CCR1072 950 pppoe connection cpu overload when pppoe disconnected

RouterOS General
1

Dear master,

Please share, my ISP is using CCR 1072 for pppoe users. We use bridge interface feature to bridging some physical interface. Pppoe service about 950 connection and 900mbps bandwidth.
From beginning my router and configuration running well for 6month no issue.
Starting this week my router become crazy. Sometimes my cpu goes overload, and disconnecting most of the pppoe connection. Following with bandwidth reduce for other client that not pppoe disconnected.
The disconnected pppoe every 6hour and does not sure about the time.
No flooding traffic, and i already set some rules filter for security like ddos and other things.
I still can not knot how to figure this out, and still dont know the solution.
Does somebody has been face this problem?
Please help i need sharing the experience, im stuck with my problem.

2

Mudar para portuguêsFechar tela cheia
I have this same problem in some ccr1036. Here at the problem, a paragraph cpu up 80% in the firewall. You quickly found what makes your cpu profile climb / tool profile? I made some changes in pppoe profile I’m analyzing tomorrow Even if the problem does not occur, I believe That was resolved.
To help YOU, Send to Your firewall configurations do and that the profile of His pppoe that ccr1072.

3

Im still facing this problem, already one week my router become crazy. Im not sure why the pppoe suddenly start to disconnected and cpu overload, all my router become slow respon.

4

I try to help you compare and it will make the changes I made in my ccr1036 here put your firewall rules mangle, filter and etc ..

also puts the settings of your profile PPPoe + server for me to analyze. You use other server that PPPoe server as OSPF, MPLS, VRF?

5

Same problem. Anyone with news or tips?

6

Hi,

are you using NAT masquerade on the CCR?
If you you do and you have a static public address, use a static srcnat instead.

Regards,
Ape

7

Sounds like someone should have come to MUM.

Good thing the MUM can come to you.

Janis Megis addresses several common issues you may be experiencing with PPPoE.

Please watch his talk. I know he would appreciate not getting one less support email. :wink:

Most underused and overused RouterOS tools and features

He talks about PPPoE, NAT and routing issues that you are probably experiencing.

-Louis

8

Thanks Louis.

I had this talk in mind while writing my post.

9

Is this problem solved with v.6.42.x in 1072?
(because of change of firmware for CPU tile optimize)

10

Problem solved with disable nat rules.
Last time my problem causi g with nat rules.
Maybe mikrotik have solve this problem on new ROS update.

11

I use only public IPs, and I have no “masquerade” rules, and I have no “dstnat” (only are executed under restricted conditions to access to managemen devices), and I have no OSPF, so, although I saw https://www.youtube.com/watch?v=D80_a_O86jc i have no answer to my problem :frowning:
I have two srcnat rules only for my management devices with private ips

Some idea?

12

Hi there,

Anyone got a solution to this one, we have about 2000 PPPoE connections and our CCR1036-8G-2S+ has been running without a problem for the last 6 months, now suddenly this is happening, high CPU usage, PPPoE users disconnect, router hangs, no traffic flowing, tool/profile shows firewall and networking at 40-50%. Router is PPPoE concentrator, Static Routing, Static NAT for public Internet access, 2 Gbps traffic. The weirdest issue is that this worked before, even with 2500+ connections (although less bandwidth about 1 Gbps ).

Is this an Apple style strategy, upgrade to newer RouterOS version buy new/more hardware for the same setups? Does anyone have an Idea how to tackle this problem, apart form buying another CCR and doing NAT and PPPoE separately?

Thanks for your advice,

13

Hi almost same our Mikrotik CCR 1072-1G-8SFP+, we experience also 100% CPU but on peak hours, we have 1Gbps Bandwidth and use PPPoE server with have 600 clients, I have no NAT on firewall, I only block the client to access the 1072 on the firewall