MikroTik

Cha0s

Hello,

Suggestion:
Add to Interface/Traffic tab
"Fragmented Packet" counter for monitor oversized packets and fragmentation events

+1

Cha0s

Nevermind my previous question, I misunderstood what raw table is supposed to do.

Cha0s

*) firewall - added raw table to be able to disable connection tracking on selected packets or drop packets before connection tracking (CLI only) Since 6.36rc8 it is possible to configure firewall rules in a raw table ("/ip firewall raw", "/ipv6 firewall raw"). These rules have ...

Cha0s

Please, enable the netinstall on all ports for devices having more than one ethernet port. In case only one port at once can be in netinstall mode, let it be the first port that reports link-up status just before the netinstall can begin (the first physically connected port). Reason: Sometimes the ...

Cha0s

Export and import commands are your friends.

While they are extremely useful, first they don't export everything (ie, users, certificates, private keys) and second they don't always export stuff in the right order causing errors during import.

I had this issue just yesterday.

Cha0s

Netinstall over whatever interface would be very useful too.

++

Cha0s

Netinstall over RoMON would be a good option.

That sounds really cool!

Cha0s

Hello, I just gave IPFIX a try on version 6.36rc19 on a RB2011UAS and it seems that it exports the flows with 'random' timestamps in the year 1970. The time on the RB2011 is correct (double checked). Timestamp: Jul 5, 1970 11:05:20.000000000 GTB Daylight Time Timestamp: Jul 5, 1970 11:38:40.00000000...

Cha0s

It would be nice to be able to do a netinstall via MikroTik itself without the need of a Windows PC. I am in a situation where I have 2 RB2011 (active-standby setup) and I need to netinstall mikrotik from scratch because the installation on one of the boards is corrupted. The problem is that I don't...

Cha0s

We're still seeing our logs FLOODED with SNTP date/time updates or changes, either something isn't right, or MIkrotik decided to just recently start LOGGING every time the SNTP updates, which I cannot understand why anyone needs that information, and it just floods the log cache so that you cannot ...

Cha0s

If the cockpit were replaced with a Siri button, (Fly me to Cancun, please) then more people could operate the plane, but they are limited to doing whatever the designers of the interface thought of - you can't directly make the machine do everything it could do. It's a trade-off. ++ I miss the kar...

Cha0s

I locked me out of my RB2011 one time shortly after I started using it and I recovered using the RS232 console... All this trouble of physically connecting a serial cable to recover the router when you could have just connected via MAC or RoMON and fixed the problem in a matter of seconds :D Sure, ...

Cha0s

I mean, all vendors are going for new interfaces that are easy of use and just it looks good. For ex. ubiquiti and bigger vendors like fortinet, cisco and other - they have nice fancy GUI that is just clear. I think that new look and feel for RouterOS management will make more user-friendly usage. ...

Cha0s

The Only viable sullution should be the TTL and Refresh values specified on each individual record but then again a confirmation on that one would be very much apprechiated as the wiki seldom states new features until very much later.

It has been confirmed already. Check a few posts above.

Cha0s

MikroTik Bonding supports 802.3ad which is practically LACP. https://en.wikipedia.org/wiki/Link_aggregation IEEE 802.3ad Dynamic link aggregation (802.3ad)(LACP) Creates aggregation groups that share the same speed and duplex settings. Utilizes all slave network interfaces in the active aggregator g...

Cha0s

Great! Thanks

Cha0s

You need to ask your ISP to route the /48 prefix to your router.

Usually this is done by using a /64 or /128 prefix between your router and your ISP's router and your /48 is then added to your network any way you like.

Cha0s

I am not aware of any revisions to any routerboard model except RB850Gx2. This was mentioned explicitly on MikroTik's newsletter no. 66. http://forum.mikrotik.com/viewtopic.php?f=21&t=99016&hilit=RB850Gx2+acceleration RB850Gx2 with Hardware Encryption Acceleration The RB850Gx2 devices are no...

Cha0s

What about load balancing - Is this fixed?

*) firewall - fixed policy routing configurations (introduced in 6.35rc38);

I think this fix covers 'load balancing'

Cha0s

You could check this presentation: http://mum.mikrotik.com/presentations/GR15/MUMGreece-Athens-2015-Nikalexis_Nikos.pdf It describes in more depth what shaoranrch suggested. I've implemented this setup and it works flawlessly for about a year now. It just so happens that 10 days ago one of the CCRs ...

Cha0s

I wasn't aware of that!

Cha0s

Unfortunately all the unreachable peers will be constantly logging info messages, so you may want to filter those.

You can configure them in 'passive mode' so that only the remote peers will initiate the connections thus keeping the logs clean

Cha0s

*) traffic-flow - added ipfix support (RFC5101 and RFC5102); Has anyone tried IPFIX over NetFlow? I wonder if the issue described here is fixed using IPFIX http://forum.mikrotik.com/viewtopic.php?f=2&t=102549&hilit=flow https://serverfault.com/questions/739201/mikrotik-traffic-flow-netflow-...

Cha0s

The voltage displayed for an RB2011UiAS is not plausible. 1143.7V? [igb@rb2011-1] /system identity> /system routerboard print routerboard: yes model: 2011UiAS serial-number: 444702957500 firmware-type: ar9344 factory-firmware: 3.09 current-firmware: 3.18 upgrade-firmware: 3.33 [igb@rb2011-1] /syste...

Cha0s

While you are at it, how about fixing the health stats on RB2011? It has been reported multiple times many verions back and it was simply ignored. http://forum.mikrotik.com/viewtopic.php?p=530170#p530170 http://forum.mikrotik.com/viewtopic.php?f=21&t=104326&p=521666&hilit=voltage#p521666...

Cha0s

*) rb3011 - make ether6-ether10 work if SFP module is present on bootup;

Does this resolve the port flapping issue that appeared on some rc after rc29?

If yes, did anyone manage to upgrade to the latest rc without 'bricking' their board?
There are a few reports not being able to boot afterwards.

Cha0s

Version 6.35rc41 has been released. ..[CUT].. If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after crash. It does not resolve the behavior to flapping at the RB3011 i...

Cha0s

I have a websockets app behind a Mikrotik router using dst-nat and it works without any problems for years. Does your dst-nat rule actually work? Does it count any packets when trying to access port 80 from outside? If yes, do the forwarded packets actually reach your windows server? Use wireshark o...

Cha0s

Do not worry, we will reply to the ticket when test will be complete. Those links form 2006 is irrelevant in this case, because back then completely different implementation (quagga) was used. The routing-test package was supposed to be a replacement for quagga. The problem there is about your BGP ...

Cha0s

I am subscribing to this thread since it may be related to an age old issue with MikroTik's BGP not properly sending withdraw update messages. http://forum.mikrotik.com/viewtopic.php?f=1&t=8653&p=38285 http://forum.mikrotik.com/viewtopic.php?p=37688#p37688 http://forum.mikrotik.com/viewtopic...

Cha0s

You must have at least 635rc34 and wireless-rep package on CAP device and also on CAPsMAN: *) capsman - added 802.11g/n band; *) wireless-rep - added 802.11g/n only band; Any news about mAP Lite clock drift? http://forum.mikrotik.com/viewtopic.php?p=527731#p527731 http://forum.mikrotik.com/viewtopi...

Cha0s

Happened here too with rc29 in x86 but stopped after a day. Normal behavior? NTP SERVERS: 150.214.94.5 - 176.31.53.99 Probably not related with the problem on mAP Lite. I just checked numerous devices with various versions and only mAP Lite does not keep time properly consistently. It's always fast...

Cha0s

After upgrading mAP Lite to 6.35rc31 from 6.34.2 the clock is off by ~1.8seconds every 15minutes.

map-lite-clock-drift2.png

I don't know if that was the case before or if it's a new bug but now that SNTP will log the time change it floods the logs with messages like

map-lite-clock-drift.png

Cha0s

Thanks! That was fast
If you define "fast" as "less than three months", yes. Actually I'm a bit worried about software QA at Mikrotik…

I meant fast in response to my report of the issue. Usually my reports or requests are piped to /dev/null

Cha0s

Avoid using magnet to attach your mAP Lite.
is it v6.34.3 problem? can you reproduce it on v6.35rc?

It's a hardware problem apparently. http://forum.mikrotik.com/viewtopic.php ... t=mAP+Lite

Cha0s

It looks good so far.

Thanks! That was fast

Cha0s

I confirm the issue.

With 6.35rc26 the problem still persists.

Every 15minutes the clock is off by ~21seconds.

rb3011-clock-drift.png

Cha0s

I confirm the issue. I have 3 mAP Lite and all 3 exhibit the same behavior as mentioned. The surface does not seem to matter. I've 'stuck' it over a switch, on a server, on a UPS, on the rack itself and the result is the same. No data passes through the ethernet. The moment I remove it from any meta...

Cha0s

This is a userforum, so you can not expect Mikroitk to answer you here, its just a bonus if they do! Sure sometimes if we post a problem or possible bug on forum, we might get an answer straight away from MT staff or other users BECAUSE someone already sent in an support request to MT about the bug...

Cha0s

Hi the export file seen wrong on my CCR1009.
Looks like noone here care for bugs, just for new version package availability.

The only way to get rid is to downgrade.

We do care about bugs very much! I am not so sure about Mikrotik though

Cha0s

After upgrading to 6.34.2 a specific IPsec peer (out of 8 in total) throws repeatedly the error: phase1 negotiation failed due to time up LOCALIP[500]<=>REMOTEIP[500] some_kind_of_hash Both ends where upgraded to the same version when the error reporting started. While the error is logged every min...

Cha0s

It would be fine even if you distribute ZIP via plain http. Torrent was useful to me just because it allowed to download all the files at once. ++ Exactly! Same link: http://mikrotikdownload.s3.amazonaws.com/routeros/6.35rc12.zip?torrent Just remove ?torrent: http://mikrotikdownload.s3.amazonaws.co...

Cha0s

It would be fine even if you distribute ZIP via plain http. Torrent was useful to me just because it allowed to download all the files at once.

++ Exactly!

Cha0s

Presonally I don't care if it's zip or a folder or torrent. I care to be able to download the full release containing everything (as the old .torrent used to) so that I have all archs offline. I manage many Mikrotik installations on a non-internet network(s) so I need to have all files offline to ea...

Cha0s

Files are hosted on Amazon S3. It doesn't support serving torrent of a folder. We could only provide torrent of a ZIP file of all the files, but that is not what you want, probably. Example:
http://mikrotikdownload.s3.amazonaws.co ... ip?torrent

Even that is better than nothing.

Cha0s

Hello, I find it horribly annoying that winbox doesn't fully close after breaking hitting the x when connected to a device. I configure hundreds of devices everyday that completly breaks my workflow. Could please, pretty please revert to fully closing the application on hitting the x? Best regards ...

Cha0s

After upgrading to 6.34.2 a specific IPsec peer (out of 8 in total) throws repeatedly the error: phase1 negotiation failed due to time up LOCALIP[500]<=>REMOTEIP[500] some_kind_of_hash ipsec_error.png Both ends where upgraded to the same version when the error reporting started. While the error is l...

Cha0s

What does Tools > Profile says?

Which process takes up the cpu?

How much traffic did you have when you took that screenshot?
What kind of traffic?
How many connections?

The export on its own does not say much without a better view of what was going on at the time of the screenshot.

Cha0s

Again - Warning: If device has a directory named "flash"... Yeah, what about it? I don't want to store files. I want to upgrade. From what you are saying upgrades happen in RAM. So what does it matter weather there is a flash folder or not? In general SMIPS is a disaster in terms of usabi...

Cha0s

No but I know that the free memory was ~11mbyte.

Cha0s

Most likely you just rebooted device which erased RAM memory and after reboot you had enough space for upgrade. http://forum.mikrotik.com/viewtopic.php?p=519443#p519443 The device on that screenshot was just rebooted. Since it's with an rc version it was used for testing and not in production. Thus...

Cha0s

He is not kidding. Upgrade happens in RAM, and it does not matter how much storage you have. Upload goes directly into RAMDRIVE. Please stop spreading misinformation about uploading only one package, this just breaks things Kidding or not, misinformation or not, your suggested method has not worked...

Cha0s

Any news regarding Voltage being reported wrong on RB2011-UiAS?
http://forum.mikrotik.com/viewtopic.php ... 75#p520275

Cha0s

It appeared in v6.34 and is already fixed in v6.35rc. It is just a cosmetic bug that aes-256 is displayed as aes-128
Maybe cosmetic but I have just wasted an hour on it migrating a router and wondering why my scripts dont work.

Same here the other day

Cha0s

For all people who blames MT for failing updates....test this update first on your testing gear, not on the production. Common sense, but still...

++

Or read the changelog before complaining about changes that seem like bugs (ie: arp table)

Cha0s

I just bought a hAP ac router. I couldn't log into it's default IP @ and had to go through this factory-reset-like procedure... not so great first impression on a new product I'm afraid... hopefully just "bad luck" You are confusing MikroTik RouterOS (which is the operating system) with t...

Cha0s

I have the same questions as WirelessRudy

Cha0s

Is this problem with voltage actual only though Winbox or also in CLI? What does this command show? "/system health print" Everything. CLI, Winbox, SNMP. Also the temperature is missing! > /system health print voltage: 285.6V rb2011-volts2.png rb2011-volts.png All the above are from a RB2...

Cha0s

RB2011UiAS-2HnD is reporting Voltage as 0.0 V and no temperature too. No issues here, I verify on RB2011UiAS-2HnD, RB2011UiAS, RB3011UiAS Do you have a non 'i' (POE out) RB2011 to check? I have two 2011 with the exact same configuration but one reports voltage properly (the 'i' model) and the other...

Cha0s

What's the use of Background Scan if it disconnect radio before ticking it?

I was thinking the same thing!

Cha0s

I on the other hand have the opposite problem with RB2011UAS-RM. It reports ~285 volts (!!) instread of ~23 No temperature too. Numbers from SNMP rb2011-volts.png And winbox rb2011-volts2.png But with the exact same configuration on a RB2011U i AS-RM there are no problems with voltage numbers or tem...

Cha0s

How much free ram did it have when it crashed?

Cha0s

This is on hAP Lite. So I have no other option -but- to use the buggy Winbox 3 unfortunately.

Cha0s

Thanks, that did the trick!

Cha0s

Jesus man! Didn't you have anything longer to post?!

Cha0s

How can I upgrade the hAP Lite?

There isn't enough disk space available.

smips cannot upgrade.png

Cha0s

Following up on the noise issue, it seems that the noise is loud when wifi is used.
Without wifi you'd have to put your ear on top of the mAP to hear anything.

Cha0s

+1 on both requests

Cha0s

Is the default authenticate option gone? Is client now always to connect to units mentioned in the 'Connect List'? Maybe the question is missed... There is no 'default authenticate' option tickbox anymore...... For me is still there... Untitled.png The option is missing when using the interface in ...

Cha0s

Is the default authenticate option gone? Is client now always to connect to units mentioned in the 'Connect List'?
Def-auth missing.PNG

Maybe the question is missed... There is no 'default authenticate' option tickbox anymore......

I can confirm that too.

Cha0s

I have it attached on my laptop's back and I can hear it constantly when passing traffic.
Loudness is somewhat subjective depending on the person. I don't have any equipment to measure the absolute noise in decibels.

You could say the distance in this use case is about 30-40cm.

Cha0s

High pitch noise

Cha0s

If you will not be using any encryption (IPsec) then 3011 should be fine for 100mbit bandwidth.

Otherwise you could look into the CCR series just to be sure it will handle the traffic.

Cha0s

Anyone else experiencing high pitch noise coming from mAP Lite when passing traffic?

I have 3 of them with completely different configurations and all 3 produce this high pitch noise.

After a while it becomes rather annoying to the ear

Cha0s

The changes to the Bandwidth Test tool were made on 6.34, so 6.35rc also includes them.

What's new in 6.34 (2016-Jan-29 10:25):
...
*) btest - significantly increased TCP bandwidth test performance;

Cha0s

Anyone else interested in NAT give a thumbs up on this feature request thread http://forum.mikrotik.com/viewtopic.php?f=19&t=90564 Isn't the reason for IPv6 to have flat wholeworld network routed without natting? This is just the propaganda spread by the IPv6 evangelists. In the real world there...

Cha0s

I believe the 40% gius64 refers to is the improvement on TCP on the Bandwidth Test tool. Not on NV2.

I can confirm that I see huge improvements on TCP tests.

Running the test on 127.0.0.1 on an quad core atom before 6.34 I would get ~570Mbit.
With 6.34 I now get 3.4Gbit.

Cha0s

Cha0s - Make sure that you have administrator privileges and in file path there are no specific symbols; I do have administrator privileges and the path is simply "E:\boxcryptor\winbox3\" so no weird characters there. Just install a demo version of boxcryptor and try it yourself. Boxcrypt...

Cha0s

Can you be more specific? What exactly isn't working?

I've upgraded 3-4 devices to 6.34 so far and I haven't got any issues with SNMP (or anything else for that matter) using Cacti, Observium, Dude and custom scripts.

Cha0s

Latvian apparently. https://translate.google.com/#auto/en/tikls

Mikro on the other hand I assume comes from 'micro' which in turn comes from 'Μικρό' which is Greek for 'small'

Cha0s

Part 2, RB3011 vs RB850Gx2 http://lanmarket.ua/stats/testirovanie-proizvoditelnosti-marshrutizatorov-Mikrotik-RB850Gx2-i-RB3011UiAS-RM RB850Gx2 in middle between old RB2011 and new RB2011. Thanks for the test results. I think the results would be more realistic if 2 RB850Gx2 where used for IPSec in...

Cha0s

Any chance you will make winbox 3 remember on which monitor display it should load each session? Working on multiple monitors with multiple winbox instances from multiple routers, the old winbox 2 behavior is a must. Especially when monitors have different resolutions (thus remembering on which moni...

Cha0s

Yeah, this is rather useful.

Many providers use fe80::1 as the default gateway.
It makes everything SO much easier when handling many many servers behind your router(s).

I hope this limitation is lifted soon. (And in theory it should be rather easy to do so)

Cha0s

On hAP on several routers all running 6.33.5 we are seeing a problem with the /tool e-mail settings. If you set the server in Winbox to 1.1.1.1 (say) and then go to the CLI and execute /tool e-mail pring the address entry is blank. You can only seem to enter the e-mail server address via the CLI. T...

Cha0s

I believe the 00:00:00:00:00:00 ARP entries are the incomplete ARP entries mentioned in the changelog.

*) arp - show incomplete ARP entries;

Cha0s

If I login via SSH then logout, the connection stays in 'Active users' forever apparently.

2421 users and counting

On the 17th when the logins start is when the router was restarted.
So the logins stay there indefinitely.

Cha0s

You are right I wasn't clear about that. I meant it would be nice to have a telnet interface like Cisco/Quagga (same commands, same output) since that way I wouldn't need read-only ssh access but read-only 'bgp access'. And there are already tools out there to parse cisco/quagga formatted output. On...

Cha0s

Thanks for the suggestion. The complete route list certainly reaches the default limits of the webserver (Apache by default has a limit of 8KB for example). The fetch command might also have a limit of its own. So I will need to modify your code to send the data in 8KB chunks. This method certainly ...

Cha0s

I believe the 00:00:00:00:00:00 ARP entries are the incomplete ARP entries mentioned in the changelog.

*) arp - show incomplete ARP entries;

Cha0s

Please implement Prefix Origin Validation http://www.faqs.org/rfcs/rfc6811.html

More info http://bgpsrx.antd.nist.gov/

Cha0s

How about having the server send the command via ssh? I need to avoid using the API since this requires access to the remote routers (and there are more than 700 of them using anywhere from v2.9.x to v6.x). I've already implemented it this way using SSH (which works on all versions of mikrotik - si...

Cha0s

Commenting the fetch command and leaving only the log info it executes instantly.
So the fetch command slows things down for some reason.

Cha0s

I figured it out :local routes [/ip route print detail as-value]; :foreach route in $routes do={ # :log info $route; /tool fetch keep-result=no url=("http://test.webserver.local/\?dst-address=" . $route->"dst-address" . "&gateway=" . $route->"gateway" . &q...

Cha0s

Hello, Thanks for your suggestions! I need to avoid using the API since this requires access to the remote routers (and there are more than 700 of them using anywhere from v2.9.x to v6.x). I've already implemented it this way using SSH (which works on all versions of mikrotik - since 2.9.x - unlike ...

Cha0s

Hello, I am trying to figure out a way to send the output results of this command: /ip route print terse to a remote server (linux) for further processing. The catch here is that I don't want to write the output to a file and then upload the file because I need to run this command/script every few m...

Cha0s

huh... so, there IS 64-bit version for PCs?..

On my installation it shows x86 and the build is the same as yours.

Cha0s

If I login via SSH then logout, the connection stays in 'Active users' forever apparently.

Cha0s

I've seen this behavior in RIPE Stats when announcing new prefixes regardless of the route objects defined (which of course should be correctly defined anyway). It turns out that my upstream's upstream providers do some heavy filtering so I have to inform my upstream to inform them to update their f...

Cha0s

The changelog date seems to be from last year

Cha0s

Hello. I am not an expert, but i think 29 dBi is too much for 2 km. I know this dish has very narrow beam. Actually the bigger the antenna gain the better, regardless of distance. The whole concept is that you emit as less as you can (so at minimum tx-power) but you gain as much as you can by using...

Cha0s

I need an official link. I can't just trust that one I find from googling would be clean (may have a virus or have been modified.) I understand that it was not working for a few, but for the ones that it was, we should have the ability to access it. If you can just post a link in the forum with a w...

Cha0s

It's awesome that a new version of Dude is out! No one would expect this. BUT not having the option to run the server on windows (or even linux which would be better IMHO) is a HUGE step back! You might as well had left it as it were... Mikrotik RouterOS is a router. Not a monitoring system. It's fu...

Cha0s

Does anyone else experience this issue or is it just me?

Cha0s

What type of DDoS was it? Give us more information.

Cha0s

Looking up at Cisco's documentation on NetFlow v9 it mentions that the bytes counter is by default 32bit, but it is configurable and suggests to increase it to 64bit on core routers etc. http://www.cisco.com/en/US/technologies/tk648/tk362/technologies_white_paper09186a00800a3db9.html In some cases t...

Cha0s

Hello, I am using Traffic Flow with pmacct (nfacct) to do IP Accounting. I've noticed that if a flow exceeds ~4GBytes in less than a minute (which is my 'active flow timeout') the exported flow 'Octets' counter wraps around losing a significant amount of total data measured. I believe this is an iss...

Cha0s

I use individual packages only and do not see any such problem. Try it...

Same here.

Cha0s

Cha0s

Yeap. It frees a whole 1.5 mbyte of data! HUGE savings!

We can now use our routers as fileservers with so many data free!

Cha0s

I agree with jarda.

Cha0s

Good luck! But please make no postings with "Bump!" anymore.

Thanks.

But please don't make posts that are off topic anymore.

Cha0s

You need to enable 'Advanced mode' to show those fields.

Click on Tools > Advanced Mode and should be ok.

Cha0s

Either way that's not what I am asking.

I don't have access to the servers and I don't want to.

I want to apply the policy I am describing on the router NOT on the servers.

Cha0s

The issue with this approach alone is that when someone does for example an ftp transfer to IP 1.1.1.1 the PCQ will apply the limit of 100mbit to that IP. But when another user tries to connect to that IP at the same time, it's nearly impossible since due to the ftp transfer there are a lot of queu...

Cha0s

To put all this into context, There is a router that behind it there are multiple servers (colocation/dedicated). The servers are all connected to gbit switches but they are allowed to have 100mbit connections to the internet. But locally (on the same subnet/vlan) they must not be limited, so we can...

Cha0s

I am not trying to limit the subnet as a whole. I want to have 100mbit limit per IP (/32) without having to create queues for each IP (there multiple /24s behind the router - hence thousands of IPs). That's pretty easy by using PCQ. It will apply the limit using a single queue. It works like a charm...

Cha0s

Bump..

Cha0s

While the cost is much higher you could make your own Mikrotik router with AC wifi. I know. But I'm a Network engineer who's looking to operate 50+ of these with minimal effort/cost, not an electronics hobbyist. I really need a one-in-all plug-n-play solution to keep maintenance overhead low. I und...

Cha0s

To me, when I connect to a <6.x version I get the old winbox 2.x interface. No missing menus for me. Also connecting to older versions it remembers on which of my monitors the window was last loaded (standard winbox 2.x behavior). But connecting to 6.x versions it will always load the window in the ...

Cha0s

Regarding lack of ethernet ports there's this solution depending on your performance needs.
http://wiki.mikrotik.com/wiki/SwOS/Router-On-A-Stick

Of course this solution only adds up to the final price so obviously it's not ideal

Cha0s

While the cost is much higher you could make your own Mikrotik router with AC wifi. Just use a routerboard with a mini-pci, an antenna, and an enclosure. http://routerboard.com/RB912UAG-2HPnD http://routerboard.com/R11e-5HacD http://routerboard.com/CA411-711 http://routerboard.com/ACSWIM With the ab...

Cha0s

Yes, we need this too!

Please allow us to add custom link-local addresses!

Another use case is using fe80::1 as default gateway for clients.

https://www.edge-cloud.net/2013/08/ipv6 ... t-gateway/

Cha0s

It depends on many things actually. How much traffic will you be having? How many connections? How many pps? Will you be doing NAT or is this a routed environment? How many and what firewall rules will you be using? Will you be doing QoS? Will the VPNs use encryption? In my experience without using ...

Cha0s

Do you use SNMP and/or The Dude? I've seen on occasions that The Dude will cause 100% cpu usage (and profile shows 'management' at 100%). It may be a long shot but you could try disabling SNMP to see if that changes anything. Also do you get a full internet routing table from your BGP peers? If the ...

Cha0s

As MikroTik products are more targeted to the (W)ISP sector I am not sure if that's the case anymore. Since the release of CCRs the wifi products have become worse and MikroTik is trying many different stuff at once making things even worse (eg: 6.x has been extremely buggy since the beginning) On ...

Cha0s

I don't understand why such a button 'close all' would be such a big deal to embed it in the menu. There are several buttons that are only used by some in very special setups. If designer would start counting all button usage of all buttons of all MT users I'll bet my requested button gets a lot mo...

Cha0s

I am glad I got my hands on the 'old cased' hAP!

It fits like a charm behind my laptop screen. The new design is cumbersome.

Cha0s

We do get a number of requests for that particular OS, but enabling IDE has a significant processing overhead. So apparently there is more interest in running RouterOS in this way, the only thing that's needed to get this working is virtio disk support in the x86 installer-ISO. If Mikrotik needs te...

Cha0s

Here's a slightly different version that will automatically find all configured BGP Peers and monitor them (instead of having to define each peer manually). Thanks to JB172 for the patch :) ################################################################### # BGP PEERS STATUS MAIL ALERT SCRIPT (for ...

Cha0s

rajo - Issue with drag & drop is fixed already. 6.32 is now removed form downloads page but fix will be back in next version. I did test it myself and it works with Winbox 2 and Winbox 3. *) winbox - fixed multiple firewall rule moving in Winbox 2 By the way - it will never work if rules are no...

Cha0s

Doing the same bandwidth test without bonding, using SFP+ 10gbit links with 2 CCR1036 and a Cisco 3750E in the middle and I still get a maximum of 140kpps and 1.6Gbit. Is this a limitation of the bandwidth test tool? CPU load is 0% during the test with no packet loss or any other visible issue with ...

Cha0s

By the way, dragging and dropping multiple items (e.g. firewall, NAT, and mangle rules) in Winbox is broken since probably 6.30. You can select multiple items, but when you drag and drop, only the item you clicked to drag gets moved. I confirm that. I also have mentioned it on a previous release to...

Cha0s

This is the default configuration of MikroTik.

If you don't want this config to be applied after resetting the configuration, you need to specify no-defaults=yes

/system reset-configuration no-defaults=yes

Cha0s

I didn't mean to offend you, sorry if I did. None taken. :) It's just that I generally don't 'downvote' (in quotes, since it wasn't really a proper feature request) stuff that I don't use or care about, unless they will interfere with my workflow. So when I see people being negative about other peo...

Cha0s

By that logic, fast-ethernet is a technology from the day before yesterday as well. Does that mean that all fast-ethernet routers (like hAP Lite) do not have any market prospects? :P In my country there isn't any real alternative to ADSL & VDSL for example. Not all countries have cable or fiber ...

Cha0s

Still, it doesn't change the fact that it's confusing to the end users IMHO.

Cha0s

Good day, Is there any way to generate ping graphs on the dude? If you add the 'ping' service on the device you want, then it will generate graphs based on the ping rtt on the History Tab of the device. Keep in mind though that it's pretty much not usable since if you have other services also it wi...

Cha0s

I'm surprised, i was expecting v6.31.1 in bugfix channel. Yes, very confusing :( Not at all. They promised to keep stable (bug fix only) branch until current gets stable. So far, so good. Then the problem is the terminology used. When you go to download a software, the 'current' release is consider...

Cha0s

A routerboard xDSL modem would be awesome!

Enough with that crappy modems that most ISPs give! Not to mention the fact that most of them are 'backdoored' with that TR-069 bs

Cha0s

I just tested this script and it looks ok to me. It added tx and rx bytes and comparing that to what winbox shows for my pppoe interface it is the same total number of bytes. Beware that the script will save the number in bytes, while winbox shows the numbers in KiB,MiB,GiB (so make sure to divide t...

Cha0s

Bump..

Cha0s

Actually it's a bit more complicated than that. To be able to reach the router on both IPs (from both providers) you need some extra rules so that you first mark the incoming connection and then route-mark the outgoing packets based on that connection mark. In other words make it so that the router ...

Cha0s

Did you also create two static routes with those routing marks?

Without proper routes the packets will always use the main routing table to leave the router.

Cha0s

Instead of Prepends you can use MED (Multi Exit Discrimator) to control incoming traffic - if your rest of your configuration allows for it. In this talk he describes the use of MED on slides 26-28 http://mum.mikrotik.com/presentations/GR15/MUMGreece-Athens-2015-Nikalexis_Nikos.pdf Useful info http:...

Cha0s

I'm surprised, i was expecting v6.31.1 in bugfix channel.

Yes, very confusing

Cha0s

I mean inside of the Mikrotik OS, to spawn up virtual routers within RouterOS, like metarouter, which works on CCR etc. We have a couple of Fortinets to do this where we need it.

CCRs do not support Metarouter.

Cha0s

You can already do that using scripts. You can prepare a script for every profile and then running the right one whenever you need it. Yes... but... waaay too cumbersome for quick adding/removing networks! The use case I am asking this for, is for quick adding new 'wireless networks' as I move arou...

Cha0s

It would be nice to be able to save preconfigured profiles for various access points and be able to switch between them easily from winbox. I use hAP Lite as a 'portable router' strapped in the back of my laptop, powered by the laptop itself and use the ether1 and wlan1 as gateway interfaces to conn...

Cha0s

I see. I though you were using some pre-made lists and just convert them to mikrotik commands. Do you know any public blacklists I could use? Btw, how often do you run this script? If I am not mistaken this method keeps writing on the NAND storage on each fetch? Any ideas how we could make this run ...

Cha0s

First of all, thanks for this script!
It was something I wanted to implement for ages now, but never had the time to do so

At the moment it works by using your server.

Could you post your server-side code to be able to run this without needing to access your server?

Thanks

Cha0s

Script to send notifications to multiple email addresses for multiple BGP Peers if their status is not 'established'
http://forum.mikrotik.com/viewtopic.php ... 04#p494204

Cha0s

Try to connect to it with WinBox MAC-address method. That's the best way to manage a Routerboard when it doesn't have any IPs configured or the 'wrong' IPs. But in case the board is not on the same network/vlan/broadcast domain, then the MAC connect does not work. There is also ROMON alternatively ...

Cha0s

Has anyone noticed any limitation on the bonding interface? I have 4 gig ports bonded on a CCR1036 connected to another CCR1036. I use mode 'balance rr'. If iI do bandwidth test (UDP, 1500bytes) I can see all ports being used, but the pps will never go above 140000 limiting the total bandwidth to ~1...

Cha0s

From what I read about RouterOS, there is no option for backup interfaces (like in IOS "#backup interface fa0/1") except bounding, right? If I use bounding, then both interfaces should be connected to a single cisco switch (where channel-protocol lacp is configured on 2 ports). So if that...

Cha0s

This is just one small feature, and for 95-99% of customers it will be totally no difference. But those 1-5% that need it usually will know exatly what to look for in serial number. What's a big or small feature is subjective to everyone's needs. By that logic all routerboards should have the same ...

Cha0s

Hello, I want to set up a specific traffic shaping but I can't seem to find out how to implement it. So, I want to limit the bandwidth to 100mbit up/down per IP (on the LAN side) regardless of the IP (meaning not having separate queues for each IP). This is easy enough with PCQ. But if for example I...

Cha0s

Would it be possible to add/remove vNICs from CHR while running?

Other guest OSes (Windows, Linux) do support this feature and allow you to add remove virtual hardware without rebooting the VM.

Is that something you would be able to support on CHR? It would be really useful

Cha0s

My report was specific to CHR not to any Mikrotik device or installation. I am not sure what the problem is with your configuration. I have DHCP servers on bridges without any problem whatsoever. I set up my lab to test your configuration with CHR (Cloud hosted router) which is stil in RC so the spe...

Cha0s

It would be nice to be able to reset the configuration of a router for a specific section.

Eg: To be able to reset the configuration of /routing to defaults without resetting the whole router to defaults.

Cha0s

Probably something like this will work /routing filter add chain=FT-IN set-bgp-local-pref=200 add action=accept chain=FT-IN prefix=192.168.12.253 prefix-length=32 add action=discard chain=FT-IN prefix=0.0.0.0/0 prefix-length=0-32 add chain=FT-OUT set-bgp-med=100 add action=accept chain=FT-OUT prefix...

Cha0s

Just tested a metarouter openwrt image on my system. Eating way too much cpu, maybe that is possible on a ccr or so, but no go on smaler mikrotik devices...

CCRs (Tilera) and PPC boards do no support metarouter.

Cha0s

Problem with bridges and dhcp-server on x64 mode still persists on rc16.

Tested on ESXi 5.5 with E1000 and VMXNET3 interfaces.

Cha0s

Out of curiosity how much traffic can an openwrt metarouter image handle?

MIPSBE is slow on its own, I can't imagine running openvpn with encryption over metarouter being able to push any significant amount of data without maxing out the CPU.

Cha0s

It seems there is a bug with x64 enabled, bridges and dhcp server.

http://forum.mikrotik.com/viewtopic.php?f=1&t=99314
http://forum.mikrotik.com/viewtopic.php ... 54#p494554

Cha0s

At first glance there seems to be an issue with DHCP when running on a bridge. When an interface is slave to a bridge it seems that it doesn't respond to DHCP client requests. What's really weird is that I have numerous installations with bridges and DHCP server running on them without a problem wh...

Cha0s

I confirm the problem with bridges and DHCP server.

DHCP server does not respond to any dhcp client requests when it's configured on a bridge interface.
It works fine on an ethernet interface directly.
http://forum.mikrotik.com/viewtopic.php ... 25#p494325

Cha0s

Cha0s

No instruction to run under QEMU? Is it possible? Already try on my FreeBSD boxes, no success.

I run it the other day under QEMU on Windows via GNS3.

It works just fine!

Cha0s

Maybe you're missing something when creating the bridge.. I copied your export verbatim. And I created my own configuration from scratch with a completely config-reset router JUST in case. I didn't miss anything. As a matter of fact when I created my own configuration I simply created the most basi...

Cha0s

I don't know your topology, but a quick workaround would be to disable the bridge and re-assign the dhcp server and the IP address to ether8 directly.

It should work after that.

Cha0s

At first glance there seems to be an issue with DHCP when running on a bridge. When an interface is slave to a bridge it seems that it doesn't respond to DHCP client requests. What's really weird is that I have numerous installations with bridges and DHCP server running on them without a problem wha...

Cha0s

Unfortunately it has been a few years since I last checked, but I recall that on version <=3.20 you could use custom made NPK packages. After v3.21 there was some package verification in place that did not allow to install those custom packages. We used to use these in AWMN to be able to have Quagga...

Cha0s

How can it be your configuration? I wouldn't know since you haven't posted your full configuration so that anyone can reproduce your problem. If you don't post a complete procedure of replicating the problem then there is no problem as far as mikrotik or anyone else is concerned :P I know it's borin...

Cha0s

I use DHCP extensively with all kinds of OSes and all kinds of Routerboards and I have no issue at all. Windows 7 - works perfect Windows 8 - works perfect Windows 10 - works perfect Windows XP - works perfect Linux (Ubuntu, Debian, CentOS, RHEL) all work perfect. What you describe sounds like a use...

Cha0s

Looks like they have improved tamper protection also. NPK packages are now checksummed and the format has changed. I believe that checksums for the NPK packages appeared in the late versions of v3. Before that there were various packages created by users that allowed you to install other software (...

Cha0s

I was looking for the same script to get alerts when any bgp peer goes down. I didn't find anything complete so I wrote a script based on what was suggested on this thread. It's a single script that supports multiple peers and multiple emails for getting alerts. It assumes that /tools email is prope...

Cha0s

I think this used to work a few years ago and changes to the OS either broke it or removed it on purpose. Most likely it used to work because google did not redirect to https by default a few years back. As mentioned, there is no solution to this since https is used. If there was a solution it woul...

Cha0s

I don't think that's possible. The newer models have a different CPU, so the acceleration is on hardware not software to be fixed.

Cha0s

Will VMXNET3 be included on the standard x86 builds as well or only on the CHR images?

Cha0s

BFD is working for BGP not for OSPF just setup BFD on OSPF P2P link and you will see that it colapse after a few seconds cheers Thierry Did you see the screenshot I posted? There are 2 OSPF peers (one IPv4 one IPv6) with 8-9days uptime. And yes bonding1-ibgp is a p2p link between the 2 CCRs running...

Cha0s

Just upgraded 2 RB2011 from 6.29 to 6.30.2. Both RBs have identical configuration (active/standby setup). The standby RB2011 got upgraded ok, no issues so far. The active RB2011 never came back online after the upgrade. I just got the same problem today with two CCRs. It turns out that something ha...

Cha0s

Yes, change both to 1492. Don't set MRRU, you don't need it (unless you do MLPPP? ) But, since you are using NAT then most likely your bottleneck is the RB2011 itself as its CPU is only 600MHz and cannot handle that much traffic. You can confirm that by checking the CPU usage when you max out at 200...

Cha0s

I assume you are doing NAT to get out to the internet? I have a couple of RB2011s and by using NAT they max-out at 150-200mbit (also I have a bit complicated configuration with vlans, bonding etc - but really simple firewall rules < 10rules). The bottleneck is the CPU itself since it cannot handle m...

Cha0s

BFD is not working and session are lost after few seconds even with a timer at 1000 ms So do not you BFD or you will get a lot of OSPF flaps A+ Thierry I've never had this problem. It may be specific to your configuration. All my BFD peers are configured with the default values (which amount to hol...

Cha0s

the issue is known and will be fixed in v7

What's the issue exactly?

Cha0s

10 ;;; Allow BFD chain=input action=accept protocol=udp dst-port=3784 log=no log-prefix="" With this rule you get state 'UP' on both ends on Routing > BFD > Neighbors? In my case I didn't so I had to allow UDP 3784 & 3785 for it to work. https://tools.ietf.org/html/rfc5881 BFD Control...

Cha0s

Strangely we are using BFD+OSPF on RouterOS 6.5 and 6.19 with no issues. Generally I don't have any issues with BFD either. At least not the ones mentioned on this thread. But occasionally if one peer goes down, BFD may drop all the other peers as well without any reason (no packet loss or anything...

Cha0s

Did you find any solution to this? I have the same problem. I am trying to give priority to BGP and BFD so when the uplink is congested BFD won't drop the BGP peer. While mangle rules count the matched packets for both BGP and BFD, the queues do not match any packets. In my case it was just bad con...

Cha0s

My point was simply, let 5Ghz reign the outdoors and let 2,4Ghz reign the indoors! I totally agree with that! That's exactly what I am doing for my network. 2.4GHz for my home and 5GHz for my p2p links on the roof. But as a former poster also already pointed out that is just a pale dream coming fro...

Cha0s

Another bug:

Selecting multiple routing filters and trying to move them up or down, will only move one random rule of those selected instead of all of them.

This works perfectly fine on v5.26.

Cha0s

If it were up to me as a WISP, I would BAN all indoor use of 5Ghz and preserve that band for outdoor use ONLY for WISPs. While I agree with you, that 5GHz should be kept 'clean' from SoHo devices, I strongly object to the preservation of 5GHz only for WISPs. What about open wireless communities? Or...

Cha0s

Updating from v5.26 to 6.30.2 removed all configured IPsec peers.

Cha0s

Did you find any solution to this?

I have the same problem.

I am trying to give priority to BGP and BFD so when the uplink is congested BFD won't drop the BGP peer.

While mangle rules count the matched packets for both BGP and BFD, the queues do not match any packets.

Cha0s

I noticed that sometimes logs get messed up. I don't know on which version this started, but in general the log window keeps doing stuff when nothing is happening (it seems that it refreshes itself at random times messing up the entries shown to the user). mikrotik logs.png The last 3 entries are r...

Cha0s

I noticed that sometimes logs get messed up. I don't know on which version this started, but in general the log window keeps doing stuff when nothing is happening (it seems that it refreshes itself at random times messing up the entries shown to the user). mikrotik logs.png The last 3 entries are re...

Cha0s

I have the same problem with v6.x on XenServer, regardless of version.
v5.26 works just fine on XenServer.

Apparently XenServer support was broken in v6.x and is still broken to this day

Cha0s

Apparently v6.30.2 does not have the new code to support the new licensing for the CHR.

I believe upgrades will work just fine after 6.31 is released.

Cha0s

Torrent download of 6.30.2 seems stuck on 335 / 356MB, 93.09 % Direct downloads seem fine though. Update to that, it now seems to have completed the download. Guess there weren't enough seeders - Maybe the URL is the problem - http://www.mikrotik.com/download/routeros-ALL-6.30.2.torrent More seeder...

Cha0s

Nice!

Is vmxnet3 (10gbit) supported?

Cha0s

Is there any difference (besides licensing) compared to the standard Mikrotik x86 releases which already work on VMware?

Search found 1195 matches