We have two CCR1009 and one is active but every few months we have to reboot it to fix dns error for our PPPoE clients?
An active CCR is using primary services - OSPF, L2 Bridged Vlans , Firewall , PPPoE server
The reason for L2 Bridged Vlans for PPPoE is because Mikrotik OSPF is not robust and was causing regular router lockups or router stuck in "init mode", even after numerous OSPF configuration modifications over a 5 year period the problem remains,
The CPU's were never running at 100% but yet a reboot solves the issue,
My opinion is that Mikrotik is very good at one function per router but activate extra functions and then reliability is reduced ,
My question is for opinions on using a hardware firewall before both of the CCR's ?