MPLS L3 VPN CCR 2216 as PE

Hello MikroTik community,

I am building an MPLS L3VPN network for a small ISP and would love to hear from operators who have deployed CCR2216 as a PE router in production. I have already purchased some units and am planning to use them in our Points of Presence (POPs) to terminate customer VRFs.

Our network context:

  • Total traffic: <5 Gbps (Internet handled separately by Cisco ASR)

  • ~300 customers distributed across main city and regional sites

  • Target: ~10 VRFs per POP, each VRF for a corporate/enterprise customer

  • CE–PE routing: static or light eBGP per VRF

  • MP-BGP VPNv4 between PEs, centralized Route Reflector

  • OSPF + LDP in the MPLS core

  • CCR2216 used only as PE — not for Internet, CGNAT or PPPoE

Questions I would like your feedback on:

  1. Stability of MPLS L3VPN on CCR2216 in production — Have you seen LDP/IGP desync, VRF blackholes, or label table corruption in long-running deployments? How frequent and how did you recover?

  2. L3HW offload with MPLS active — Most reports suggest keeping L3HW OFF when MPLS is running. Have any of you found a stable way to run both simultaneously (e.g., with suppress-hw-offload per route)?

  3. RouterOS version — Which ROS v7.x build are you running on your MPLS PE boxes and which ones should be avoided? (I have read about VPNv4 freeze bugs in 7.13 and BGP session wipeouts in 7.16–7.18.)

  4. VRF and MP-BGP scale — How many VRFs and VPNv4 prefixes are you running per CCR2216 PE without issues? We plan ~10 VRFs with 10–30 prefixes each.

  5. CE–PE routing — Are you using static routes, eBGP, or OSPF between CE and PE inside VRFs? Any tips for avoiding the CE–PE BGP session "not on shared network" error?

  6. Mixed vendor environment — Has anyone successfully run CCR2216 PEs peering with Cisco ASR or Juniper MX as a Route Reflector or hub PE? Any interoperability gotchas?

  7. CPU core monitoring — We understand MPLS decapsulation is pinned to a single CPU core. What monitoring tools or thresholds do you use to detect when cpu0 is approaching saturation?

  8. Would you recommend CCR2216 as PE at our scale, or do you regret it? — Honest opinions welcome. If you switched to another platform (Juniper MX, Nokia SR, Cisco ASR), what was the trigger?

Any configuration snippets, design tips or cautionary tales are very welcome. We are still in the pre-deployment lab phase so there is time to adjust our design.

Thank you in advance for sharing your experience. This community has already helped us avoid several pitfalls.


For eBGP you need to set multihop=yes if session is not on connected network.

Any further inputs please need your advice on this point guys