikrotik. Huawei guide suggests to set up for ipsec acl for gre over ipsec.

mafiosa

After upgrading on RB3011 ports in switch group 1 (ether1-5) started flapping every 5 minutes. Rolled back on 6.47.8 and all seems ok. So 3011 users, install with care! ;) I have the same problem with eth1 and eth2 dropping every hour approximately on my RB3011, downgrading solved the problem as we...

mafiosa

Here is the IPSec config on a huawei AR1200. Please translate this to RouterOS settings! # sysname RouterA # acl number 3000 //Configure an ACL. rule 0 permit ip source 1.2.1.1 0 destination 1.2.2.1 0 # ipsec proposal rtb //Configure an IPSec proposal. encapsulation-mode transport //Set the encapsul...

mafiosa

has anyone tried to setup gre over ipsec tunnel between huawei router and mikrotik? tunnel enters established state but current bytes count only increases in one installed SA out of the pair.

mafiosa

Probably. Is there any option to generate some traffic in Mikrotik and send it through L2TP every 25 minutes? The user of the other Hap Ac² is saying that he didn't use the tunnel for 10 hours, because we only use it to authenticate one web page with the correct ip adress through mangle rules, but ...

mafiosa

Which features are missing in your opinion?

Unicast VxLAN tunnels would be of great use.
A better explanation of route filters.
Zerotier

mafiosa

Hello! Please help me configure PCC dual wan load balancing with port forwarding. Also I have 3 GRE/IPSec tunnels running OSPF and routes are learnt via ospf. I configured PCC with port forwarding. However, the subnets learnt via ospf over tunnels are inaccessible.

mafiosa

I am rebooting my chateau let12 at least twice a day, because of known dhcp issues. i guess i need to schedule a reboot every 6h or so.

I had this issue with HAP AC^2 but on opening support ticket they provided me with rosv7.1 beta 3 and that resolved this dhcp issue.

mafiosa

Is it possible to have is-is routing protocol in v7? I think that's good IGP for single domain large number of routes like around 100 nodes. Just saying!

mafiosa

EoIP is as simple to get working as it gets. I have created tunnels through NAT on a Mikrotik device, e.g. Mikrotik #1 -> [ NAT Mikrotik #2] -> Mikrotik #3. However, you need to be aware of MTU. Can you show your actual configuration? Tried with no nathi on one side and 1:1 nat in the other. Reduce...

mafiosa

I have seen similar issues: - moving a working ROS6.46 and ROS6.47 config to ROS7 (tried on beta2 and 7.0.1). Most Wifi clients do work, all the wired networks do work (So I know that the system works as I have some clients working correctly on all Wired, Wireless, VLAN, bridge i/f etc.). but : - A...

mafiosa

3 months yet next beta is not yet released! waiting for next release that would mitigate the wifi dhcp lease issue on hap ac2

mafiosa

It seems wi-fi issue has been fixed in 7.1beta3. Running it for a week without any issues.
PS: not yet available for everyone.

Beta 3? How did you get it?

mafiosa

anyone tried configuring BGP in ROS7.1beta2 I would love to see some examples :)

yes me too especially with filters. Also it's been 2 months since last beta release.

mafiosa

On Rosv7.1 b2 wifi clients on connecting to wifi are stuck at obtaining ip address. this issue is only solved on rebooting the router but it reoccurs everytime.

mafiosa

Anyone from mikrotik please have a look!

mafiosa

Hello my ISP provides me public ip via 1:1 NAT, gre and all vpns work fine but EOIP doesn't work. Can someone confirm me that EOIP works behind nat or not? Please, it is urgent as I have to remove mikrotik from my network if it doesn't

mafiosa

Can we expect the next beta version today as it is a Friday and over 2 months since the last beta release?

mafiosa

+1 for mDNS relay

mafiosa

+1 for mDNS atleast in ROSv7 we should get it

mafiosa

Hello my rb3011 keeps rebooting (not complete reboot but all lights keep blinking including LCD panel) if I plug in a gigabit capable device to ether 1 and leave it on auto negotiation. If I manually set the ether1 port to gigabit then on plugging the cable to ether 1 router shuts down until it is p...

mafiosa

RouterOS version 7.1beta2 has been released in public "development" channel! Can also confirm a DHCP issues on hAP ac2: wireless clients time to time are unable to get IP address and reconnect in a loop. WLAN interface disabling/enabling temporary "fix" the problem. Also confirm...

mafiosa

https://help.mikrotik.com/docs/display/ ... col+Status
seems like beta3 is almost there.

mafiosa

Lets hope to see 7.1 b3 or porbably 7.1 rc tomorrow xD Don't expect rc in for long time, they first need to include all functionality and have that tested for some time. Probably won't see a rc version this year. I would be surprised to see a stable version 7 next year. it is already 13 months sinc...

mafiosa

Lets hope to see 7.1 b3 or porbably 7.1 rc tomorrow xD

mafiosa

Is it possible to install switchOS on rb3011 because I found it written on RB3011 QSG that came in the box.

mafiosa

+1 for ip ospf mtu ignore

mafiosa

One year since v7 came into existence yet it is till in BETA. Hope to see RC by next year.

mafiosa

RouterOS version 7.1beta2 has been released in public "development" channel! What's new in 7.1beta2 (2020-Aug-21 12:29): !) added "bgp-network" output filter flag; !) added bonding interface support for Layer3 hardware offloading; !) added IPv6 nexthop support for IPv4 routes; !...

mafiosa

Put there system package only, reboot and after then install other packages you need.

I am doing that only but the package is 8mb while free space is 7.3mb so it is failing to get copied. In onld package I cannot uninstall as there are no extra packages. Only system package is installed.

mafiosa

Files menu contains anything? Which file did you copy? What packages are installed now?

Here are the screenshots!

mafiosa

Unable to upgrade to v7.1 due to low storage. Manually copied the file yet update fails.

mafiosa

After banging my head for last 2 days finally I figured out that it is mikrotik's fault.

mafiosa

FYI problem is only on P2P interfaces (not ospf interface type but actual P2P interfaces like l2tp etc. ) We will fix the problem as soon as possible. Hello I can confirm that with gre tunnel interface if I set network type to broadcast then the ospf routes work. However on enabling ospfv3 the cou ...

mafiosa

Please include gretap tunnel in version 7.1. eoip is not vendor neutral.

mafiosa

Hello my isp provides me static IP via snat. GRE works fine. Will eoip work behind SNAT? 115.187.xx.xxx is snatted to 10.28.115.18( ip on my router interface). Will it work?

mafiosa

FYI problem is only on P2P interfaces (not ospf interface type but actual P2P interfaces like l2tp etc. )
We will fix the problem as soon as possible.

Yes problem is with p2p as interface types and p2p tunnel interfaces

mafiosa

Does it start to work if you change interface type from point-to-point to broadcast?

No same issue even with point to point and broadcast!
Also for bgp nexthop is getting changed to :: which is invalid as a result all routes become invalid.

mafiosa

Show output of /routing/route/print detail [admin@MikroTik] > /routing/route/print detail Flags: X - disabled, I - inactive, F - filtered, U - unreachable, A - active; c - connect, s - static, r - rip, b - bgp, o - ospf, d - dhcp, v - vpn, m - modem, a - ldp-address, l - ldp-mapping; + - ecmp As af...

mafiosa

routes learnt from ibgp becomes invalid. [admin@MikroTik] /routing/bgp/connection> add remote.address=2a0f:9400:8017:32::2 local.address=2a0f:9400:8017:32::1 local.role=ibgp-rr template=ipv6-ibg connect=yes listen=yes [admin@MikroTik] /routing/bgp/connection> add remote.address=2a0f:9400:8017:20::2 ...

mafiosa

is ospf working properly now? can anyone confirm?

mafiosa

OSPF is broken. This should be ROSv7 alpha. basic features dont work simply!

mafiosa

anyone else who can confirm the above issue?

mafiosa

OSPF doesn't work. All routes learnt by ospf on v7 router is marked as invalid while other v6 routers are learning ospf networks via v7 but traffic is being dropped by v7 router.

mafiosa

I cannot get ospf working! Routes learnt on v7 beta8 router is marked as invalid. Is there any solution?

mafiosa

I have established ospf neighborship with other mikrotik routers yet the ospf routes learnt are marked as invalid on the router running rosv7 beta 8

mafiosa

I am facing same issues with ROS7 beta8. Anyone can help? Followed the documentation throughly

mafiosa

GRE tunnels don't seem to work! Sorry GRE works only the keepalive doesn't! After upgarding from v6.47 to v7beta 8 the tunnels stopped working. After reset same issue persists. WHen I turned off the keep alive it works fine. However the other end v6.47 works absolutely fine with keepalives on or off.

mafiosa

GRE tunnels don't seem to work!

mafiosa

An example of eBGP multihop configuration would do.

mafiosa

Where can I find ROSv7 documentation and configuration guide? Need to get bgp up in beta 8. Looking for documentation.

mafiosa

How do I get access to rosv7 documentation? Would be using on vultr vps for bgp. ROSv7 beta8 solves a lot of the issues that makes mikrotik usable.

mafiosa

It is not about the "worth" of connecting to the IX, its about the half baked nature of router OS.

mafiosa

So I can use the link local of eth1 interface as next hop using filter and remove the static route to the peer ip of vultr?

mafiosa

Thanks +100

mafiosa

Anyone got BGP multihop working with vultr? Routes become unreachable. BGP routes have scope of 40 and target scope of 30. What should I set scope/target scope for my bgp peer ip in static route? Note: default route is automatically added using RA and no entry is found on routing table. Talking abou...

mafiosa

@mrz @savage I am facing same issue with vultr. Please help me.

mafiosa

Been waiting since November! No vxlan in rosv6. Need both vxlan and bgp.

mafiosa

+1 for gretap. It is much required.

mafiosa

I cannot find ipv6 link local address in any ipv6 interface. Rebooting doesn't help too.

mafiosa

I too have this issue yet so solution! Mikrotik devices are so buggy! Will replace them soon with edgerouters.

mafiosa

I am terminating a vxlan on a mikrotik ros7. the vni is bridged with the an port. That port is connected to a hap ac2. on the hap ac2 port connected with the rosv7 routerboard, I add ipv4 (/24 mask) and ipv6 (/48 subnet) address. However, there is a strange problem! I can ping remote hosts within th...

mafiosa

can I use ipv6 over ipv4? that is vtep will be ipv4 but servers will communicate on ipv6.

mafiosa

Please add GREtap as it is widely accepted everywhere!

mafiosa

+1 for EIGRP

mafiosa

Please enable BGP on ROSv7 as I need VXLAN to peer with 4IXP and EVIX. EOIP doesn't work behind 1:1 nat and gretap is not supported on ROS. Please enable BGP on ROSv7 as VXLAN is the only way to peer with them!

mafiosa

Hello I can't get EOIP tunnel up for 4IXP. They provide VXLAN, EOIP and GREtap as connectivity medium. Mikrotik is becoming a poor decision it seems. Though GRE is working (not GREtap) EOIP tunnel never comes up. My isp provides me a static ip over 1:1 SNAT. Can someone tell me a way out of this mes...

mafiosa

Hello, I am using pcc with dual WAN and port forwarding! However, I have gre tunnels with R3 over ISP1 and bgp running with r3 and r1. However, can you suggest me how should I modify PCC rules so that I can access routes learnt via BGP with R3 using vlan 100 and 200. R2 is a huawei ar1220. r1 and r3...

mafiosa

Please implement some sort of SDWAN stuff. Zerotier can be a good start. Edge routers and openwrt have support for Zerotier!

mafiosa

When will rb3011 get ipsec h/w acceleration. L2tp+ipsec is getting one core @ 100% with 60mbps throughput. Also it was promised in ROS 7 which is the unicorn which only Normis has seen. Also UDP openvpn is also missing!

mafiosa

Please for heaven sake implement 2 feature:
Openvpn UDP,
Openvpn pre-shared key!
As Normis said all ROS unicorn aka 7.0 features are being ported back! Please backport these features! need them badly.

mafiosa

Steve is right. There is barely anything left in v7 that we haven't backported. Please enable openvpn udp support and also ability to manually enter ip for ovpn tunnel in pop profile that can be used for bgp next hop resolution.These two bugs are stopping me from using mikrotik for my DN42 network.

mafiosa

no one from this community can help? Mikrotik's openvpn implementation is so laughable.Seems like new alternatives need to be explored.

mafiosa

Hello! I have a DN42 network setup.First of all, I am really pissed with no udp support in openvpn. I own the internal ip block 172.22.146.0/25 I have peered with 2 peers.Here peering happens over openvpn links and BGP. peer 1 pushes me ip 172.22.146.1 and i add his ip 172.20.13.250 via ppp profile....

mafiosa

Yes seems that the bug is still not solved.RouterOS is so buggy!

mafiosa

Does RouterOS support SGMII sfps? These are 100mbps fiber sfps with gigabit connection with board.These are sfps with a phy build along with it.Main use of SGMII sfps is it works as a 100mbps fiber converter for gigabit only sfp cages. Anyone who can get me one to order? I found a brand called eopto...

mafiosa

Please add 100mbps sfp support and also confirm if ros supports sgmii sfp.

mafiosa

Does RouterOS support SGMII sfps? These are 100mbps fiber sfps with gigabit connection with board.These are sfps with a phy build along with it.Main use of SGMII sfps is it works as a 100mbps fiber converter for gigabit only sfp cages.

mafiosa

Does RouterOS support SGMII sfps? These are 100mbps fiber sfps with gigabit connection with board.These are sfps with a phy build along with it.Main use of SGMII sfps is it works as a 100mbps fiber converter for gigabit only sfp cages.

mafiosa

You should be good to go - the 3011 has the IPQ-8064, which supports SGMII.

Now I can't find Bidi sgmii sfps! Most are out of stock.If you can find then please tell me.1550tx/1310rx single mode single fiber

mafiosa

Have you seen this thread: viewtopic.php?f=2&t=122298#p606404

How is it relevant to sgmii sfp?

mafiosa

While it depends on the switch chip, I believe all do.
What Mikrotik to you have?

Rb3011uias rm

mafiosa

So finally after days and months of looking for a 100mbps sfp module for mikrotik routerboards! Finally I have found a "special type" of sfp that does fiber at 100mbps but makes connection to board at 1G as per previous post.Its called SGMII sfps. http://www.eoptolink.com/products/sgmii-sf...

mafiosa

Same problem with me.Kindly tell me did you find any compatible 100mbps sfp? I've contacted technician that used to work for ISP and he told me in private that it could be possible to use Mikrotik router as only router to ISP using sfp but that I would need confidential parameters to make that conn...

mafiosa

I am testing a pair of bidi SFPs. I get a link and also get traffic across the link (how may or reliable it is, I do not know), but these RB2011LS-INs are at loss as status of a sfp1 interface does always state: Auto Negotiation: done Rate: Unknown Full duplex is unchecked Some other items: PoE Out...

mafiosa

i'm bumping this question I have 100/100Mbit speed from my ISP and their FTTH modem-router is very bad and common options are locked so I need flexibility of my RB2011UiAS-2HnD-IN and was thinking of buying SFP module and connect RB2011 instead of ISPs modem-router - will that work? also are only S...

mafiosa

In short - no, you need very specific SFP transceiver for that Long: SFP cage connection to CPU supports only 1,25G (1G) data transfer rates. So SFP transceiver must have support of 1,25G (1G) connection to board But it is possible to find SFP transceiver that do laser at 100Mbps, but supports 1G c...

mafiosa

Is the cable faulty?
Cable test:
Status:NO LINK
normal / 0m
open / 93m
open / 95m
open / 91m

mafiosa

yes ether 5 is having ether 2 as master port.Is it the reason?

mafiosa

I am facing a weird problem! My ether2 interface on my rb3011 is always showing running even when no cable is plugged in! I am on latest bugfix firmware.Can anyone hep me out.

mafiosa

Can anyone find a custom sfp with 1.2G link to the board and 100mbps optics? I think that would surely work!

mafiosa

Please help me decide!!!! I want to replace pfsense as our core router/firewall with mikrotik. I am confused whether to go with CCR1036 12G 4S or CHR p1 license and a server.Our main requirements are: 1. 50-60 pcs spread over 5 subnets. 2. Campus wifi usermanager for 500 user base but 60-100 max act...

mafiosa

Please help me decide!!!! I want to replace pfsense as our core router/firewall with mikrotik. I am confused whether to go with CCR1036 12G 4S or CHR p1 license and a server.Our main requirements are: 1. 50-60 pcs spread over 5 subnets. 2. Campus wifi usermanager for 500 user base but 60-100 max act...

mafiosa

I am planning to start a free youtube only hotspot in my locality.I have multiple networks on my router.I want to allow only youtube.com i have the two ip blocks that I want to allow i.e., 216.x.xxx.xx/19 and my ISP's GGC 202.78.242.xx/24.How do I do that without web proxy?

mafiosa

our isp uses private ip addresses.However when we login we get a public ip dynamically assigned.I have a static ip 150.129.xx.xxx as my public ip.I just out of curiosity want to configue a bgp instance and peer with team cymru.I use the private AS65515. As per an email conversation team cymru provid...

mafiosa

I have 2 lan networks 192.168.23.0/24 and 192.168.11.0/24 and 2 wans 172.16.34.254/26 and 192.168.168.5/29 . Someone please tell me what mangles should I use? please help me out.

mafiosa

I have purchased it.My ISP provides connection via 10/100 MROtek unmanaged media converters (WDM). Media converter at my end is 1550tx/1310rx.Will I be able to use a1.25G sfp to replace the media converter at my end?Internet connection speeds about 60mbps.ISP is very stubbon and won't change to sfp ...

Search found 131 matches