MikroTik

JanezFord

Hello, I am planning a wireless mesh with about 8 to 12 APs (mostly rb951g-2hnd) in the first stage, more will follow. Is it possible that 5 (more later) of them have wired uplink (eth1) to the central switch and rb800 for internet gateway? How is mesh routing done in this case? Is it possible to us...

JanezFord

I have no clue but I would speculate that it comes in v7.

I hope I'm wrong though.

I hope you are wrong too... v7 is at least 2 years away... + the time to kill all the bugs with new version... I can't wait that long, I risk loosing customers to competition.

JF

JanezFord

bump ... kick ... whatever ...

any news on this? ...

http://wiki.mikrotik.com/wiki/Manual:Wi ... Controller

JF

JanezFord

I can also confirm that on all three of my RB2011s the interface graphs are erased on each reboot.

You also can add rb800, rb711, rb450g, rb751g, rb751u to the list ... all of these loose interface graphs with every reboot...

JanezFord

OK, we're back to a stable (no crashes) release, mine has not crashed after 24 hours running on a production router. Now you guys just need to concentrate on getting the IPsec fixed up. Oh, BTW, the LED's are working now! my rb800 crashed after 20h of operation ... I also lost all interface graphin...

JanezFord

Maybe I found one bug within the proxy module. After updating one RB450G from version 6.1 to 6.2 the local proxy was disabled and it's configuration was reseted. I tried to reconfigure the module again, but I failed. I'm using a parent proxy setting on this device. After entering the IP address fro...

JanezFord

It is never about the number of users when it comes to resource consumption (cpu/memory) ... it is always about the amount of traffic (packets/bandwidth) they will generate and other configuration options you will use (firewall, queue, nat, proxy, ...). Keep that in mind when choosing your hardware ...

JanezFord

Myself and a colleague have spent all day trying to get this implemented with little joy. I've trashed the config now but I wanted to ask the question: Has ANYONE managed to do this? If so are you willing to share your config so I have something to work with? I've read lots posts by people trying b...

JanezFord

Yes, latest revision comes preinstalled with v6 and will not work with old versions. This is normal that new hardware requires new software, new drivers can only be integrated in v6 RouterOS, since it has new kernel. Eventually all RouterBOARDs will come with v6. It is stable and there is no reason...

JanezFord

Hi, Just to keep you informed... Downgraded back to v6.0rc14. Upgraded firmware to v3.07 Upgraded to v6.0 Keeping firmware at v3.07 (even if it asks to upgrade to v3.02 (not sure what kind of upgrade is this)) :) L2TP/IPSEC works fine now. Best regards, the_prism So it is clear now that v6.1 has is...

JanezFord

ipsec (transport mode) between linux openswan and mikrotik stopped working after upgrade from 6.0 to 6.1 ... ipsec between mikrotik and mikrotik works OK ... after downgrading to 6.0 everything works OK ... please send full details of your configuration to support ipsec configuration of linux box, ...

JanezFord

ipsec (transport mode) between linux openswan and mikrotik stopped working after upgrade from 6.0 to 6.1 ... ipsec between mikrotik and mikrotik works OK ...

after downgrading to 6.0 everything works OK ...

JanezFord

A friend of mine who is a teacher was once annoyed by his students texting short messages during class, and later he bought a portable cell phone jammer , then all the students were confused that their cell phones cannot receive any signals even if it was the most advanced one.My friend said he bou...

JanezFord

bump! ... I've given up on seamless roaming with mikrotik equipment ... apparently it's not possible (yet) ... I would still like to hear about your recommendations on any advanced wireless settings change to improve wireless network stability, availability, response and throughput in conditions whe...

JanezFord

Thank you for this tests joshaven and conformation that 2011UAS can't do 50mbit/s with encryption over VPN ... but 40 mbit/s is still quite OK for normal use not to mention the price ... I use ipsec with aes-128 and I estimate perfomance would be a bit lower but quite close ... I used it on 20mbit/s...

JanezFord

Hey,

Does the RB2011UAS-RM have enough power to act as a NAT/Firewall for FIOS running at 50Mbps and also to run a VPN?

-Eric

It will run OK except I don't think it can manage full 50Mbps through the VPN ... I've tested it on 20mbit link ad cpu usage during VPN transfer was quite high ...

JF

JanezFord

but how can I do it in the router? Is there an option to type down the mac address associated to the customer? Do you use DHCP? You can make static entries for mac addresses your users use ... connect to your router via winbox, go to IP / DHCP Server / Leases tab / select an active lease and click ...

JanezFord

Place some mikrotik router that will act as central one. Create EOIP tunnels between central router and devices that will be used to connect users. Create bridge on central router and add all of the EOIP tunnels to that bridge. Create DHCP server on central router bridge. Create bridge on periphera...

JanezFord

Hello, my plan is to cover a building with wireless signal the way that users would not loose connection when they switch between access points. I plan to do this with Mikrotik equipment as well as with equipment from other vendors if possible in combination with MT. Total number of access points wi...

JanezFord

Hi, I have an RB450G and find it works perfectly. I was just wondering why people build machines with dual core processors and 2GB of RAM, as opposed to 680mhz processor and 256meg of RAM. Is there a need for that sort of hardware in a router? Thanks in addition to jp's post: have you tried IPSEC w...

JanezFord

CRS looks nice ... will it support jumbo frames? Is it fanless design? Price range? SFP+ version of CRS would be even nicer ... Why the microUSB port ? There is plenty of space for a normal sized USB port .... hopefully RB912 price will be as attractive as specifications ... although there is no inf...

JanezFord

I know the issue may be the memory is too small. Because I have set up 3600 route rules and about 40 firewall policies. When I use p2p software to download, the memory will become lower than 9MB, and than the process 'FLASH' casue 100% CPU usage. I think I need to replace with another model such as...

JanezFord

Any plans for IPSEC compression support in ROS v6 ?

JanezFord

It is possible that they do not want to touch OpenVPN because of licensing issues. They do not want to wake-up the dragon as they know he will eat (sue) them. OpenVPN Technologies, Inc. owns all of the rights to the OpenVPN core and maintains a dual license for the use of the technology. We support...

JanezFord

So in my point of view your only choice can be: RB800 - if your current load on rb1000 is not too high and you expect the same load in the future RB1200 - if you don't need ipsec RB1100AHx2 - obvious choice for a stable product and an upgrade to your rb1000 CCR 1016 - currently under development CC...

JanezFord

Buying an expensive equipment and using 1% of it is not a trick. The trick is to buy the most appropriate device for appropriate price. What about RB800? 256 MB of RAM should be enough as we have 476 MB free on RB1000. Can it hold this amount of load? :? Depends .... How high is CPU load on your RB...

JanezFord

to MT: Just wondering ... how many rc versions can we expect before final 6.0 comes out? 10? 20? 30? ... is there any timeline by when final version should be released or will this rcXX go on and on and on and on and on and on and on .... yes, I could be described as impatient but anyway... keep up ...

JanezFord

So I'm experimenting with my new 493G board and discovered the null modem cable I have doesn't happen to be in my office today. I was setting things up and made a mistake, and now can't hit the eth1 192.168.88.1 address to fix my stupidity. The quick start mentions a reset jumper but it's not label...

JanezFord

Maybe it is not a problem with sxt at all ... In the past I had problems with water and some antennas on a mountain tower and it turned out to be a problem with the cable itself. Temperatures on that tower ranged from -30 in the winter to +30 in the summer and since the altitude was above 1000m also...

JanezFord

can transmit as V , H in same time with R52 H Polarization is not determined using software but a physical position (vertical (V) or horizontal (H)) of antenna. If you have dual polarization antenna this means that it uses two antenna as one to achieve both horizontal and vertical polarization at t...

JanezFord

I need suggestions on which RB will best suit our environment. These are some of our considerations: 1. VPN capability 2. Higher processor speed and RAM (RB192 runs at 300MHz with 32MB RAM) 3. Enough space for web cache 4. Support for VLAN and Wireless 5. etc Thanks in advance for your recommendati...

JanezFord

Hello pyramid, I don't know if this helps but .. anyway .. I have also experienced some performance issues using smb protocol over ipsec tunnels too but with linux samba server and windows client ... my link was not as good as yours but I managed to fine tune throughput to maximum link capability us...

JanezFord

Still not getting why ovpn is better than a gre tunnel... what am I missing here? It seems it's being used in niche type situations... Im guessing encrytion. And yes OpenVPN is a niche technology. I have never seen an enterprise router with support for OpenVPN, and have never seen it being used out...

JanezFord

The problems you describe only happen on upper ports (eth 9 and 10)
Dont use those 2 ports and it will all be fine

Read again... he used port 1

JF

JanezFord

Dobby! Read again ... 5nik wonders why there is latency on rb1200 and not on rb2011 ... I have also tested my setup full with some rb2011(uas), rb450g, rb751g and some linux boxes and can also confirm that there is no noticable latency (defintely not 10ms) using this boxes ... so, the question from ...

JanezFord

Just like the link says, there are two. No reason to doubt the manual.

What about CCR ? ... I was under the impression that CPU supports it ...

JF

JanezFord

OK. I'm all booked up now. Flying with Croatian Airlines from Heathrow. Out on the 13th at 1050 (OU491) and back on the 16th at 1435 (OU492). I'll be driving from Warwick to Heathrow following this route , so if anybody wants a lift, just shout. Easyjet flights are also available on 14th and 15th f...

JanezFord

Having some issues getting our mikrotik to pass traffic through to the remote LAN. LAN1 (10.4.4.0/24)- OpenSwan (10.4.4.103) - Firewall (Public) ------------- (Public) Mikrotik - (192.168.52.0/24) LAN2 I can ping devices on the LAN2 side from the LAN1 side but not from LAN2 to LAN1 except the vpn e...

JanezFord

I have noticed that there is ~8% of CPU usage while router is in IDLE. If I turn off LCD on RB2011UAS it goes back to ~5%. With only one network connection to connect from computer to the router using WinBox. Other production router running ROS 5.x has average 2-3% CPU utilization while there is a ...

JanezFord

On RB751G-2HnD I'm having problems with the stability of PPPoE. It takes many attempts before the link goes up. It does not stay up for long. <stuff deleted> I have two RB751G-2HnD and also did an upgrade from 5.20 to 5.21 on both. I use PPPoE for internet access and did not notice any problems at ...

JanezFord

I just hope they support OpenVPN UDP. I just don't get it why MTK refusest to implement this feature. Their passive-agressive answers on this forum are at least weird. They are inviting you to look someplace else. Too bad, it is a great product, flawed by some really bad choices. Too much "rus...

JanezFord

It does not work at gigabit speeds... it does not negotiate at gigabit but at 100mbit, if I try to force it to gigabit it does not work. Comp has intel gigabit card (Intel 82566MM) which works ok at gigabit speeds with Dell, Cisco, also mikrotik RB450G and RB493G but not with RB2011UAS-2HnD-IN. JF ...

JanezFord

our download servers only host new versions. also hosting old versions would futher kill our bandwidth, but we may think about it.

Host it as torrents only and bandwith should not be an issue any more ...

JF.

JanezFord

Stopping support of one of the best vpn solutions out there is a bad move! And dont tell me how superior sstp is or it will be, because it wont. I just can not understand Mikrotiks policy on this ... there are numerous posts on this forum regarding OpenVPN functionality to be improved in routeros b...

JanezFord

Thanks for all the feedback. What would be the optimal combination of encryption and hashing that people would recommend for optimal through-put whilst still being secure. Cheers I would say that ipsec security is as far as regarding encryption and hashing, beyond scope of this forum. True md5 is c...

JanezFord

could you report what kind of problems you are getting with gigabit ports? It does not work at gigabit speeds... it does not negotiate at gigabit but at 100mbit, if I try to force it to gigabit it does not work. Comp has intel gigabit card (Intel 82566MM) which works ok at gigabit speeds with Dell,...

JanezFord

You can have seamless roaming without WDS. As a matter of fact I've had better results without WDS. WDS isn't for roaming and you can't have WDS connections going over different frequencies. I have done quite a bit of testing on the subject on my own time as well as on the time clock. So what would...

JanezFord

One question I remember being asked is how big the internal flash storage is. Sadly it's only 64MB. It comes half full with about 30MB left of free space. Of course you can expand it using the USB port. Khm ... just got mine and it has 128MB internal memory.... about 90MB free (for now :D ) .... ha...

JanezFord

Hello: My experience is the same: a Cat. 4500, module WS-X4424-GB-RJ45 and a RB 1100 AH X2. Nothing to negotiate. The only way is cisco at 100 Mb. Full duplex, No auto. Cable length is 2m. Regards. strange .. today I've got my brand new RB2011UAS-2HnD-IN and can not get gigabit ports working at gig...

JanezFord

some bad blocks are OK, if the number doesn't increase quickly, there will be no problems, but over 10% is not OK, and you should replace this one for warranty I believe I have the same problem ... brand new RB493G running for 12 days now, bad blocks count steadily increases from 0.0 % to 6.5 % ......

JanezFord

Hi, Currently running RB450G's and are maxing out around 10Mbps IPSEC throughput, I am looking for something that can do up to around the 45Mbps mark. What would people recommend, both interms of routerboards and alternatives like cisco etc. Thanks Stephen What encryption and hashing are you using?...

JanezFord

Have any one tested VPN with RB2011 series or MT RB75xx routers can someone share results cos I have small project like this but I want to make it with MT hardware (I have no intension to use x86) can 100mbit traffic be achieved? I am also looking for some IPSEC performance results with RB2011 seri...

JanezFord

Did you know what happend to my rb450g after one year awesome performace in hotspot 5.14 , after upgraded to 5.20 then reboot ! Boom ,no dhcp, no static dhcp leases , no 100 hotspot users . Happend like someone deleted them. :shock: What a catastrofe ..... I've been running my RB450G for weeks with...

JanezFord

Hello Dobby, For the Soekris vpn1411 are linux drivers out there but, I´m not sure if MikroTik will support those cards!!! But for having higher vpn throughput with the smaller Routers, not the 19" rack mount versions they are powerful enough, it can be a fine extension board, only in my opinio...

JanezFord

- Supported mini PCI vpn acceleration cards like skoekris and Cavium cards

I welcome this option ... any more info on this (when?) ...

JanezFord

Sorry Normis, Maybe with one client who's close to the AP, and even then... With multiple users on multiple distances it ain't great at all. (softly spoken!) We deployed +/- 60 of them in hotspot setups. Tried all ROS versions from 5.6 to 5.16 and posted tons of support tickets. We eventually ended...

JanezFord

Anyone tested RB2011UAS-2HnD-IN or any RB2011 board compared to RB450G when it comes to IPSEC ?

JanezFord

My unit works ok but I have trouble getting completely fast and reliable performance out of the wireless interface especially using channel 11 up right next to the noise I'm seeing. I can get better performance from a Ubiquiti AirRouter on it's wireless. I bought these unit because I couldn't get m...

JanezFord

Sounds like there is a problem with some of the later 751U hardware since we have a few people all seeing the exact same thing. Unfortunately, that just means to me that I will not be using this Mikrotik device and will thoroughly test the wireless of any future hardware before putting it into prod...

JanezFord

I guess my suggestion to anyone wanting to try one of these units would be to just go with something else since we can't seem to get rid of this crazy noise inside these boxes.

Has anyone tested the new RB2011UAS-2HnD for this issue?

JanezFord

Does anyone know if there will be a wireless rackmount version of the RB2011 ?

Or any RB2011 with minipci slot(s)?

JanezFord

I am getting the same results with RB751U-2HnD, RB751G-2HnD and RB711UA-2HnD with swivel antennas ... all three devices are very far away (100km+) so it is impossible for them to share the same signal source .... unless there is a satelite gone bezerk somwhere above central europe. Routeros 5.19 on ...

JanezFord

But, why would you choose rb800 over an intel Atom platform - namely D2500CC? It has 2 real cpu cores, 2 Intel gig lans, and ofcourse you can boot OpenWRT or DD-WRT, although I would recommend Openwrt. Well.. this is my fault... should have read the forum, not just the routeros features on mikrotik...

JanezFord

First i would like to say hello, I'm new to this forum. My old Linksys (running tomatousb) died due to the thunderstorm, so I have to choose new hardware. My current network: gigabit 8 port switch (linksys) My ISP provides me internet through WIFI (5GHz) at 20Mbit/s speed. He's aerial is just 50-60...

JanezFord

Hello guys , I have Mikrotik Routerboard RB800 and I am trying to flash this unit with DD-WRT . I bought this unit because of its size and its hardware , but I checked DD-WRT website and it is supported by DD-WRT my problem now is how I can flash this unit with DD-WRT thanks for your help RB800 Dud...

JanezFord

Inspect the traffic on your network (port mirroring, wireshark) to see what is beeing transfered arround, also sounds like mac flooding attack http://en.wikipedia.org/wiki/MAC_flooding

JanezFord

Hello, what is the most effective IPsec encryption algorithm for MIPS 24Kc V7.4 cpu related boards? It seems 3des which is the default setting consumes lots of cpu cycles. I have recently switched from 3des to aes-128 and md5 on my networks after switching to ftth, because rb751g-2hnd units I have ...

JanezFord

I finely figured it out. I created a NAT with my 2 subnet http://solutionsjab.com/help/p10.JPG and then I drag the new entry to the top http://solutionsjab.com/help/p11.JPG And bingo. Thank you to myself for my responses. Mike this is the same as the last step in example on ipsec manual wiki :) htt...

JanezFord

there is always a question - is your queueing optimally configured? Also, you can wait when RB2011 with wireless comes out. RB2011 with wireless.... more info on that please ... (try concentrating on when ) :) will there also be pa minipci slot version or just integrated wireless... Also any more R...

JanezFord

if you use the internal hotspot function to limit the speed (like setting it in the user profile section), it doesnt matter where the client connects, it always limits its speed to 1mbps. but you can choose to setup your own traffic shaping instead. it that case, you could only apply the limitation...

JanezFord

v6 has features to generate certificats, and also SCEP. OVPN UDP and LZO will not be added, at least not in the near future. As those two options seem to be the two most requested options on your forums for quite some time it is realy hard for me, as an experienced programer and developer, to under...

JanezFord

feature request: implement certificate revocation lists (CRL) in OpenVPN server. explanation: when client certificate used for OVPN connection is compromised/revoked by CA, mikrotik OVPN server has no option to block it (except to change username/password in /ppp secrets). +1 :) +1 + UDP, LZO, push...

JanezFord

Hi It seems a bit odd (to say at least) to implement a feature as OpenVPN the way that makes it unusable for about 95% (my guess) of existing infrastructure. Not to mention that many of us do NOT always have an ability to change the server's side of configuration and that there are features in place...

Search found 273 matches