MikroTik

StubArea51

Two questions: 1) Have you run an RFC2544 test on the base RF link without MPLS to see if it passes? 2) What are your MTU settings for: L2MTU, L3 MTU and MPLS MTU on the MikroTik routers? This is a presentation I did for WISPs that want to use MPLS at the 2016 US MUM https://mum.mikrotik.com//presen...

StubArea51

any update on this MikroTIk?

StubArea51

So with the 6.41rc releases Mikrotik have added "MPLS Forwarding" to the CRS317. In my opinion just being able to forward MPLS packets based on the label is pointless. It wont make me buy the CRS317 over any other plain Layer2 switch. The MPLS features that would make me buy a CRS317 over...

StubArea51

Definitely modular PS units. In most cases, we will do all AC or all DC.

StubArea51

Great troubleshooting work guys! I'm anxious to see the results of this fix as we have been planning to use CHR for a number of MPLS applications.

StubArea51

Which VNIC are you guys using in VMWARE. VMXNET3 or something else?

StubArea51

Nice work and thanks for the info. We've been doing more and more with BFD in MikroTik now that it's been patched.

StubArea51

I'm interested to know the answer to this as well.

StubArea51

What version of RouterOS are you seeing this on?

StubArea51

As far as RouterOS version, I advise all of my clients to run bigfix code as it is much more stable in production. One other practice that can contribute to OSPF/BGP instability is running a lot of mismatched versions on the routers. 6.37.5 bugfix has worked well for a lot of our clients that depend...

StubArea51

sir, in Cisco you have a "sh tech" command that we can actually analyze - does Mikrotik have any similar commands? I'm a newbie with Mikrotik and I was hoping I could check something out of the normal "log" files in Mikrotik that would somehow give me a clue as to what is causin...

StubArea51

The CCR1072 is best utilized for large volumes of IP transit 72 cores and 16GB RAM, just screams BGP router rather than packet forwarder. Shame it doesn't live up to that. I'll look in to BIRD as well, I was thinking of creating a looking glass anyway. It actually handles BGP very well in network d...

StubArea51

I'm inclined to agree with Savage. As a route server, you'll probably want to use BIRD or Free Range Routing.

The CCR1072 is best utilized for large volumes of IP transit - it does that job very well.

StubArea51

Hello, I am trying to configure one of my clients with a public IP that is reachable from the web. He is at a remote site on the LAN side of my Mikrotik router. He has a private ip currently. I have tried so many different NAT rules to accomplish this. I have is router bound to a private IP in the ...

StubArea51

Actually on MikroTik it doesn't need to be in the routing table at all to be originated No, but it still needs to be originated somewhere. If it hasn't been explicitly configured, BGP won't advertise them. I'm just trying to find out from the OP how those /24 blocks are being generated, as all he's...

StubArea51

Has any of your configuration changed?

If not, i'd disable and re-enable the peering and then upgrade to the latest bugfix version of ROuterOS

StubArea51

Do all four /24 from that block exist in your local route table as /24? BGP won't advertise a prefix unless it has an exact match present in the routing table. That is certainly the behavior of some routing platforms like Cisco, but MikroTik can advertise a prefix without it existing in the routing...

StubArea51

You can't do this with OSPF, hence, Open Shortest Path First in the name. All traffic will traverse R6, unless the path becomes unavailable. If Cust2 to Cust4 somehow is tunneled to R3, possibilities opens up with OSPF and then it could become interesting though. At best, you're looking at VPLS Tun...

StubArea51

Good find...thanks for the info!

StubArea51

That's an interesting point, have you tried replicating the topology with CHRs in a virtual environment like GNS3? it would be interesting to see if it works there

StubArea51

By default, most routing implementations will not accept any advertisements that have their own AS in the path. Also, the router won't advertise the routes it learns from one peer back to the same peer.

That said, it's generally a good idea to use BGP filters as soon as you are able to put them in.

StubArea51

Setting one side to auto and then the other to hard coded causes duplex mismatch on 100 Meg links but should work on 1 gig links. Ideally you want to match on both sides. Have you tried any other versions of RouterOS to see if there is any difference? Another easy test is to put a cheap dumb switch ...

StubArea51

What happens if you hard code speed/duplex on each side to 100/Full or 1000/Full ?

StubArea51

Hello, We have recently bought a ddos protection from a company. They require a GRE tunnel and a BGP peer connected to them. Right now we have two Mikrotik routers each with a BGP connection to our ISP. The problem is that i want incoming traffic to pass through the ddos service provider ( new BGP ...

StubArea51

You also want to make sure the switch in between supports at least a 1530 byte frame size to be able to leverage all the features of MPLS like VPLS. Most switches do, but there are still some out there that don't

StubArea51

What RouterOS versions have you tried?

StubArea51

It's typically due to better clock speeds on a single core for a VM since the process is still confined to a single core. The Tilera family of processors is optimized to move packets. BGP has a heavy computational load with large route tables and so Intel x86 chipsets are able the chew through the d...

StubArea51

I just ran into this issue when trying to use IPv6 on Windows 10 with GNS3. As soon as I enabled the IPv6 package, the CLI would hang. Here is what I did to resolve it: Increase the memory for the VM from 128MB to 256MB Select "legacy networking mode" in GNS3 and use the Legacy paravirtual...

StubArea51

I'd probably be doing a packet capture at this point and reviewing the peering conversation on each side. That will probably yield some insight.

StubArea51

I respectfully disagree. Those chipsets from Broadcom are fully functional and capable routers. I was hoping Mikrotik could jump into the bandwagon to disrupt Cisco/Juniper/Nokia and bring down the overall costs of networking. Eventually I'd like to start an ISP business, but well.....equipment isn...

StubArea51

I respectfully disagree. Those chipsets from Broadcom are fully functional and capable routers. I was hoping Mikrotik could jump into the bandwagon to disrupt Cisco/Juniper/Nokia and bring down the overall costs of networking. Eventually I'd like to start an ISP business, but well.....equipment isn...

StubArea51

If I remember correctly, inter AS MPLS will work as long as you enable BGP multi hop over OSPF and run LDP between the two peers. While this isn't the same solution you using with the Cisco routers, it should allow you to exchange labels. Also, VRF leaking does work. We've built a number of producti...

StubArea51

Great thread!

25 and 40 gig would be my focus. I'll post a longer response when I have a spare minute to think about specific port configurations. Right now, I've got to get ready for the US MUM

StubArea51

What RouterOS version is this? Have you tried any others?

StubArea51

If these are public BGP Autonomous Systems, you could always get the provider to whitelist all the prefixes for each envrionment out of each AS and ensure you have peering between your ASes and then you could gradually migrate the IP space over because it would be reachable in both.

StubArea51

MikroTik doesn't support ECMP for LDP yet, which is what you need to have ECMP in MPLS.

StubArea51

Homer, A couple of pointers for you. 1) Don't redistribute into OSPF unless you absolutely have no choice. It creates external routes and breaks the area boundaries of OSPF. Use network statements instead. 2) Areas are what contain the SPF calculations and provide boundaries for LSAs. Use them if se...

StubArea51

I would argue completely the opposite for a few reasons: 1) IPv4 address efficiency. PPPoE is the best at this as it hands out a /32 by default 2) PPPoE over VPLS is a validated design that works well and has its origins in the telco DSL world, which is why it's used by ISPs all over the globe - it'...

StubArea51

http://www.iparchitechs.com/wp-content/uploads/2017/03/MUM-2017-Europe-svirtual-tour.png Visit the IP ArchiTechs Facebook page at 4 PM (Local MUM time GMT +2) 10 AM (US Eastern Time GMT -4) for a live streamed tour of the Exhibition Hall at the 2017 Europe MikroTik User Meeting in Milan, Italy. htt...

StubArea51

Two questions I would have are:

1) Why do you want to avoid using the backbone area?

2) Do you plan to add more areas (or asked differently - do you plan to grow your network?)

StubArea51

+1000 Segment routing would be amazing!!!

StubArea51

Thanks for the update Normis.

So as far as you can tell or are aware, the only way to exploit a router is if port 80 is open to the internet and the HTTP service is enabled?

StubArea51

You can't divide it exactly into 3 but you can do 4.

An example would be:

10.0.0.0/25 - Block

Subnet #1 - 10.0.0.0/27
Subnet #2 - 10.0.0.32/27
Subnet #3 - 10.0.0.64/27
Subnet #4 - 10.0.0.96/27

StubArea51

I only have one guess

Router OS v7 beta

C'mon MikroTik, you know you want to!!!!!

StubArea51

You are most likely hitting the split horizon limitation of RIP. I don't believe that MikroTik has the capability to disable split horizon like you can in Cisco. The options you can consider are: 1. Move to OSPF - it is a far better and faster routing protocol than RIP 2. Enable a full mesh of tunne...

StubArea51

Any of the MikroTik VPN options would work well for this - i'd prob look at EoIP, SSTP or IPSEC.

Then you can either turn on OSPF for dynamic routing for put static routes in to get the subnets routed across the VPN.

StubArea51

Are both of the VRFs advertised within the VPNv4 community?

StubArea51

Glad you figured it out! Might want to change the title to SOLVED

StubArea51

Shout out to MIkroTik for suggestion: Why not get some White box switches (brocade silicon) and use MirkoTik SWOS ontop? use the ONIE boot/installer.... It makes me question! As some GREAT white box hardware out there. I would drool over MikroTik taking some whitebox switching hardware and making i...

StubArea51

Do a packet capture on the host and make sure the full DHCP process is completing. The phases are listed here. We use the acronym DORA for short. https://upload.wikimedia.org/wikipedia/commons/thumb/e/e4/DHCP_session.svg/260px-DHCP_session.svg.png https://en.wikipedia.org/wiki/Dynamic_Host_Configura...

StubArea51

Also turn on logging for ipsec in case you have other issues or mismatches. That way you can post the log here and get some help with any settings that don't match up.

StubArea51

So if you have public IPs, what is the challenge in building a second tunnel?

StubArea51

Ideally you need a router at each tower and start with OSPF. BGP is really ideal in the long term as OSPF quickly becomes unmanageable for traffic engineering but you can get started with OSPF. because you are PPPoE based, you can use EoIP until you are comfortable enough to use VPLS over OSPF which...

StubArea51

Be sure to create basic IPV6 firewall rules to keep the bad packets out and let BGP in

StubArea51

Awesome and always nice to see positive feedback towards MT

StubArea51

Glad to see this issue is getting attention still. Been waiting to see a fix on it ever since Alex brought it up at the 2016 US MUM.

StubArea51

We use GPON sometimes for MPLS transport to the edge depending on the use case, so we have to be able to run OSPF/LDP through the ONT which is why I was testing it.

StubArea51

[admin@R1] /routing ospf network> print Flags: X - disabled, I - invalid # NETWORK AREA 0 192.168.150.248/29 area1 1 192.168.100.128/25 area1 [admin@R2] /routing ospf network> print Flags: X - disabled, I - invalid # NETWORK AREA 0 192.168.150.248/29 area1 1 192.168.250.248/29 backbone When the sub...

StubArea51

Try rolling back to the latest bugfix RouterOS code. They are much more stable in general.

Download the ARM bugfix version - 6.37.4 is the latest but we run most of our client networks on 6.36.4 as it is very stable.

https://mikrotik.com/download

StubArea51

Check multicast as i've run into issues with that when testing OSPF and had to convert to NBMA on the ONT router. Would be interested to see what you find out.

StubArea51

The purpose of OSPF is to exchange routes between routers, so OSPF is doing exactly what it was designed to do.

R1 is learning 192.168.250.248/29 from R2 via OSPF
R2 is learning 192.168.100.128/25 from R1 via OSPF

Is this not what you wanted to happen?

StubArea51

Thanks for that Tom!

I've built a lot of networks on TA5Ks and love them but haven't had a chance to test MikroTik on the adtran gpon olt. Great to know that it works!

StubArea51

What procedure are you using to factory reset it?

StubArea51

The simplest way would be to create forwarding rules in the firewall that don't permit the VPN subnets to talk to anything but the 192.168.1.0/24 network. Alternatively, you could create a separate routing mark for the VPN traffic and it would be isolated to that routing table. Something kind of lik...

StubArea51

There are a number of uses 1) Switch or router connection 2) GPON uplink 3) As a quick and dirty fiber tester to see if a link is up and what the signal level is 4) For a fiber connection when the distance to a device is greater than the reach of copper ethernet. 5) To connect to fiber radios - Many...

StubArea51

What are the settings for the default route in OSPF?

http://wiki.mikrotik.com/wiki/Manual:Ro ... Properties

StubArea51

Your config looks correct and is exactly what i do when I want to deploy Q-in-Q in RouterOS. http://wiki.mikrotik.com/wiki/Manual:Interface/VLAN#Q-in-Q My guess is that maybe the 2960 sees the extra tags and isn't passing them through like a "dumb" switch would. You might try increasing L2...

StubArea51

We have been doing extensive testing with MikroTik for GPON in our lab and here is what we know so far 1. It does work as an ONT under the GPON standard when connected to certain types of OLTs. This is the OLT we are currently testing on: https://www.multilink.us/REVO-818G-GPON-OLT_p_931.html 2. It ...

StubArea51

Anyone been able to confirm this is fixed after putting the RC in? I haven't had a chance to test in my lab yet

StubArea51

I agree with you that it would be great to see technologies like e-VPN or VXLAN implemented in RouterOS. I'll wait to see what MikroTik has to say but with v7 still not in beta, it might be tough to add features like that with the current workload on the dev team.

Would love to see it though.

StubArea51

It's possible, though not likely. But in general, the more you can distribute workloads, the more stable your network will be. Don't rule out the possibility of an attack on your customers either - there are many odd behaviors that can happen when a customer experiences a DDoS or other kind of malic...

StubArea51

Sounds like you need to separate the customer feeds onto another router. 7 peerings that contain full or partial routes will definitely tax the resources on your 1036. From a design standpoint, you don't want the peerings for customers to be on the edge router anyway. It's much better to connect the...

StubArea51

For ISP networks, it's helpful to break up the routers that are customer facing and not in the core for a few reasons. 1. As already mentioned summarization. 2. The SPF algorithm runs within an area so Area boundaries help to limit instability is a router starts sending bad LSAs or is flapping. This...

StubArea51

Check your static routes and redistributed routes - these are almost always the cause of routing loops.

StubArea51

Because you're concerned about load sharing inbound traffic, what you really need to do is see if the ISP can enable BGP multipath and then you can remove the prepend and see traffic inbound on both circuits. MikroTik does not have this capability inherently in BGP although ECMP can be achieved by u...

StubArea51

Thanks for the teaser Normis. My interest in this device has doubled! Hopefully it has MPLS push/pop in hardware and not just label switching. And it will probably support Fast Reroute, EVPN, L3 VPN for IPv6, and every MPLS feature you could ever want..... BUT..... Not until v7 :lol: :lol: :lol: :l...

StubArea51

I would like to go ahead and put RouterOS v7 on my Christmas list for 2017

StubArea51

I realize that what I am asking for down below is a LOOOOOT of work but....I'd like to put them in there. BGP Labeled Unicast (RFC3107) for both IPv4 and IPv6 BGP Link-State (RFC7752) for the TE database distribution between areas (allowing for inter-area MPLS-TE) BGP Route-Target Constraints (RFC4...

StubArea51

The obvious one. in the RF space, I'm assuming you mean Ubiquity, and while true in the North American and European markets, we see heavy MikroTik RF deployments in developing countries in Africa and South America. So there has to some regional adjustment when identifying competition because price ...

StubArea51

Guys. I was telling those things years ago. And I still think the same like you, but remember that ebit to capital ratio is what an owner wants to be maximised every year. Making metal boxes thinner, replacing them by plastic and utilising all in one socs with ridiculous flash, removing wide range ...

StubArea51

I think Alex Hart meant we shouldn't get distracted from the larger theme: this thread is originally a discussion about whether we think RouterOS is moving forward fast enough, or if it might be left behind as competitors innovate quicker. Who do you see as competitors to MikroTik that are are curr...

StubArea51

Just an interesting side note, I do BGP on MIkroTik every day and I can't say I've run into this very often, but I do a soft-refresh in and out every time I change the filter because MikroTik isn't the only one who has this issue. I've been burned by similar behavior on Cisco 6500, 7600, ASR and Ne...

StubArea51

If you need Gigabit routed throughput, CRS is the wrong device because it won't ever process TCP streams fast enough to get clean throughput for real applications (which is different than maxing out a bandwidth test). Consider adding a CCR1009 or RB3011 to handle routing and then connect the CRS125 ...

StubArea51

RIP is an extremely old routing protocol and really shouldn't be used unless you don't have a choice. OSPF would be a much better choice. Here are a few examples on NAT and OSPF to get you started. http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Source_NAT http://wiki.mikrotik.com/wiki/Manual:I...

StubArea51

Have you established a peering between A and B?

Also, make sure you are either forcing a change of the next hop as the routes are learned into your AS or you will need to advertise the public /30 addresses you peer with your ISPs on so that it is reachable on the iBGP peering between A and B

StubArea51

- Routing filters often need to be disabled/re-enabled to make them work. Can we have more details sent to support? Do you modify routing filters frequently? Wow.. How do Mikrotik support NOT know about this issue: - Every ISP I talk to that uses Mikrotik for BGP complains about this issue. - There...

StubArea51

Here is an article on MikroTik's new feature Loop Protect and how it works as well as some use cases.

http://www.stubarea51.net/2016/11/16/mi ... p-protect/

StubArea51

can you make changelog window bigger or fullscreen? it is so small that we have to scroll left-right to see all of it. (it was the same also at old site)
We are redesigning the changelog, current one is only temporary

Great to hear! I use the changelog every day. Great job on the new site!

StubArea51

I think you'll find that many of the complaints about BGP convergence time are frequently related to the speed of the upstream peer (even if that isn't acknowledged as the issue) as the CCR1036 and CCR1072 can take in a single feed very quickly under ideal conditions. If you add a second feed, it sl...

StubArea51

Tom, Although it is marketed as a Layer3 switch, the true dividing line between Layer 3 switching and Routing is the use of an ASIC which the CRS series doesn't use for Layer 3. Most Layer3 switches can reach wirespeed on a large number of ports with some over-subscription in the ASIC. The CRS strug...

StubArea51

Just finished a new design to take advantage of all available bandwidth between two points by using OSPF, VLANS and ECMP to build a transit fabric with MikroTik Routers. Take a look! Read the details and testing results here: http://www.stubarea51.net/2016/10/27/wisp-design-using-ospf-to-build-a-tra...

StubArea51

The CRS is really designed for switching with some limited routing as the CPU in the CRS series is not very powerful. For 10 gig performance, look at the CCR1072 (or the CCR1036) as it can easily push 80 Gbps of traffic. http://www.stubarea51.net/2015/10/09/mikrotik-ccr1072-1g-8s-review-part-3-80-gb...

StubArea51

If you end up doing a lot of recursive routes, you might want to consider using OPSF just to advertise the next-hops for BGP instead of static routes.

StubArea51

I'll check it out too! What are you presenting on?

StubArea51

Might want to look at raising your MTU slightly as well. Here is a presentation I did at the MUM in MPLS for WISPs (applies to Fiber/Copper ISPs as well) and it has a slide on page 13 that lists best practices for MTUs that we have used in many production MPLS networks. http://mum.mikrotik.com/prese...

StubArea51

I think it's great there is finally a MUM in the UK and I hate that we are going to miss it but our project schedule is just crazy right now. Will have to watch it on the live stream and then see you guys at MUM Europe in 2017.

Hate that i'm missing the steakhouse too

StubArea51

We do a lot of MikroTik MPLS rollouts and typically if everything works as expected in the lab but fails in production, it usually means there is an MTU problem hiding somewhere. Verify that all network gear in the label switch path can support a frame size equal to or larger than the MPLS MTU you a...

StubArea51

Great read Zero and excellent technical content! You ought to listen to the Packet Pushers podcast with Geoff Huston about why we don't need IPv6 and NAT should be expanded in all areas of networking. It's a great nerd deep dive. :-) http://packetpushers.net/podcast/podcasts/show-275-future-of-netwo...

StubArea51

Maximal number of ARP entries is 8192. source: http://wiki.mikrotik.com/wiki/Manual:IP/ARP#Properties according to this, every board can deal with it. OTOH, putting such amount of servers into a single broadcast domain (even if it is just for their iLO/IPMI traffic) may not be the best idea. I thin...

StubArea51

Are LDP and OSPF stable? What RouterOS version are you using?

StubArea51

All about risk management. Four letters... VRRP. Sent from my SM-G920I using Tapatalk VRRP is great for edge routers, but not for core routers. MT really needs to implement a different type of clustering that supports state synchronization for seamless failover without dropping connections. Then,...

StubArea51

I am really torn on this issue: 1) On the one hand, we are patiently waiting like everyone else for v7 to fix a number of issues and introduce features and would love a paid support "fast path" 2) But on the other hand, MiktoTik has become the company we all go to for cost effective hardwa...

StubArea51

You can argue all you want... The facts remains... - For YEARS NOW Mikrotik suffers (and continues to suffer) from random, mysterious port flaps. - The CCRs has NUMEROUS issues, which aren't getting fixed and/or better. I couldn't care less on what works, and what doesn't work, and this vendor vs ...

StubArea51

Yes, Not within 180 days of purchasing it. And not 2 out of 3 devices purchased either (of which one has already been RMA'ed too). Frankly, whilst I'm sure it does (and can) happen, being a CCNA and CCNP and working with Cisco my entire life basically, I have *not once* had a Cisco device die on m...

StubArea51

Are all of the routers running the same version of RouterOS? If not, i'd start by using one of the Bugfix versions like 6.32.4 or the latest bugfix.

StubArea51

I just had this exact same issue today with a client network on bugfix 6.34.6 and I resolved it by setting ospf interface priority back to the default of 1. It had been set to different integer values on several routers to force a DR Master.

Have you set an interface priority on any of the routers?

StubArea51

I like talking about BGP. :) Most threads on here end up being about firewall rules and NAT pinholes, so helping with someone trying to understand BGP is a nice change of pace for me. Hope it's starting to make more sense for you now. Me tooo! Great thread BTW...it is a nice change to have a specif...

StubArea51

It sounds like perhaps the ethernet switch is dropping some multicast traffic if switching to NBMA fixes the problem. My thoughts exactly which is why i suggested trying a different switch. To the OP: Typically when NBMA solves your OSPF issues it means you've masked an underlying problem - most li...

StubArea51

If possible, connect the routers together with a different switch and see if you still have the issue. Another option would be to run a packet capture just for OSPF on eth8 on several different routers to try and catch why this is happening. We run OSPF/BGP and MPLS on large production networks with...

StubArea51

Which ports are you using on the CCR1009 to connect the routers together?

StubArea51

Do you see the same issue if you use the latest bugfix version on all routers? Can you post configs?

StubArea51

What version of RouterOS is on each router?

StubArea51

What you're describing is most likely some kind of volumetric attack. See below for more detailed information: http://www.cisco.com/c/en/us/about/security-center/guide-ddos-defense.html Volumetric attacks are very difficult to defend against once they have reached your network. The most common types...

StubArea51

We have more and more customers asking for this and we have to put either Quagga or BIRD in as the edge router since MikroTik doesn't have this. I'd prefer to put in a CCR, but we won't be able to until this feature is implemented. The lack of this feature is going to affect sales of CCRs for market...

StubArea51

What version of RouterOS is on these two routers and can you post the mpls forwarding table as well as the routing table on each?

StubArea51

I've not found the CCR1009 to work well for a peering with a full table - by specification it should be fine, but in practice, it converges much more slowly than a CCR1016 or higher. As a general rule, I don't use anything less than a CCR1036 for a full table peering to keep resources as low as poss...

StubArea51

Hi, Can anyone provide an estimate of how much ram is used per perfix in a routing table on ROS. I'm not looking to be told "For the global routing table you need more than X" I am wondering about calculating it so if I know a client will see 10K prefixes I can estimate how much ram they ...

StubArea51

After contacting Netonix support, and by their answers on the forum (the problem was always on the other vendors side) I simply advised the WISP I was auditing (where this switch was located in) to ditch it. Hardware specs looked really promising and just like the answer to WISP prayers, but softwa...

StubArea51

Didn't realize it was you (Kevin) the one writing in the forum, really liked the Slovenia MUM BGP presentation (and the Mikrotik tacs! :D) Really enjoyed this one, even with its density, I really digged how you drawn the "bigger picture" and always provided a dual technical/business persp...

StubArea51

If you're running tagged VPLS, I wouldn't have an L2 MTU lower than 1530 anywhere in the network for simplicity. In the WISP world, I've been burned a number of times with "Jumbo" frames set on PtP radios (from more than one manufacturer) where we actually weren't passing an L2 MTU that w...

StubArea51

If you're running tagged VPLS, I wouldn't have an L2 MTU lower than 1530 anywhere in the network for simplicity. In the WISP world, I've been burned a number of times with "Jumbo" frames set on PtP radios (from more than one manufacturer) where we actually weren't passing an L2 MTU that w...

StubArea51

Can't wait for that to to get fixed so we can use MikroTik in Telco environments that have to meet SLAs in the milliseconds.

StubArea51

If you're running tagged VPLS, I wouldn't have an L2 MTU lower than 1530 anywhere in the network for simplicity. In the WISP world, I've been burned a number of times with "Jumbo" frames set on PtP radios (from more than one manufacturer) where we actually weren't passing an L2 MTU that wo...

StubArea51

Many of our customers are service providers and run MPLS/BGP/OSPF on MikroTik hardware as well as integrating MikroTik with vendors like Cisco, Juniper, Brocade, etc. We have been recommending and using the bugfix version since it came out and it has been extremely successful and stable. The latest ...

StubArea51

If you need to conserve IPv4 addresses, then you don't have to use a publicly routed /30 for the interconnect. You can use a range like 100.64.0.0/10 (CGN IP space) to connect to the subscriber and then route a /32 , /30 or /29 over that link.

https://tools.ietf.org/html/rfc6598

StubArea51

Any update on OLTs that work with the MikroTik GPON SFP?

We've been looking at Huawei MA5608T - Mini OLT for testing but haven't decided on an OLT yet

http://huawei.com/ucmf/groups/public/do ... 390023.pdf

StubArea51

Convergence time in BGP with CCRs is very dependent upon your upstream provider as well as the CPU load. I've seen it happen as quickly as a couple of minutes and as long as 10+ mins. Test it yourself (in a non-production CCR) by using this VM and you'll know what your best case scenario will be. ht...

StubArea51

Thanks MRZ....is this currently planned for v7?

StubArea51

Yes it is possible to set up OSPF with failover. What routing protocol are you using right now?

StubArea51

VRF is very common in ISP and Data Center networks. Some common uses are:

1) Separate public IPs from private management
2) Allow overlap of private IPs for customer networks
3) Create security zones with firewalls in between for routing between VRFs

StubArea51

Go to the OSPF instance and try changing the "Redistribute Default Route" command from never to "if-installed (as type 1)"

StubArea51

I agree with NZ and see both positions but I will say that nobody has added more baggage to BGP than Cisco, and yet it remains a relatively stable implementation of BGP despite the enormous amount of proprietary/RFC additions. BGP is a natural choice to add functionality because it is essentially th...

StubArea51

VLAN translation is typically something you would want to use a CRS for especially since you're dealing with S-tag and C-tag. Here is a presentation I did last year on VLAN Translation in the CRS (with examples) at the 2015 US MUM in Miami. https://www.youtube.com/watch?v=v3NVPJgbkRE Hope this helps..

StubArea51

Using the exact mask length will work and using an aggregate will work. However, it's considered a best practice to only allow the specific mask you need advertised to keep from trying to form neighbors on a misconfigured interface, or advertising a subnet inadvertently.

StubArea51

Only real life situation where you possibly have 1gbps+ single TCP connection is in your local network, where you can increase MTU to 9000 and it can get all the way up to 10Gpbs. Start of rollout of DOCSIS 3.1 @ 5Gbps is planned for next year in Europe. It is easy to max out your 500Mbps today dow...

StubArea51

Only real life situation where you possibly have 1gbps+ single TCP connection is in your local network, where you can increase MTU to 9000 and it can get all the way up to 10Gpbs. This myth was generated by some noobs, that tried to use TCP Bandwidth test on CCR, and as we all know Bandwidth tool i...

StubArea51

CCR-6506-96G-48S-16S+/ First of all there should be no dash after CCR!!! you need to be strict about those things (lol) Second first number is too unrealistic - 6th series with 506 cpu cores? :) Multi-chassis CCRs have new naming conventions :-) (And using part of the Cisco 6506 designation was par...

StubArea51

We expressed an interest in having MikroTik develop a multi slot router by releasing the super secret photos of the CCR-6506-96G-48S-16S+ on April 1st

http://www.stubarea51.net/2016/04/01/ph ... g-48s-16s/

StubArea51

S- Tag and C-Tag are very common terms found in Metro Ethernet equipment. As others have pointed out, it is a slightly different VLAN protocol than 802.1q and is a part of 802.1ad. S-Tag = Service Provider Tag (or outer tag) C-Tag = Customer Tag (or inner tag) This is also commonly found in DSL DSLA...

StubArea51

These old topics are irrelevant, according to topics problem was seen on v 2.8 (quagga), v2.9 and v2.9 routing test.
As I mentioned already, we will test problem discussed in THIS topic and let you know if it can be fixed in ROS v6.

MRZ can you confirm this is in fact a bug?

StubArea51

Keep after them....MikroTik will eventually get it in the pipeline for a fix. MikroTik has patched just about all the bugs I've brought to them - sometimes quickly and sometimes not, but I think that's the trade off for getting such an inexpensive router. There are only so many resources for product...

StubArea51

This model also has an RJ-45 serial console port which makes netinstall and config change/restore much easier if there has been a config change that keeps you out of the router.

StubArea51

Have you enabled debug on the Cisco and MikroTik side to determine why the VPN is being torn down. Would be helpful to have that info so you can either adjust the config or open a ticket with MikroTik

StubArea51

Hate to say it but if a direct cable works and the UBNT AF doesn't then you have some kind of issue with the AirFiber transport that probably is MTU related. The easiest way to prove that is to do a packet capture on both sides and see the MTU of the OSPFv3 packets being exchanged. My guess is you'l...

StubArea51

Hi, As another datapoint that its not MTU, the CCR in question has a hard cable connection to another Cisco 3560G, and that session is just fine. When doing debug on the Cisco we get a "Bad request received" this request is from the CCR. Another note: NBMA does not bring up the adjacencie...

StubArea51

Posted this in the other thread as well... I would seriously check the AirFiber code version and test MTU throughput. There seem to be a number of threads in the Ubiquity forums that claim jumbo frames are enabled but not actually passed... https://community.ubnt.com/t5/airFiber/AF24-MPLS-Issue/td-p...

StubArea51

I would seriously check the AirFiber code version and test MTU throughput. There seem to be a number of threads in the Ubiquity forums that claim jumbo frames are enabled but not actually passed...

https://community.ubnt.com/t5/airFiber/ ... -p/1099827

StubArea51

Hate to say it, but considering the issue you're having in the other thread with getting stuck in EXSTART with OPSFv3 between a CCR and Cisco switch is identical to this one which involves only CCRs, i think you definitely have some kind of MTU issue or bug related to MTU. Can you cable the two CCRs...

StubArea51

I know you said the MTUs are good, but this really does sound like an MTU issue - even if your transport MTUs are good it could be a bug or other issue with MTU at the endpoints. The quickest (but maybe not the easiest) test would be to bring the CCR to the Cisco switch and directly cable it in to s...

StubArea51

Just curious

What ROS version is on the CCR...also what ROS version is on the 2011?

StubArea51

Well I also have problem with maxing out CPU in RB2011 below gigabit - around 68 MB/s, something like that - during NAS access and it's quite meh but on the other hand... I don't think it's that bad for 120$ swiss-knife router+wifi+10/100 switch+everything with touch screen, sfp usb, super-duper OS...

StubArea51

You are nervus, because RB3011 is not yet stable? They will fix it soon What's your definition of "soon"? Maybe within this century? CCR1036 isn't even stable / performing yet, nevermind the 3011 I'm just curious.... What isn't stable for you on the CCR1036? We have clients on 6 continent...

StubArea51

What BGP AS numbers are you using? Can you post your config?

StubArea51

Try this command and see what it shows...it will help validate the advertisement is actually going out to the peer.

routing bgp advertisements print peer=Node4

StubArea51

Just a sanity check for you guys on the default route in BGP. Controlling the advertisement of 0.0.0.0/0 is done by design as a loop prevention mechanism. If every BGP router passed along 0.0.0.0/0 by defualt, you'd likely end up with a mess because BGP is not a protocol that understands topology. I...

StubArea51

i had to change in the route table creating a new list and then change the routing rules so that they only lookup in that specific list.. else i could not use mail from the wifi network.. A new problem appered: i cant surf to some webpages like: http://www.microsoft.com http://www.mozilla.org http:...

StubArea51

Mikrotik have used this different CLI syntax in previous early test releases for new systems. I don't think what is shown above will be in the final release. Well that's good because my brain can't digest yet another CLI syntax without imploding. On a daily basis, I'm already juggling Cisco [IOS, N...

StubArea51

Two things that might be helpful for you. I just presented on this topic at the European MUM in Ljubljana a couple of weeks ago. Basically it highlights a solution to scale BGP with MikroTIk using the CHR. http://mum.mikrotik.com/2016/EU/agenda# I've also done in depth reviews and performance testin...

StubArea51

Prepend is a good way to control which path traffic will come inbound to your AS and local preference works well for selecting the outbound link. However, if you control both ASes, then I would opt for communities and probably use local preference in both ASes to control the traffic. Here is an exce...

StubArea51

yeah thanks I just didnt see it - senior moments

Leon

,

No worries, I'm only 38, but with two small children I have many, many "Senior" moments

StubArea51

That was my guess from earlier in the thread as it showed up in your export....glad you figured it out!

StubArea51

I've seen the scenario you're describing pretty frequently when working outside of the US and Europe, especially in Mexico and South America. I'd push for a /30 and /27 routed if possible. Proxy ARP isn't the end of the world and we've had to use it when somebody chops up a subnet like this with a m...

StubArea51

What is the CPU load when this is happening? Have you opened a ticket with support?

StubArea51

What are the values for the following MTU settings?

L2 MTU

L3 MTU

MPLS MTU

StubArea51

Have you emailed support?

Nice work and as pukkita said definitely send support the details of your findings

StubArea51

RouterOS v7 #thelongwait
I keep expecting to see this every time there's a new MUM....

There's so much that's been promised in ROSv7.

Maybe we'll get lucky and it will be Dallas in a month and a half

StubArea51

@paoloaga and @nz_monkey Same boat here.....we've gotten by with peering on the subnet instead of on a /128 loopback until it's fixed. We have a ton of customer IPv6 migrations we are working on that need this since the IPv4 topology is recursion based with BGP and OSPF. RouterOS v7 #thelongwait :sh...

StubArea51

Might be helpful to post a supout.rif.

I'm familiar with 44.0.0.0/8 a little bit since I am also KE5JKE

StubArea51

It doesn't look like this is a bug It appears you are redistributing static routes in OSPF and the prefixes listed in OSPF as external match the static routes in your config. My guess is that's where your OSPF routes are coming from and not RIP. The other clue is they are showing up as Type 1 extern...

StubArea51

Really enjoyed being a part of the MUM in Europe as an exhibitor and presenter. It was great to meet people from so many different countries and cultures and talk about networking.

Very cool

StubArea51

is GNS3 by itself aware of the VLANs sometimes these virtual systems just bork the VLAN tags.

The GNS switches are VLAN aware if you change the port from access to dot1q. I've been using VLANs with CHR in GNS3 successfully since the CHR 6.32 image

StubArea51

Are you trying to reflect a full table to somewhere other than the two BGP border routers?

StubArea51

Hello, i plan to move to a new location and i want to migrate all services without a downtime. Currently, i am announcing some /24 subnets. Is there an easy way that the IPs from the /24 Subnet can be used on both locations so i can move all services without a downtime? So that the IP 1.1.1.2 gets ...

StubArea51

It looks like the storage where you are trying to keep the VMDK is full.

We have CHR running on ESXi 6.x without any issues.

StubArea51

This, and also recursive nexthop lookup for IPv6 BGP routes. It is blocking our IPv6 deployment, and it is becoming a huge issue.

+1000 !

Yes, can't wait for recursive routing to be available in IPv6

StubArea51

We do MikroTik based MPLS networks all over the world as well as MPLS integration of MikroTik into Cisco, Juniper, Brocade, etc.

Sent you a PM

EDIT:

For some reason, PMs are stuck in my outbox....please send an e-mail to consulting [at] iparchitechs.com

StubArea51

Does anyone know if the HP J9281B 1m DAC cable (http://www8.hp.com/lamerica_nsc_carib/en/products/oas/product-detail.html?oid=4000725) would work with connecting a CCR-1036 to an HP Switch? Alternatively does anyone know if the Mikrotik 1m DAC cable will work when connecting to the HP switch? I hav...

StubArea51

Here are the things to check from the wiki and the one thing that isn't listed there is L3 MTU...it must match on each side of the link. http://wiki.mikrotik.com/wiki/Manual:OSPF_Case_Studies#Communication_between_OSPF_routers Two routers do not become neighbors unless the following conditions are m...

StubArea51

Why so? I have the hAP ac at home as my access point. In our country, we get speeds 100-500Mbit at home, so even just for an AP you need power. I also have a few devices with no WiFi, so the extra ports help. 500 Mbps at home?? That's it, I'm moving to Riga, Latvia!! :D We are starting to see speed...

StubArea51

This is very possible....take a look at the first OSPF example in the wiki below:

http://wiki.mikrotik.com/wiki/Manual:OSPF-examples

StubArea51

i think to the rules IPNET posted you have to add some rule to allow internal users to query dns cache on mikrotik

Thanks for the catch...I do normally add an input interface to the rule

StubArea51

Thanks Strods...will test it out!

StubArea51

The short answer is no....MikroTik switches do not route between VLANs like a Cisco switch with SVIs where the traffic is wire speed.

CRS switches must use the CPU to route between VLANs.

http://wiki.mikrotik.com/wiki/Manual:CR ... AN_Routing

StubArea51

Hi, All! I have a problem with my BR750GL, the CPU load is very high. In Profile I see that "dns" usage is 80-90%. 1.png When I stop "Allow Remote Request" the usage go down. Can someone explain that. 2.png Can I fix that problem? Thank you What you are seeing is most likely a D...

StubArea51

Glad you figured it out

StubArea51

Exactly, v7 will have the fix. Too much code need to be modified to fix those ospf bugs in ROS v6.

Will RouterOS V7 be announced as ready at MUM Europe

?

StubArea51

You can assign a global unicast IPv6 addresses to a PPTP interface that is running over IPv4. IPA-LAB-RB3011-1 [admin@IPA-LAB-RB3011-1] > ipv6 address export /ipv6 address add address=2001::1/112 advertise=no interface=pptp-out1 IPA-LAB-RB3011-2 [admin@IPA-LAB-RB3011-2] > ipv6 address export /ipv6 a...

StubArea51

Ok, Thanks for the reply. Ok I understand. So strange that Bonding 802.3ad Is in the config of a CRS125 But I understand due to the limits of the device it is not possible. Is it also not possible to loadballance over multiple ports? For example if I have a CCR1009 and a CRS125 and want to loadball...

StubArea51

+1 for setting a router-id.

Can't even begin to describe all the bad things I've seen happen because the router-id wasn't set. The most common is a duplicate router-id of 192.168.88.1 on each MikroTik router

StubArea51

Just curious, why would you be pushing for development on such a legacy routing protocol?

StubArea51

This has been rumored many times to be in v7. I've heard the BGP performance in v7 is significantly improved, but not sure if it's multi-core.

StubArea51

We have released 6.34 version.

*) mpls - forwarding of VRF over TE tunnel stopped working after BGP peer reset;

Just tested this on CCR1009 and CCR1036 and it works great. Thanks MikroTik!!

StubArea51

We have an issue that has been reported to support and wanted to see how many others are having the same issue. When using MPLS Traffic Engineering tunnels and MP-BGP with VRFs, if the BGP peering goes down and back up, traffic stops forwarding until the Traffic Engineering interface is disabled an...

StubArea51

There will be no fix for this problem in ROS v6.

Thanks MRZ, can you let us know why?

StubArea51

If putting voice over the tunnel is your main use case, it might be helpful to use a tool like Ping Plotter to measure your underlying ISP connection to ensure that it has consistent Jitter before troubleshooting the tunnel. It will even do MOS scoring for you. http://www.pingplotter.com/ We have so...

StubArea51

How many TCP threads are you using in iperf and at what MTU size?

Here is a recap of our performance tests with IPSEC on CCRs

http://www.stubarea51.net/2015/10/16/10 ... ip-tunnel/

StubArea51

The two routers contain fairly extensive configurations and additionally handle BGP sessions to 9 peers between them. We have redundant links between CCR1 and CCR2 with OSPF weighting to make them work as active/passive.The problem appears to have disappeared when disabling OSPF and LDP on the back...

StubArea51

We have an issue that has been reported to support and wanted to see how many others are having the same issue. When using MPLS Traffic Engineering tunnels and MP-BGP with VRFs, if the BGP peering goes down and back up, traffic stops forwarding until the Traffic Engineering interface is disabled and...

StubArea51

We disable / re-enable interfaces all the time in BGP based networks with CCRs to test convergence speed and other things - it's normally not an issue.

What version of RouterOS was on the CCR and 450 ?

StubArea51

I think the question of the market for DSL really depends on where you are in the world. In smaller countries, fiber is much easier to roll out and connect than it is in a larger country and the demand for DSL is low. DSL in North America is still heavily utilized in the US, Canada and Mexico and pr...

Search found 1749 matches