Community discussions

MikroTik App
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Tue Feb 19, 2019 10:31 am

I have 3 CCR 1072 and in all the same thing happens to me, I'm pissed with Mikrotik, it can not be that your top-of-the-line router will pass this to you and do not say anything about it.
 
bradnz
newbie
Posts: 27
Joined: Mon Jan 22, 2018 4:34 am

Re: CCR1072 watchdog reboot

Mon Feb 25, 2019 3:03 am

I've just completed removing any connection tracking from ours. We had some DDoS issues and from what I've read connection tracking can be a big problem in that case. So I've rearranged my firewall rules and adapted things to run in the raw table as much as possible and turned off connection tracking. So far things seem good, but no real test to speak of yet. We really didn't need connection tracking on this router it was just not something I really considered much until the DDoS stuff started.
I have just removed all NAT and Mangle rules, which means that CT is actually not operating on the device at all. its behind a Transparent Fortigate Firewall, so shouldnt be an issue anyway. I have moved NAT and PAT services to a CISCO 3925 router now, and havent yet seen a reboot. I wondered if the CT turned off would have actually just been the answer rather than having to install another router for this purpose of NAT / PAT. A bit annoying. Do you think if I just turned off CT it would have been ok? How have you found things have been since you did this?
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Mon Feb 25, 2019 10:34 am

Yes, when connection-tracking is disabled the device performs much better.

When I contacted Mikrotik support about device reboots they requested access to device. I provided them a test setup with one CCR1072 to act as traffic-generator and another one acting as DUT. No configuration on DUT, just routing and 4 FW rules to prevent unauthorized access.

After a few weeks of meaningless tests, the answer was - DUT is overloaded, you can't see it but it is.

With 1G?????? That is not even close to your test results published on your web site?????!!!!

- Our tests are performed with connection-tracking disabled!

That's all! You are ******!

I will say it again, CCR1009, RB1100x4 and RB4011 are working as expected in absolutely same test condition in which CCR1072 reboots it self!!!
Last edited by kos on Mon Feb 25, 2019 3:22 pm, edited 1 time in total.
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Mon Feb 25, 2019 10:38 am

Another restart this Saturday, is desperate, I have the router at 400km, please Mikrotik say something about it.
 
cdemers
Member Candidate
Member Candidate
Posts: 189
Joined: Sun Feb 26, 2006 3:32 pm
Location: Canada
Contact:

Re: CCR1072 watchdog reboot

Mon Feb 25, 2019 4:28 pm

Email mikrotik support, they don't monitor the user forums for people having problems. Normus and a few others frequent here, but best just to email them with a support ticket and supout file.


Sent from my SM-A520W using Tapatalk

 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Mon Feb 25, 2019 5:32 pm

I always send it, and the only thing they tell me is update, I already have 5 different versions. It does not help to send it, they have no idea what the restarting does.
 
djdrastic
Member
Member
Posts: 321
Joined: Wed Aug 01, 2012 2:14 pm

Re: CCR1072 watchdog reboot

Wed Mar 27, 2019 11:54 am

Reading this thread as I have to upgrade a 1016 due to lack of SFP+ ports . Has worked 1y without skipping a beat barring the security updates.
Am I better off getting a EdgeRouter Infinity or building a cheap X86 box ?
 
doush
Long time Member
Long time Member
Posts: 640
Joined: Thu Jun 04, 2009 3:11 pm

Re: CCR1072 watchdog reboot

Sat Mar 30, 2019 4:34 pm

Dont upgrade to CCR1072. It is not a stable product to work with.
Frequent reboots etc..
 
whoknew
Member Candidate
Member Candidate
Posts: 145
Joined: Wed Oct 13, 2010 8:51 pm

Re: CCR1072 watchdog reboot

Thu Apr 04, 2019 4:53 pm

SOLVED

We get after a lot of work and trouble solving the problem of CCR1072 no longer restart or freeze.

Solved the problem was relatively easy, after more than 3 months waiting for the mikrotik team to position on the problem, solved.

We traded the CCR1072 for an MX-80 Juniper.
So....you went from a $2,000 USD router to a $35,000 USD router?
A MX80 is not a $35000 router! Where the hell do you buy your gear from ?
Where are you buying them from. Distributor list price all show $19,000+ USD. I have a friend who works for a larger ISP and they can get them for around $6,800 directly from Juniper.
 
wildbill442
Forum Guru
Forum Guru
Posts: 1050
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 12:56 am

Hey, guys

After upgrading CCR1072 and CRS317-1G-16+ to version 6.42.2, the kernel crashes have stopped. I hope they have really solved this great problem.

Best Regards,

Vagner Felipe Becker
Unfortunately they are not! Neither in ROS 6.42.2 nor in any other ROS version!!!

CCR1072 is not capable to handle 1Gbps bidirectional IMIX traffic and 25k sessions with conection-tracking enabled, due to watchdog timer reboots!!!

Five to ten times cheaper devices like CCR1009 and RB1100AHx4 are working fine in same test conditions!

The worst thing is that they are continuing selling this faulty device!

Contacting Mikrotik support is a lost of time!
Looks like I'm having a similar issue...

viewtopic.php?f=2&t=152192
William Burnett
Network Engineer
 
Fluke
just joined
Posts: 2
Joined: Wed Aug 02, 2017 1:46 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 6:45 am

Out of curiosity - what is the device temperature? (system health print)

I have a device that runs at ~53C and reboots occasionally, and another one that runs at ~39C and works OK.
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 11:17 am

My CCR1072 works at 37-39
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 12:00 pm

forget about the temperature, it is a problem in the kernel that mikrotik does not know how to solve, nor does it pay attention to us. Hopefully with the V7 this is solved, it is the only hope I have left. the top-of-the-range router does this happen, it's nonsense
 
User avatar
mac86
Member Candidate
Member Candidate
Posts: 122
Joined: Sat Nov 25, 2006 12:52 am
Location: bahia blanca - argentina
Contact:

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 4:51 pm

We've downgraded CCR1072 to 6.44.5 and no more reboots. :D
https://www.netpro-ar.com
MTINE - MTCWE - MTCRE - MTCTCE - MTCNA
Patagonia Argentina IT Consultant

Mikrotik user from V2.7.7 - Aug/2003
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 6:08 pm

can anyone confirm that version 6.44.5 is stable with the CCR1072?
 
wildbill442
Forum Guru
Forum Guru
Posts: 1050
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 6:21 pm

can anyone confirm that version 6.44.5 is stable with the CCR1072?
We’ve just downgraded to latest long term, I’ll update in 48hrs.
William Burnett
Network Engineer
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 6:36 pm

Please let us know how it works in a few days
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 7:31 pm

I have 6.43.8, and I have reboots.
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 7:57 pm

Thanks, 6.43 discarded then... let's see if there's luck with 6.44.
I have the 6.38.3 and only had one reboot in 3 years
 
User avatar
mac86
Member Candidate
Member Candidate
Posts: 122
Joined: Sat Nov 25, 2006 12:52 am
Location: bahia blanca - argentina
Contact:

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 7:58 pm

can anyone confirm that version 6.44.5 is stable with the CCR1072?

Yes, I can confirm it.
4 weeks without reboots, and going on.....
https://www.netpro-ar.com
MTINE - MTCWE - MTCRE - MTCTCE - MTCNA
Patagonia Argentina IT Consultant

Mikrotik user from V2.7.7 - Aug/2003
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 8:16 pm

What reboot frequency did you have previously?
 
miltont
Frequent Visitor
Frequent Visitor
Posts: 53
Joined: Wed Nov 11, 2015 3:58 am

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 8:34 pm

Up 60+ Days
You do not have the required permissions to view the files attached to this post.
 
wildbill442
Forum Guru
Forum Guru
Posts: 1050
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 10:49 pm

What reboot frequency did you have previously?
One to multiple times in a 24HR window.

Mikrotik support wanted me to turn off watchdog and log error / generate supout.rif once locked. The generated supout.rif files I provided after the watchdog reboot didn't yield any useful information. I opted to netinstall the latest long term release track (6.44.5). We also replaced all the SFP modules as a precaution during the maintenance window.

Mikrotik Support's Recommendation:
Before that, I suggest that you upgrade to the latest "stable" version (if there is an actual bug, then it might be already fixed). For example, v6.45.6 fixes a Watchdog reboot caused by h323 firewall helper. If your router did process voice call traffic, then the issue might be already resolved.

What's new in 6.45.6 (2019-Sep-10 09:06):
*) conntrack - improved system stability when using h323 helper (introduced in v6.45);


These are our edge routers and no NAT is being performed and we don't use h323 internally, but if some malformed h323 packet traversing these routers was causing the reboot then this may have been the cause behind the sporadic reboots. Again I'll post results of the downgrade to the Latest Long Term Release track after ample time has passed. So far ~15hrs and no reboot, this won't be conclusive until we make it past the 24-48hr mark. From what other users above have posted I'm feeling optimistic.
William Burnett
Network Engineer
 
wildbill442
Forum Guru
Forum Guru
Posts: 1050
Joined: Wed Dec 08, 2004 7:29 am
Location: Sacramento, CA

Re: CCR1072 watchdog reboot

Tue Sep 17, 2019 11:34 pm

Here's a sequence of events on how this issue started for us:

It began with a kernel failure on one of our edge routers, I'll call it EDGE A. To fix this we decided to do a netinstall on EDGE A and bring the router up to the latest stable release at the time (6.45.5) due to CVE fixes etc. Prior to the netinstall we were running 6.42.6 on both edge routers and other than the kernel failure on EDGE A we were not experiencing reboots. We also upgraded our other edge router, EDGE B, in the same maintenance window to 6.45.5. The reboots continued after the netinstall on EDGE A only the error changed from "reboot due to kernel failure" to "reboot by watchdog timer". At this time we were under the impression there was a hardware issue with the EDGE A router so we moved the BGP peer and other connections to EDGE B and overnighted new hardware. The reboots then started happening on EDGE B. We opened a ticket with Mikrotik support, but after going through the weekend and into Monday with no response and the routers rebooting sporadically we decided to netinstall the latest longterm release track (6.44.5). Mikrotik support responded after we were done with our downgrade and reaffirmed our suspicion that there was something wrong in software and to upgrade to latest stable release (6.45.6) due to a stability improvement relating to H323 and watchdog reboots. As we did not need any of the "new" features in the Stable Release tree, and receiving this information after downgrading to Long-Term Release tree, I think we're going to stay here unless the issue persists.

Again I won't know definitively if this was the root cause until ample time has passed, so I'll update after we get passed that 48hr mark.
William Burnett
Network Engineer
 
hytanium
Member Candidate
Member Candidate
Posts: 201
Joined: Thu Jan 18, 2007 9:10 pm

Re: CCR1072 watchdog reboot

Tue Oct 08, 2019 5:05 am

We are moving over 8Gbps on our 1072 at peak and have started seeing this random reboot watchdog error. We replaced with another 1072 thinking it was hardware related...once again, same random issue. Sometimes we go days without a reboot, sometimes a couple reboots in a day. It has been very disruptive.

I have disabled the h323 service as someone pointed out it may be part of the issue. It does seem to be load or random packet related. Any insight would be helpful. We are on 6.45.6.
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Tue Oct 08, 2019 11:41 am

Could be some random attack? Try to register cpu usage every second looking for high cpu usage
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Tue Oct 22, 2019 4:59 pm

I wrote it before. It is clear:

Reboot min requirements:

- connection-tracking activated
- clear routing between two interfaces
- 1G bidirectional traffic, 600B packets (each interface handles 1G in each direction)

If the packets are bigger (1500B):
- ~2,5G bidirectional traffic

If the traffic is mostly unidirectional:
- ~2G unidirectional traffic, 600B packets
- ~5G unidirectional traffic, 1500B packets

Everyone who has a spare CCR device could do the test by using traffic generator.
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Sat Dec 14, 2019 11:31 am

hello.
you said that removing CT frees CPU, correct.
but in a situation where you dont have any queues, just 3-4 NAT rules, you need CT on.
I have enabled fasttrack and the CPU load is very low even with 3gbit traffic.
I do just BGP (not FRT), some RAW rules, and it works flawlessy.
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
sakirozkan
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Sat Jun 14, 2014 12:19 pm

Re: CCR1072 watchdog reboot

Thu Jan 16, 2020 2:29 pm

I wrote it before. It is clear:

Reboot min requirements:

- connection-tracking activated
- clear routing between two interfaces
- 1G bidirectional traffic, 600B packets (each interface handles 1G in each direction)

If the packets are bigger (1500B):
- ~2,5G bidirectional traffic

If the traffic is mostly unidirectional:
- ~2G unidirectional traffic, 600B packets
- ~5G unidirectional traffic, 1500B packets

Everyone who has a spare CCR device could do the test by using traffic generator.
Can u record a video for this. I think if u do this Mikrotik will relate the topic.
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Mon Jan 20, 2020 1:21 pm

Can u record a video for this. I think if u do this Mikrotik will relate the topic.
Please refer to #103

I could make the conversation with Mikrotik support public, but it is very long and disappointing.
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Mon Jan 20, 2020 2:10 pm

The only solution is to NOT BUY this model is a scam.
 
User avatar
IPANetEngineer
Trainer
Trainer
Posts: 1278
Joined: Fri Aug 10, 2012 6:46 am
Location: Jackson, MS, USA
Contact:

Re: CCR1072 watchdog reboot

Mon Jan 20, 2020 8:57 pm


The only solution is to NOT BUY this model is a scam.
I wouldn't say that. we have a lot of clients that use it successfully and when it first came out, we were able to sustain 80 Gbps of iperf traffic without issue.

I am curious about the config and conditions that are causing the reboots. From reading the history, it seems to be a different fix for each of the different people that are posting.
Global - MikroTik Support & Consulting - English | Francais | Español | Portuguese +1 855-645-7684
https://iparchitechs.com/services/mikro ... l-support/ mikrotiksupport@iparchitechs.com
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Thu Jan 23, 2020 4:00 pm

So, could someone who has a working CCR1072 tell me what is wrong with the configuration on the video:

https://www.youtube.com/watch?v=J5arAJnI62I
Last edited by kos on Fri Feb 28, 2020 12:59 pm, edited 1 time in total.
 
sakirozkan
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Sat Jun 14, 2014 12:19 pm

Re: CCR1072 watchdog reboot

Thu Jan 23, 2020 10:37 pm

So, could someone who has a working CCR1072 tell me what is wrong with the configuration on the video:

https://youtu.be/TAWQRaplnsM
+++
Last edited by sakirozkan on Tue Jan 28, 2020 11:16 am, edited 2 times in total.
 
glueck05
just joined
Posts: 14
Joined: Fri Jan 26, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Fri Jan 24, 2020 10:45 am

disable connection tracking
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Fri Jan 24, 2020 11:08 am

disable connection tracking
It is not normal that a € 3000 router cannot have connection tacking enabled, right?
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Fri Jan 24, 2020 11:09 am

So, could someone who has a working CCR1072 tell me what is wrong with the configuration on the video:

https://youtu.be/TAWQRaplnsM
Don't go crazy, it's not you, it's the router that is a scam.
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Fri Jan 24, 2020 3:44 pm

disable connection tracking
So, connection-tracking ON is wrong configuration? :D
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Fri Jan 24, 2020 6:19 pm

Go back to 6.38.3 and all will works fine... (close service ports for avoid vulnerabilities)
 
mada3k
Member Candidate
Member Candidate
Posts: 283
Joined: Mon Jul 13, 2015 10:53 am
Location: Sweden

Re: CCR1072 watchdog reboot

Fri Jan 24, 2020 9:44 pm

Connection tracking is a NAT/Firewall feature. I'm not sure that Cisco/Junipers even does connection tracking in that manner.

But of course any device shouldn't reboot by itself.
Manages some CCR's, RB750Gr3, RB922 and wAP's
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Mon Jan 27, 2020 3:06 pm

Go back to 6.38.3 and all will works fine... (close service ports for avoid vulnerabilities)
Absolutely the same with 6.38.3. I tested again. There is no working ROS version!
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Mon Jan 27, 2020 3:08 pm

please show the firewall section.
did you enable FAST TRACK ?
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Mon Jan 27, 2020 4:23 pm

please show the firewall section.
did you enable FAST TRACK ?
Fast track just bypasses conn-track. It is clear that without conn-track the device performs much better.

Connection-tracking is mandatory in many setups!

Mikrotik do not warn users that CCR1072 is not able to perform normal with connection-tracking enabled!!! This is awful!!!

So, missing features are:
NAT
firewall:
connection-bytes
connection-mark
connection-type
connection-state
connection-limit
connection-rate
layer7-protocol
new-connection-mark
tarpit
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Mon Jan 27, 2020 4:28 pm

I agree. but with fasttrack you can have conntrack enabled with very low CPU.
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
sakirozkan
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Sat Jun 14, 2014 12:19 pm

Re: CCR1072 watchdog reboot

Mon Feb 03, 2020 11:38 am

I changed connection tracking times. And now uptime 15 days with 6.46.1

enabled: auto
tcp-syn-sent-timeout: 2s
tcp-syn-received-timeout: 2s
tcp-established-timeout: 20s
tcp-fin-wait-timeout: 5s
tcp-close-wait-timeout: 5s
tcp-last-ack-timeout: 5s
tcp-time-wait-timeout: 5s
tcp-close-timeout: 5s
tcp-max-retrans-timeout: 1m
tcp-unacked-timeout: 1m
loose-tcp-tracking: yes
udp-timeout: 5s
udp-stream-timeout: 1m
icmp-timeout: 3s
generic-timeout: 1m
max-entries: 1048576
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Mon Feb 03, 2020 12:49 pm

established put 1 hour
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
sakirozkan
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Sat Jun 14, 2014 12:19 pm

Re: CCR1072 watchdog reboot

Thu Feb 27, 2020 10:09 am

I changed connection tracking times. And now uptime 15 days with 6.46.1

enabled: auto
tcp-syn-sent-timeout: 2s
tcp-syn-received-timeout: 2s
tcp-established-timeout: 20s
tcp-fin-wait-timeout: 5s
tcp-close-wait-timeout: 5s
tcp-last-ack-timeout: 5s
tcp-time-wait-timeout: 5s
tcp-close-timeout: 5s
tcp-max-retrans-timeout: 1m
tcp-unacked-timeout: 1m
loose-tcp-tracking: yes
udp-timeout: 5s
udp-stream-timeout: 1m
icmp-timeout: 3s
generic-timeout: 1m
max-entries: 1048576
i use with this settings and uptime is 39 days.
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Sat Apr 11, 2020 2:44 pm

I upgrade 6.38.3 (working fine for years) to 6.45.8 and CCR1072 died completely within 48 hours. It was lost even the configuration.
I'm waiting for Mikrotik to tell me if it's a failure of the unit or RouterOS 6.45.8
 
mrtrca
just joined
Posts: 9
Joined: Wed Dec 05, 2012 2:22 pm
Location: Turkey
Contact:

Re: CCR1072 watchdog reboot

Sat May 02, 2020 12:07 pm

According to our experience;
The only solution is to turn off connection-tracking.
There is no other solution.
I don't think the support team has an idea about this either.
MTCNA | MTCWE | MTCRE | MTCINE
in Türkiye
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Sat May 02, 2020 1:05 pm

I bought a new 1072 and it works perfectly.
Conclusion: I think Mikrotik has modified something in the hardware of the CCR1072 since some date, and the first units (I don't know for how long) don't work with new RouterOS versions, and the newly bought ones do. This is just a hypothesis.
If all CCR1072 units had that problem with connection tracking, there would be major complaints and allegations.
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Sun May 03, 2020 4:48 am

I sincerely believe that the option to disable tracking connectikn is not an option, I have not spent almost € 3000 to not have all the options. Mikrotik should solve this problem and not turn a deaf ear to this situation. which is not a € 100 router. worth a lot of money.
 
dmayan
newbie
Posts: 26
Joined: Sun Nov 10, 2013 9:28 pm

Re: CCR1072 watchdog reboot

Wed May 13, 2020 1:39 am

This is so hilarious.

New 1072 @1000mhz , 6.45.8 with routerboard upgraded (CRASHED RIGHT AS I'm WRITING THIS), dual PSUs from different Eaton Online UPS.

Things I did:
- Changed both PSUs.
- Changed all SFPs modules (As Mikrotik support blamed them after sending the autosupout)
- Disabled watchdog and captured console output. Zero output, router just freezes.
- No way to disable route cache. This board moves around 25gbps with CG-NAT.
- CHANGED THE WHOLE ROUTER... STILL REBOOTING... still the same behaviour.
This is obviuosly a software issue, as the other 1072 went to a filtering role (With same traffic level) and DOESN'T REBOOT.

We can get almost a day of uptime in very good days.... normally it reboots every 4 or 5 hours.,

Seriously Mikrotik? What's your answer? We have 20 1072, and thousands of minor models. We are going the HUAWEI route now. I prefer chinese spying than your lies and promises.
 
cabijuan
just joined
Posts: 10
Joined: Mon Mar 12, 2018 12:49 pm

Re: CCR1072 watchdog reboot

Wed May 13, 2020 9:55 am

It is shameful that Mikrotik does not even answer this topic. It is your highest end router and it has problems, I hope people read this and don't buy it. DO NOT BUY THE MIKROTIK CCR1072. I only have 2, but they handle all my communications core. A router embarrassment.
 
Lonecrow
Member Candidate
Member Candidate
Posts: 136
Joined: Mon Dec 24, 2007 4:58 am

Re: CCR1072 watchdog reboot

Wed May 13, 2020 4:22 pm

Oh snap. Same issue with 3 of them. Supout shows nothing and I've looked into this heavily.

Every 4-5 hours? WOW.

For me it seems to be almost like when some sort of counter is being hit. Some sort of threshold. It isn't traffic because it reboots when traffic is low too. But its like a counter needs to be reset and gets locked.
 
Jeanluck
Member Candidate
Member Candidate
Posts: 277
Joined: Tue Apr 19, 2011 7:07 pm

Re: CCR1072 watchdog reboot

Wed May 13, 2020 6:14 pm

In my experience, of 4 units I bought, 2 units were defective at the hardware level.
The ones I have now work fine with 6.44.6. I am afraid that in addition to a problem with RouterOS, there is a quality HW problem with this model.
 
Lonecrow
Member Candidate
Member Candidate
Posts: 136
Joined: Mon Dec 24, 2007 4:58 am

Re: CCR1072 watchdog reboot

Wed May 13, 2020 6:48 pm

For those of you who have disabled connection tracking or tweaked the connection tracking settings

Was it successful?
 
sakirozkan
Frequent Visitor
Frequent Visitor
Posts: 54
Joined: Sat Jun 14, 2014 12:19 pm

Re: CCR1072 watchdog reboot

Thu May 21, 2020 2:49 pm

For those of you who have disabled connection tracking or tweaked the connection tracking settings

Was it successful?
We use it, it works very well. Before these settings, ccr1072 will restart every one or two days
1072.JPG
1072 connection.JPG
You do not have the required permissions to view the files attached to this post.
 
meshnet
Frequent Visitor
Frequent Visitor
Posts: 57
Joined: Tue Jun 01, 2004 6:57 pm

Re: CCR1072 watchdog reboot

Tue Jun 09, 2020 10:01 pm

Just FYI,
Brand new one we just turned up.. Same issues as all 4 before it.. Watchdog reboots..
CG-NAT/firewall/10+gb traffic = reboot..
Sent a supout.. probably get the same answer as everyone else..

R
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Wed Jun 10, 2020 11:48 am

Just FYI,
Brand new one we just turned up.. Same issues as all 4 before it.. Watchdog reboots..
CG-NAT/firewall/10+gb traffic = reboot..
Sent a supout.. probably get the same answer as everyone else..

R
Welcome to the club!

Better don't waste your time contacting the support. I think that your only chance is to try ROS 7, if it works for you. If ROS 7 doesn't work for you, you have to change the router.
 
Lonecrow
Member Candidate
Member Candidate
Posts: 136
Joined: Mon Dec 24, 2007 4:58 am

Re: CCR1072 watchdog reboot

Thu Jun 18, 2020 7:55 pm

My boss is starting to force me toward Juniper. Please Mikrotik - do something about this. I have like 30 CCR's out there. Wouldn't want to be forced into changing things.

Today it rebooted on its own in the middle of the day, the boss was stock trading and lost a lot of money. Needless to say this issue is problematic for us.

I did make the changes you suggest up there in the connection tracking. I need to keep it enabled because of the NAT we do.
 
dmayan
newbie
Posts: 26
Joined: Sun Nov 10, 2013 9:28 pm

Re: CCR1072 watchdog reboot

Thu Jun 18, 2020 8:02 pm

Changing the hardware didn't work for me. The same configuration shielded the same results on two zero hs CCRs. The first one that rebooted constantly, now has 130 days of uptime on another configuration. It's something on the software side, at least for me.
Just FYI,
Brand new one we just turned up.. Same issues as all 4 before it.. Watchdog reboots..
CG-NAT/firewall/10+gb traffic = reboot..
Sent a supout.. probably get the same answer as everyone else..

R
Welcome to the club!

Better don't waste your time contacting the support. I think that your only chance is to try ROS 7, if it works for you. If ROS 7 doesn't work for you, you have to change the router.
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Fri Jun 19, 2020 8:03 am

Now went out the ccr2004 with a lot of 10g ports. It may work...
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
hytanium
Member Candidate
Member Candidate
Posts: 201
Joined: Thu Jan 18, 2007 9:10 pm

Re: CCR1072 watchdog reboot

Fri Jun 19, 2020 2:14 pm

Confirmed that turning off connection tracking eliminates issue...moving over 9Gbps traffic through.
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Sat Jun 20, 2020 9:05 am

It was tried with fasttrack and default timings, excdpt estsblished that fa be safely set to 5 min?
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
Lonecrow
Member Candidate
Member Candidate
Posts: 136
Joined: Mon Dec 24, 2007 4:58 am

Re: CCR1072 watchdog reboot

Tue Jul 21, 2020 8:10 pm

What about those of us who NEED to leave conntrack on? I need to do some nat at this router so some of the devices behind it can get updates and they can't be natted further up or down.

These constant weekly reboots are getting out of hand.

I went from scheduled reboots to one firmware version later I'm getting weekly and sometimes every few days a reboot. The supout tells us nothing.

Mikrotik where are you? There have been others that use this product that have the same exact issue.
 
degree
just joined
Posts: 16
Joined: Mon Dec 13, 2010 4:21 pm

Re: CCR1072 watchdog reboot

Sat Sep 26, 2020 4:48 pm

Have the same problem as described on two different 1072s. We’ve run traffic generators, and they handle packets up to 100% cpu without any problems, but there’s not alot of connections in various «traffic generators». Anyone know a generator to create alot of connections, to try and see if connection tracking solves it? I’d rather not put them back in production to test if disabling tracking solves it.
 
CoMMyz
newbie
Posts: 38
Joined: Fri Dec 04, 2015 10:56 pm

Re: CCR1072 watchdog reboot

Sat Sep 26, 2020 11:14 pm

CCR1072 -> Doing a total of 5G throughput with a lot of connections and 1 DHCP Server + IPV6 + DNS Server + SNMP + 33 Vlans + NAT (106 rules) + Firewall (46 rules) + Raw firewall (66 rules) + Routing (2776 routes) + 7 BGP peers and 2 instances + OSPF + Watchdog enabled - no queuing, no discovery, no cloud. Only a few tunnels about 10 L2TP with PPPoE. Bridge filtering is active.

Never had an issue with stable version 6.45.9. Now on 6.46.6 with 122days uptime again no issues. CPU is at 1000mhz.
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Mon Sep 28, 2020 10:34 am

CCR1072 -> Doing a total of 5G throughput with a lot of connections and 1 DHCP Server + IPV6 + DNS Server + SNMP + 33 Vlans + NAT (106 rules) + Firewall (46 rules) + Raw firewall (66 rules) + Routing (2776 routes) + 7 BGP peers and 2 instances + OSPF + Watchdog enabled - no queuing, no discovery, no cloud. Only a few tunnels about 10 L2TP with PPPoE. Bridge filtering is active.

Never had an issue with stable version 6.45.9. Now on 6.46.6 with 122days uptime again no issues. CPU is at 1000mhz.
Check post #127

Probably your traffic consist mostly of big packets and it is distributed over more than two interfaces.

In my opinion, activating more features (some of them) in fact improves device condition, because the traffic is distributed over more cores. For some Mikrotik devices, I have seen better test results accomplished in NAT mode then in just routing.

Good luck!
 
CoMMyz
newbie
Posts: 38
Joined: Fri Dec 04, 2015 10:56 pm

Re: CCR1072 watchdog reboot

Mon Oct 05, 2020 2:13 am

Traffic exists on a single 10G SFP port with a VLAN tag as well on top of this.
Traffic consists mostly of small packets - TX/RX 65-127 is actually the largest number out of all of them.

The cause of the watchdog reboots its probably some specific features/items indeed.
CCR1072 -> Doing a total of 5G throughput with a lot of connections and 1 DHCP Server + IPV6 + DNS Server + SNMP + 33 Vlans + NAT (106 rules) + Firewall (46 rules) + Raw firewall (66 rules) + Routing (2776 routes) + 7 BGP peers and 2 instances + OSPF + Watchdog enabled - no queuing, no discovery, no cloud. Only a few tunnels about 10 L2TP with PPPoE. Bridge filtering is active.

Never had an issue with stable version 6.45.9. Now on 6.46.6 with 122days uptime again no issues. CPU is at 1000mhz.
Check post #127

Probably your traffic consist mostly of big packets and it is distributed over more than two interfaces.

In my opinion, activating more features (some of them) in fact improves device condition, because the traffic is distributed over more cores. For some Mikrotik devices, I have seen better test results accomplished in NAT mode then in just routing.

Good luck!
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Mon Oct 05, 2020 10:24 am

Traffic exists on a single 10G SFP port with a VLAN tag as well on top of this.
Traffic consists mostly of small packets - TX/RX 65-127 is actually the largest number out of all of them.

The cause of the watchdog reboots its probably some specific features/items indeed.
CCR1072 -> Doing a total of 5G throughput with a lot of connections and 1 DHCP Server + IPV6 + DNS Server + SNMP + 33 Vlans + NAT (106 rules) + Firewall (46 rules) + Raw firewall (66 rules) + Routing (2776 routes) + 7 BGP peers and 2 instances + OSPF + Watchdog enabled - no queuing, no discovery, no cloud. Only a few tunnels about 10 L2TP with PPPoE. Bridge filtering is active.

Never had an issue with stable version 6.45.9. Now on 6.46.6 with 122days uptime again no issues. CPU is at 1000mhz.
Check post #127

Probably your traffic consist mostly of big packets and it is distributed over more than two interfaces.

In my opinion, activating more features (some of them) in fact improves device condition, because the traffic is distributed over more cores. For some Mikrotik devices, I have seen better test results accomplished in NAT mode then in just routing.

Good luck!
That is interesting. You may have some new hardware version. Could you check your revision (/system routerboard print).

It is not about specific features, just connection-tracking. See the video below.

https://www.youtube.com/watch?v=J5arAJnI62I
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Tue Oct 06, 2020 5:24 pm

Traffic exists on a single 10G SFP port with a VLAN tag as well on top of this.
Traffic consists mostly of small packets - TX/RX 65-127 is actually the largest number out of all of them.

The cause of the watchdog reboots its probably some specific features/items indeed.
CCR1072 -> Doing a total of 5G throughput with a lot of connections and 1 DHCP Server + IPV6 + DNS Server + SNMP + 33 Vlans + NAT (106 rules) + Firewall (46 rules) + Raw firewall (66 rules) + Routing (2776 routes) + 7 BGP peers and 2 instances + OSPF + Watchdog enabled - no queuing, no discovery, no cloud. Only a few tunnels about 10 L2TP with PPPoE. Bridge filtering is active.

Never had an issue with stable version 6.45.9. Now on 6.46.6 with 122days uptime again no issues. CPU is at 1000mhz.
Check post #127

Probably your traffic consist mostly of big packets and it is distributed over more than two interfaces.

In my opinion, activating more features (some of them) in fact improves device condition, because the traffic is distributed over more cores. For some Mikrotik devices, I have seen better test results accomplished in NAT mode then in just routing.

Good luck!
That is interesting. You may have some new hardware version. Could you check your revision (/system routerboard print).

It is not about specific features, just connection-tracking. See the video below.

https://www.youtube.com/watch?v=J5arAJnI62I
Hi guys!
To begin, I just want to give 5stars to the MX80 solution! We are heading towards that way, slowly, replacing Mikrotik with other vendors.

We have a CCR1072, for a very long time it had 6.37.4 and it was rebooting itself once every few months, but recently, we had 2 reboots within 2 months.So, we decided to upgrade it. We installed 6.45.9 last night. To begin, the router did not have all the configuration after the upgrade. And now (less than 12h later), I just had a reboot by watchdog with no supout file generated! And we had less than 1G of traffic.

Now, the device is working on 1000Mhz and I will try to disable connection tracking. I will let you know If something changes.

Btw, we used 6.37.4 because newer versions were really unstable and could not handle the same amount of trafic.
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Wed Oct 14, 2020 10:02 am

Guys, i experienced the WATCHDOG reboot on CCR1072

1. Using only for CGNAT ( 514 nat rules entries for 65000 connections using netmap) and PBR
2. Not using any routing protocols.

It is running on v6.46.7

Its run successfully for 4 days carrying 5.2Gbps with 48% cpu load,

All of sudden rebooted by watchdog, eventhough the connection tracking entries are at around 900000.

I would like to know the impact of setting tcp-establistished timeout=15m

tik guys kindly responds to this forum, as it has been active for some years expecting the answer
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Wed Oct 14, 2020 10:46 am

Guys, i experienced the WATCHDOG reboot on CCR1072

1. Using only for CGNAT ( 514 nat rules entries for 65000 connections using netmap) and PBR
2. Not using any routing protocols.

It is running on v6.46.7

Its run successfully for 4 days carrying 5.2Gbps with 48% cpu load,

All of sudden rebooted by watchdog, eventhough the connection tracking entries are at around 900000.

I would like to know the impact of setting tcp-establistished timeout=15m

tik guys kindly responds to this forum, as it has been active for some years expecting the answer
You should open a ticket and send them the supout.inf file generated automatically after watchdog rebooted your router. I don't think you will get any help from this topic, only guesses.
 
kos
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Mon Oct 31, 2016 11:51 am

Re: CCR1072 watchdog reboot

Wed Oct 14, 2020 11:22 am

Date of first post here is Jun 12, 2017. I think that a lot of tickets have been opened and until now nobody has been helped.
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Thu Oct 15, 2020 3:08 pm

Guys, i experienced the WATCHDOG reboot on CCR1072

1. Using only for CGNAT ( 514 nat rules entries for 65000 connections using netmap) and PBR
2. Not using any routing protocols.

It is running on v6.46.7

Its run successfully for 4 days carrying 5.2Gbps with 48% cpu load,

All of sudden rebooted by watchdog, eventhough the connection tracking entries are at around 900000.

I would like to know the impact of setting tcp-establistished timeout=15m

tik guys kindly responds to this forum, as it has been active for some years expecting the answer
You should open a ticket and send them the supout.inf file generated automatically after watchdog rebooted your router. I don't think you will get any help from this topic, only guesses.
unfortunately support file is not created after the reboot
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Thu Oct 15, 2020 3:10 pm

ngw01.JPG
You do not have the required permissions to view the files attached to this post.
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Thu Oct 15, 2020 3:21 pm

ngw01.JPG
Do you have "Automatic Supout" enabled in System > Watchdog menu?
watchdog.jpg
If you do have that enabled and it still not generate a file, you can do it via System > Scheduler by adding new script which should be executed at boot.
supout-script.jpg
You do not have the required permissions to view the files attached to this post.
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Thu Oct 15, 2020 3:24 pm

ngw01.JPG
Did you have this reboots before? Is it possible that they started after you have done a firmware upgrade and everything was ok with the previous firmware?
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Fri Oct 16, 2020 9:28 am

It is a recent purchase of 8 units like 12 days before, i have done the software and routerboard upgrade prior to configuring it.

So far experienced one time reboot in one unit.

Configured total of four units in production,
1. Two units IGW01 and IGW02( doing BGP ) no natting, connection tracking disabled ( no issues so far for 10 days ).
2. Two units NGW01 and NGW02 ( NAting with netmap and PBR ), NGW01 is rebooted one time by watchdog, thankfully at the time NGW01 down, NGW02 backed up

Thanks for sharing the script, i will configure it and see if it happens again
You do not have the required permissions to view the files attached to this post.
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Mon Oct 19, 2020 9:30 am

We had a reboot yesterday, this time it is NGW02 for first time and supout.rif is created

Let me create a ticket and see
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Tue Oct 20, 2020 8:07 am

no errors on the supout.rif, since it is considered as a normal boot, supout.rif i need to create while it is freezed, i need to disable the watchdog for that.

Guys please advice me on the protection for CGNAT enabled Router from DDOS etc
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Tue Oct 20, 2020 8:28 am

no errors on the supout.rif, since it is considered as a normal boot, supout.rif i need to create while it is freezed, i need to disable the watchdog for that.

Guys please advice me on the protection for CGNAT enabled Router from DDOS etc
Wow, this is insane. You probably won't be able to do that because your router will be hanging. Awesome support. 5 stars.

The fastest and easiest solution that I can advice is to run RouterOS on an x86 machine, or, maybe on a CHR, but It may be too much for a virtualized device. A bare-metal x86 machine running RouterOS with a big CPU (or two) should be ok.

The right solution is to go for another vendor. I know that Huawei has some CGNAT devices (I prefer them spying on me rather than those reboots). I like Juniper, but the MX240 need a separate line card for doing that. The MX204 should fulfill all your needs. Any used Juniper device will give you better results. Mikrotik is ok just to begin, when you grow up, you need to find something serious.
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Wed Oct 21, 2020 12:47 pm

thank you for the feedback
 
doush
Long time Member
Long time Member
Posts: 640
Joined: Thu Jun 04, 2009 3:11 pm

Re: CCR1072 watchdog reboot

Wed Oct 21, 2020 8:49 pm

Isnt it weird that MT is completely silent about this issue ? :)
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Thu Oct 22, 2020 5:45 pm

Isnt it weird that MT is completely silent about this issue ? :)
They just can't fix it and they don't want to admit that they sell ´buggy´ equipment. I guess that their sales are going ok, and it is not happening to everybody, so they just can ignore it. We replaced one of the CCR1072 with a Juniper MX and now the CCR is serving a small office doing some dhcp, nat, firewall and other things typical for a very small office, and believe me it is working perfectly (showing 0% load). Well, you will think something like, WHAT!!?? 3k router for 15 people? And the answer is yes, because the other option was using it to replace a broken leg of a storage shelf.

I almost stopped hating Mikrotik after I figured out their limits. They just can't compete with hardware guys and ASICS. Just use them to start, earn some money and buy propper equipment. That's it! :)

P.S.: It is not their first router with reboots. I have an RB4011 at home and it was randomly rebooting once a month o something like that. At some point it stopped, but I'm not sure if it is because I've disabled something or because the new firmware. And yes, I have also bought 2x SRX300 to replace it with a cluster, I just can't live with the feeling that my router can reboot at any time, having 2 internet providers connected and a UPS, i'ts just not right.
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Mon Oct 26, 2020 2:10 pm

Are there news on this issue?
I would need to get an upgrade for our 1036, and I was looking at 1072 but I have read so many issues.
Maybe in the recent hardware the issue is resolved?
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Tue Oct 27, 2020 4:19 pm

Hi,
It is based on your configs also,
I have tweaked the connection tracking, so far no reboots for a week
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Tue Oct 27, 2020 5:02 pm

Perfect
are you using FASTTRACK ? can you post your config (without sensistive informations) ?
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Wed Oct 28, 2020 8:24 am

Hi,

My config is very simple,

I am using this Router as NGW01 & NGW02 ( NATGAEWAY ) , Major purpose is to do Nating for 65000 active connections, i am using Netmap NAT( to achieve this i have aroud 514 NAt rules) to track the Users
Redundancy between the above Router is based on PBR

Allow fast patch is enabled




ip firewall connection tracking print
enabled: auto
tcp-syn-sent-timeout: 2s
tcp-syn-received-timeout: 2s
tcp-established-timeout: 1h
tcp-fin-wait-timeout: 5s
tcp-close-wait-timeout: 5s
tcp-last-ack-timeout: 5s
tcp-time-wait-timeout: 5s
tcp-close-timeout: 5s
tcp-max-retrans-timeout: 1m
tcp-unacked-timeout: 1m
loose-tcp-tracking: yes
udp-timeout: 5s
udp-stream-timeout: 1m
icmp-timeout: 3s
generic-timeout: 1m
max-entries: 1048576
total-entries: 725206

I am suspecting the reboot earlier i noticed possibly either DDOS attack that caused the overflow of connections

CURRENT CPU LOAD:
uptime: 2w22h29m21s
version: 6.46.7 (long-term)
build-time: Sep/07/2020 07:38:56
factory-software: 6.28
free-memory: 14.2GiB
total-memory: 15.8GiB
cpu: tilegx
cpu-count: 72
cpu-frequency: 1000MHz
cpu-load: 26%
free-hdd-space: 83.2MiB
total-hdd-space: 128.0MiB
architecture-name: tile
board-name: CCR1072-1G-8S+
platform: MikroTik

As you can see the load is 26%, My current traffic on each router is 2.8Gbps, so i am expecting the cpu will run-out once i reach around 8Gbps

My advice is if you are buying CCR1072, make sure your setup is with redundancy, so that in case its reboot you have time to react and to find the RCA
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Wed Oct 28, 2020 10:29 am

Well
I have 1036 with about 5Gig connections, and we do conntrack + fasttrack and we are about at 20% at peak time.
Are you sure that fasttrack is enabled correctly ?

Can you print your config with hide-sensitive? Or you can send privately in a private message?
I am about to buy a 1072 and I want to be sure that everything is fine.
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
joarc
just joined
Posts: 10
Joined: Wed May 08, 2019 1:52 pm

Re: CCR1072 watchdog reboot

Wed Oct 28, 2020 3:16 pm

We haven't had any watchdog reboots on our multiple 1072, and we only use them for routing (OSPF and BGP) and MPLS/VPLS, no conntrack or firewall or vpns or stuff like that. We have had them crash due to DDoS-attacks, but other then that, they work perfectly.
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Wed Oct 28, 2020 3:30 pm

Well
I have 1036 with about 5Gig connections, and we do conntrack + fasttrack and we are about at 20% at peak time.
Are you sure that fasttrack is enabled correctly ?

Can you print your config with hide-sensitive? Or you can send privately in a private message?

My skype id: abdulrazaq.a@hotmail.com


I am about to buy a 1072 and I want to be sure that everything is fine.
 
User avatar
Maggiore81
Member
Member
Posts: 339
Joined: Sun Apr 15, 2012 12:10 pm
Location: Italy
Contact:

Re: CCR1072 watchdog reboot

Tue Nov 03, 2020 11:57 am

I wrote to you via skype but you didnt answer me.
Try these settings and tell me if it reboots.
You do not have the required permissions to view the files attached to this post.
Dott. Elia Spadoni
---
Network Administrator
MTCNA, MTCRE, MTCTCE, MTCINE, MTCWE, MTCSE
Spadhausen Internet Provider
Ravenna, ITALY
http://www.spadhausen.com
 
abdurrazaqa
just joined
Posts: 13
Joined: Wed Jan 11, 2017 10:40 am
Contact:

Re: CCR1072 watchdog reboot

Tue Nov 03, 2020 2:01 pm

sorry i haven't got any message on my skype
May be you can share your id, i will send the request
 
faraya
just joined
Posts: 1
Joined: Wed May 27, 2020 8:59 pm

Re: CCR1072 watchdog reboot

Tue Nov 10, 2020 7:50 pm

Hello, good afternoon, I have a CCR1072 router working a couple of months ago, these last days it has started to restart every 3 or 4 days, the router is being used as a BGP edge router, the cpu usage is between 7 to 10% Does anyone know how to fix it or the equipment is bad ?

"router was rebooted without proper shutdown by watchdog timer"

Kind regards from Chile.
 
User avatar
antoxic
newbie
Posts: 47
Joined: Wed Jul 22, 2015 2:50 pm
Location: Spain

Re: CCR1072 watchdog reboot

Sat Nov 14, 2020 8:14 pm

Hello, good afternoon, I have a CCR1072 router working a couple of months ago, these last days it has started to restart every 3 or 4 days, the router is being used as a BGP edge router, the cpu usage is between 7 to 10% Does anyone know how to fix it or the equipment is bad ?

"router was rebooted without proper shutdown by watchdog timer"

Kind regards from Chile.
Try disabling connection tracking.

Who is online

Users browsing this forum: andkar, Google [Bot], renanme, server8 and 58 guests