Page 3 of 5

Re: CLOUD CORE ROUTER

Posted: Wed Mar 20, 2013 2:40 pm
by normis
new build posted on above links, please re-download. please check CPU usage on this one. changelog:
What's new in 6.0rc12 (2013-Mar-20 13:37):

*) fixed occasional nand corruption on CCR;
*) ipsec - added ipv4 mode-cfg support for responder;
*) ipsec - fixed some issues with removal of dynamic policies;
*) email - renamed parameter tls to start-tls for send command;
*) wireless - update required when using small width channel RB2011 RB9xx
caveat: update remote end/s before updating AP as both side are required to use new/same version for a link
*) ipsec - generate-policy now can have port-strict value which will use port from peer's proposal
when generating policy or port-override which will always generate policy for any port;
*) ipsec - responder side now uses initiator exchange type for peer config selection;
*) lcd - changed All interface stat screen (bar graphs) to show total bandwidth usage, combine rx/tx together;
*) lcd - removed "all-interface-mode" option;
*) lcd - changed "Interfaces" screen to show interface usage similiar to All interface stat screen;
*) lcd - improved Interfaces -> * -> Info screen, added more wireless information;
*) lcd - added Registration Table screen for wireless interfaces under
Interfaces -> 'wireless interface' -> Registration Table;
*) fixed occasional kernel crashes on CCR;
*) fixed other than only-hardware-queue interface queues on CCR;
*) lte - devices with vendor/product id pair 0x0f3d/0x68AA now uses directip inferface;
*) dhcp client v4 - option add-default-route now supports special-classless value;
*) significantly increased simple queue performance on multi core systems (up to 9x on CCR1036 with at least 32 top level simple queues)
*) ip arp - new property published;
*) web proxy - added new option max-cache-object-size,
upper limit of max-client-connections and max-server-connections is now calculated from system RAM;
*) ospf - fixed inconsistency in external ECMP route calculation;
*) certificates - CA keys are no more cached, every CA operations now requires a valid CA passphrase.
use set-ca-passphrase for scep server to cache CA key in encrypted form;
*) ppp - made MPPE encryption work on tilera (bug introduced in 6.0rc10);
*) tool fetch - https support with optional certificate verification;
*) sstp server - removed test mode which allowed running server without certificate;
*) trafficgen - add support for ipv6 header;

Re: CLOUD CORE ROUTER

Posted: Wed Mar 20, 2013 5:11 pm
by DirectX9
new build posted on above links, please re-download. please check CPU usage on this one. changelog:
What's new in 6.0rc12 (2013-Mar-20 13:37):

*) fixed occasional nand corruption on CCR;
*) ipsec - added ipv4 mode-cfg support for responder;
*) ipsec - fixed some issues with removal of dynamic policies;
*) email - renamed parameter tls to start-tls for send command;
*) wireless - update required when using small width channel RB2011 RB9xx
caveat: update remote end/s before updating AP as both side are required to use new/same version for a link
*) ipsec - generate-policy now can have port-strict value which will use port from peer's proposal
when generating policy or port-override which will always generate policy for any port;
*) ipsec - responder side now uses initiator exchange type for peer config selection;
*) lcd - changed All interface stat screen (bar graphs) to show total bandwidth usage, combine rx/tx together;
*) lcd - removed "all-interface-mode" option;
*) lcd - changed "Interfaces" screen to show interface usage similiar to All interface stat screen;
*) lcd - improved Interfaces -> * -> Info screen, added more wireless information;
*) lcd - added Registration Table screen for wireless interfaces under
Interfaces -> 'wireless interface' -> Registration Table;
*) fixed occasional kernel crashes on CCR;
*) fixed other than only-hardware-queue interface queues on CCR;
*) lte - devices with vendor/product id pair 0x0f3d/0x68AA now uses directip inferface;
*) dhcp client v4 - option add-default-route now supports special-classless value;
*) significantly increased simple queue performance on multi core systems (up to 9x on CCR1036 with at least 32 top level simple queues)
*) ip arp - new property published;
*) web proxy - added new option max-cache-object-size,
upper limit of max-client-connections and max-server-connections is now calculated from system RAM;
*) ospf - fixed inconsistency in external ECMP route calculation;
*) certificates - CA keys are no more cached, every CA operations now requires a valid CA passphrase.
use set-ca-passphrase for scep server to cache CA key in encrypted form;
*) ppp - made MPPE encryption work on tilera (bug introduced in 6.0rc10);
*) tool fetch - https support with optional certificate verification;
*) sstp server - removed test mode which allowed running server without certificate;
*) trafficgen - add support for ipv6 header;

And what is - *) wireless - update required when using small width channel RB2011 RB9xx
caveat: update remote end/s before updating AP as both side are required to use new/same version for a link

How I can see on my devices (Groove2, Metal2, SXT2, RB711UA-2Hnd) - really have a troubles with roaming within the same SSID but in different WIFI channels. Now it is about 10 seconds. Earlier (FW 2.41) it had been 1 or less seconds.
Now somewhere I have a strong signal but the data traffic is absent!

Re: CLOUD CORE ROUTER

Posted: Thu Mar 21, 2013 8:34 am
by latuannetnam
Hi normis,
I still have CPU 100% load problem with 20/Mar build. My configuration as below:

1. IP address
/ip address> print
Flags: X - disabled, I - invalid, D - dynamic
# ADDRESS NETWORK INTERFACE
2 192.168.89.1/24 192.168.89.0 ether11 => PC 2 connects to this interface
3 192.168.88.1/24 192.168.88.0 ether10 => PC 1 connects to this interface

2. Firewall mangle configuration
/ip firewall mangle> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=prerouting action=mark-packet new-packet-mark=mark_88_out
passthrough=yes dst-address=192.168.89.0/24 in-interface=ether10

3. Queue tree
/queue tree> print
Flags: X - disabled, I - invalid
0 name="queue_88_out" parent=ether11 packet-mark=mark_88_out limit-at=0
queue=hotspot-default priority=8 max-limit=0 burst-limit=0
burst-threshold=0 burst-time=0


My test scenario:
- PC1 sends 600Mpbs traffic to PC2
- CCR: turns of queue and firewall => everything OK
- CCR: turns on queue tree and firewall => after 5 seconds, CPU load of all cores are 100%, Winbox is disconnected from CCR
- PC1 stops sending traffic => CCR returns to normal

I also tried with RC5, RC11, RC12 and the problem is stil existed.
Thanks.

Re: CLOUD CORE ROUTER

Posted: Thu Mar 21, 2013 1:00 pm
by majkel
always after 4-5h management problem is back.. on 20 Mar version too.. and I have only 10-15mbit of traffic when starts...

I can restart with traffic 100mbit, and problems backs too after 4h.. so its not traffic problem

EDIT: This build is a massacre .. one ddos attack about 50mbit in TCP and CPU is 100%.. I go back to rc11

UDP attack are ok. Only something wrong is with TCP..

Re: CLOUD CORE ROUTER

Posted: Thu Mar 21, 2013 6:40 pm
by OlegM
The latest version does not work in the PPTP IP Masquerade and VRRP IP exclamation point.

Re: CLOUD CORE ROUTER

Posted: Thu Mar 21, 2013 6:59 pm
by r0xmachine
Hi,

I have 2 CCR1016-12 in production with RouterOS v6.0rc12 Build 06.03.2013, firmware 3.04 (Before I had rc11 with Tx Drops problems)

The first CCR replace Cisco 2901 with 4 mangle rules, 2 gateways, 4 nat rules, 70Mbit's average traffic. No tx drops, No Cpu 100%, No issue.
Uptime : 14d , Packages disabled dhcp,hotspot,ipv6,ppp,wireless.

The second CCR replace Dell x86 server with pptp server with 450 pptp clients, 3 firewall rules, 15 nat rules, 100Mbit's average traffic. No tx drops, No Cpu 100%, No issue.
Uptime : 12d, , Packages disabled dhcp,hotspot,ipv6,wireless.

Notice, I didnt import the configurations, only the secrets for the second CCR.

Re: CLOUD CORE ROUTER

Posted: Thu Mar 21, 2013 10:59 pm
by rwb
Hi Normis

Have loaded 20th march v6rc12 update onto my CCR 1036-12G-4s unit and still have 100% CPU problem.
Setup has very simple routing configuration, is in production passing 800Mbit/s data.

We have 3 other CCR 1016-12G units runing queues/nating/etc, way more complicated setups that work superbly.
These are all doing 75~150Mbit/s data.

Any ideas?

thanks

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 8:37 am
by normis
Hi Normis

Have loaded 20th march v6rc12 update onto my CCR 1036-12G-4s unit and still have 100% CPU problem.
Setup has very simple routing configuration, is in production passing 800Mbit/s data.

We have 3 other CCR 1016-12G units runing queues/nating/etc, way more complicated setups that work superbly.
These are all doing 75~150Mbit/s data.

Any ideas?

thanks
When you have this issue, do you have winbox open? Close it, and connect with SSH, check if the problem is there (reboot router after closing winbox)

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 9:16 am
by DirectX9
The latest version does not work in the PPTP IP Masquerade and VRRP IP exclamation point.
Yeah. I Confirm!

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 9:18 am
by normis
The latest version does not work in the PPTP IP Masquerade and VRRP IP exclamation point.
Yeah. I Confirm!
Please describe in detail, what doesn't work?

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 9:21 am
by DirectX9
[quote="normis"]new build posted on above links, please re-download. please check CPU usage on this one. changelog:

[quote]What's new in 6.0rc12 (2013-Mar-20 13:37):

Simple Queue in quantity of 3 is stop working after 36hours.
Disabling queues and enabling them again - works again.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 9:28 am
by normis
new build posted on above links, please re-download. please check CPU usage on this one. changelog:
What's new in 6.0rc12 (2013-Mar-20 13:37):

Simple Queue in quantity of 3 is stop working after 36hours.
Disabling queues and enabling them again - works again.
Is this the description of the above VRRP problem, or something different?

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 9:28 am
by DirectX9
The latest version does not work in the PPTP IP Masquerade and VRRP IP exclamation point.
Yeah. I Confirm!
Please describe in detail, what doesn't work?
For example:
In in last RC12 from 20.03
Connect from another point through internet to CCR (and all another devices up on MIPSBE) in automatic discovering of routing and protocols which has provided by CCR - local internet routing is changed to CCR routing providing config. RC11 and RC12 untill 20.03.2012 use PPTP connection as the secondary routing - it's correct in most cases.
this is for winXP/vista/W7, W8 is not obey RouterOS yet or RouterOS is not in friendship with W8 networking.

Simple Queue in quantity of 3 is stop working after 36hours.
Disabling queues and enabling them again - works again.[/quote][/quote][/quote]

Is this the description of the above VRRP problem, or something different?[/quote]

I think it's something different. CCR is not at full capacity, may be 3-4%

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 11:52 am
by OlegM
...

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 12:32 pm
by mrz
Contact support with supout files and description on how to repeat the problem.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 1:16 pm
by majkel
MikroTik >> Do you have some plans to do optimization for firewall? for 1036?

Now my 36 cores can filtr only UDP packets (tested 8gbit/s ddos) but on TCP DDOS attacks the best score is about 500-550mbit (800k packets) of SSYN and the CPU is nearly 95-100% used.. tested on rc6, rc7, rc9, rc10, rc11 and last build rc12..

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 1:19 pm
by normis
MikroTik >> Do you have some plans to do optimization for firewall? for 1036?

Now my 36 cores can filtr only UDP packets (tested 8gbit/s ddos) but on TCP DDOS attacks the best score is about 500-550mbit (800k packets) of SSYN and the CPU is nearly 95-100% used.. tested on rc6, rc7, rc9, rc10, rc11 and last build rc12..
please show us those rules, so we can comment on how to optimize them.
yes, optimisation of firewall packet matchers is one of the features that we work on.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 1:49 pm
by tomaskir
Normunds, could you please look at Ticket#2013020866000414?

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 2:07 pm
by normis
Normunds, could you please look at Ticket#2013020866000414?
We have added the L2TP bug to our bugtracker, and it will be fixed.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 2:08 pm
by majkel
MikroTik .....
please show us those rules, so we can comment on how to optimize them.
yes, optimisation of firewall packet matchers is one of the features that we work on.

I send you on ticket [Ticket#2013032266000431] RE: firewall rules optim


Thenk u.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 2:29 pm
by tomaskir
Normunds, could you please look at Ticket#2013020866000414?
We have added the L2TP bug to our bugtracker, and it will be fixed.
Yes, but what about the NAT work-around that doesnt work?

There was no response on that.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 2:41 pm
by normis
Normunds, could you please look at Ticket#2013020866000414?
We have added the L2TP bug to our bugtracker, and it will be fixed.
Yes, but what about the NAT work-around that doesnt work?

There was no response on that.
Our developers and testers do not consider it to be a bug, as they already explained.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 4:50 pm
by OlegM
Stopped CPU after the disable and enable the NIC Internet.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 22, 2013 7:00 pm
by blitz
Same management problem with latest rc12 and sometimes cpu's looks like this with 150mbps passing.

9%,99%,100%,100%,99%,100%,99%,99%,99%,99%,99%,99%,99%,
100%,99%,99%
free-memory: 1742720KiB

Re: CLOUD CORE ROUTER

Posted: Sat Mar 23, 2013 9:03 am
by ners
I'm very disappointed with the CCR-1036, it is being advertised as a carrier grade router, yet it cannot do NAT more than 250Mbit/sec (around 30k packets/sec) without falling throughput :(
This is probably enough for a small business, but certainly not for anything serious.

Re: CLOUD CORE ROUTER

Posted: Sat Mar 23, 2013 5:26 pm
by tontonalu
Weverton my name and I'm from Brazil.

I am facing a problem, I installed a usb modem in CCR 16, rescource recognizes the modem, put into port usb ports appears not only serial port. version of mikrotik and 6rc11. :?

Thank you for your attention.

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 8:29 am
by dzeisons
I have the following problems on CCR1016:
1. As i read earlier, i'm not the only, who have a problem with CPU load on management. Version rc12. Winbox was opened all the time.
2. In two different places (two different configurations, two different IS Providers, CCR1016: rc11 and rc12) i have a problem with additional WAN IP addresses: when i add additional addresses from the same subnet to WAN interface, then those additional addresses are reachable only after few hours of waiting. Later, everything is ok, but it is really annoying, when i need to change routers including all NAT services as fast as i can.

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 8:43 am
by normis
Can you guys close winbox and connect with SSH to confirm if Winbox is not causing the issue?

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 8:58 am
by dzeisons
Can you guys close winbox and connect with SSH to confirm if Winbox is not causing the issue?
Few minutes after i closed winbox, CPU load still is 50%

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 9:03 am
by normis
Can you guys close winbox and connect with SSH to confirm if Winbox is not causing the issue?
Few minutes after i closed winbox, CPU load still is 50%
Does that mean that half of your cores are loaded, or one core is at 50% ?

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 9:06 am
by dzeisons
Can you guys close winbox and connect with SSH to confirm if Winbox is not causing the issue?
Few minutes after i closed winbox, CPU load still is 50%
Does that mean that half of your cores are loaded, or one core is at 50% ?
Eight cores are at 100%, remaining eight cores 0-2%
Yesterday it was about 80% CPU load, then few cores were 0-2%, all other were 100%. After restart - all cores 0-2%

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 9:07 am
by majkel
The management problem is not problem with winbox... becouse I always get info from people that they cant connect to server, or they disconnecting.. then I login by winbox or ssh, or ticktool and have managemtn problem..

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 9:16 am
by normis
Can any of you provide us remote access to a router with this issue, especially where management eats more than one core to 100% ? Email support please with SSH details.

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 9:24 am
by majkel
I Can but I use now rc11 version... becouse I prefer to reset daily at 6am my router to get rid TX drops that appear after 2 days. When I use rc12 version with the management problem its so big that my clients almost killed me..

But I think blitz is still using rc12..

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 10:51 am
by dzeisons
Can any of you provide us remote access to a router with this issue, especially where management eats more than one core to 100% ? Email support please with SSH details.
Where to send?

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 10:52 am
by normis
Can any of you provide us remote access to a router with this issue, especially where management eats more than one core to 100% ? Email support please with SSH details.
Where to send?
support@mikrotik.com is the official support email
the forum is mostly for user-user discussions

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 11:57 am
by blitz
I Can but I use now rc11 version... becouse I prefer to reset daily at 6am my router to get rid TX drops that appear after 2 days. When I use rc12 version with the management problem its so big that my clients almost killed me..

But I think blitz is still using rc12..
Yes, I use now latest (22 MAr) version but the router is in semiproduction and some clients are using it. I cannot keep them connected on the router with problem for too long because i will loose them. When the problem occured even i've stopped pppoe-server clients are not disconnected. I have to reboot the rooter (it works after 3-4 tries). I hope this version will work fine and if the problem will appear i will give support ssh access for few hours.

Andrew

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 1:17 pm
by Jetrider
Yeah, went back from all them RC12-s to RC11 in our production environment. RC12 too unstable and too fancy problems popping out all the time, customers going mad and managers get grumpy. Only bug here with RC11 is that of management and IP access (MAC access still works). Will just sit and wait for now, better the devil you know than the one you dont.

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 1:34 pm
by complete2006
Maybe it would be better to fix the management error in RC11 only and then go to the performance issues. I would see this beast running.

CCR = Cloud Core Router and not Certain Carrier Ruin :lol: :lol: :lol:

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 1:44 pm
by xivot
Hi all,
I bought a CCR-1016(the small one) to try it instead the bigger CCR.
I updated it to RC10 and the routerboard firmware to 3.04.
After this all was working.
Later, I uploaded the backup file of the bigger CCR into the small one.
After the restore's reboot. The CCR hasn't worked again. It stops in loading kernel.
I cannot enter it via winbox (ip or mac), telnet, etc.
If I try to enter with serial cable it says loading routerboot..
In NetInstall doesn't appear the router and I cannot access it via serial console.
I also tried the reset button and the reset jumper. Anything happens..

Any advice??
Thanks!!!

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 1:45 pm
by blitz
Maybe it would be better to fix the management error in RC11 only and then go to the performance issues. I would see this beast running.
I did not have problems with management in rc11. For me it was enough to fix for the moment only ospf :)

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 1:58 pm
by majkel
MikroTik >> Do you have some plans to do optimization for firewall? for 1036?

Now my 36 cores can filtr only UDP packets (tested 8gbit/s ddos) but on TCP DDOS attacks the best score is about 500-550mbit (800k packets) of SSYN and the CPU is nearly 95-100% used.. tested on rc6, rc7, rc9, rc10, rc11 and last build rc12..
please show us those rules, so we can comment on how to optimize them.
yes, optimisation of firewall packet matchers is one of the features that we work on.
normis this is my rules. Can You check? Today i get ddos atack near 500mbit on TCP, and my CCR get 100%.. :(

7 ;;; Blokada UDP Port 80
chain=forward action=drop protocol=udp port=80

8 chain=input action=accept src-address=80.72.*.*

9 ;;; White Lista
chain=forward action=accept src-address-list=white_list dst-address-list=""

10 ;;; accept established connection packets
chain=input action=accept connection-state=established

11 ;;; accept related connection packets
chain=input action=accept connection-state=related

12 ;;; drop invalid packets
chain=input action=drop connection-state=invalid

13 ;;; detect and drop port scan connections
chain=input action=drop protocol=tcp psd=21,3s,3,1

14 ;;; suppress DoS attack
chain=input action=tarpit protocol=tcp src-address-list=black_list connection-limit=3,32

15 ;;; detect DoS attack
chain=input action=add-src-to-address-list protocol=tcp address-list=black_list address-list-timeout=1d connection-limit=100,32

16 ;;; jump to chain ICMP
chain=input action=jump jump-target=ICMP protocol=icmp

17 ;;; jump to chain services
chain=input action=jump jump-target=services

18 ;;; Allow Broadcast Traffic
chain=input action=accept dst-address-type=broadcast

19 chain=input action=log log-prefix="Filter:"

20 ;;; 0:0 and limit for 5pac/s
chain=ICMP action=accept protocol=icmp icmp-options=0:0-255 limit=5,5

21 ;;; 3:3 and limit for 5pac/s
chain=ICMP action=accept protocol=icmp icmp-options=3:3 limit=5,5

22 ;;; 3:4 and limit for 5pac/s
chain=ICMP action=accept protocol=icmp icmp-options=3:4 limit=5,5

23 ;;; 8:0 and limit for 5pac/s
chain=ICMP action=accept protocol=icmp icmp-options=8:0-255 limit=5,5

24 ;;; 11:0 and limit for 5pac/s
chain=ICMP action=accept protocol=icmp icmp-options=11:0-255 limit=5,5

25 ;;; drop everything else
chain=input action=drop

26 ;;; Drop everything else
chain=ICMP action=drop protocol=icmp

27 ;;; accept localhost
chain=services action=accept dst-address=127.0.0.1 src-address-list=127.0.0.1

28 ;;; allow MACwinbox
chain=services action=accept protocol=udp dst-port=20561

29 ;;; allow winbox
chain=services action=accept protocol=tcp dst-port=8291

30 ;;; MT API
chain=services action=accept protocol=tcp dst-port=8728

31 ;;; MT Discovery Protocol
chain=services action=accept protocol=udp dst-port=5678

32 ;;; allow SNMP
chain=services action=accept protocol=tcp dst-port=161

33 ;;; allow DNS request
chain=services action=accept protocol=tcp dst-port=53

34 ;;; Web
chain=services action=accept protocol=tcp dst-port=2222

35 ;;; Allow DNS request
chain=services action=accept protocol=udp dst-port=53

36 chain=services action=return

37 ;;; ETOP DNS
chain=forward action=accept src-address-list=ETOP

38 ;;; ETOP DNS
chain=forward action=accept dst-address-list=ETOP

39 ;;; allow related connections
chain=forward action=accept connection-state=related

40 ;;; Prawid owe pakiety
chain=forward action=accept connection-state=established

41 ;;; drop invalid connections
chain=forward action=drop connection-state=invalid

42 ;;; SYN Flood protect
chain=forward action=jump jump-target=SYN-Protect tcp-flags=syn connection-state=new protocol=tcp

43 chain=SYN-Protect action=accept tcp-flags=syn connection-state=new protocol=tcp limit=1000,100 dst-limit=0,5,dst-address/1m40s

44 chain=SYN-Protect action=drop tcp-flags=syn connection-state=new protocol=tcp

45 chain=forward action=jump jump-target=detect-ddos connection-state=new

46 chain=forward action=log connection-state=new hotspot="" log-prefix="ddos_udp:"

47 chain=detect-ddos_TCP action=return dst-limit=30/1m,5,src-and-dst-addresses/10s

48 ;;; packet size 500-65000
chain=detect-ddos action=add-src-to-address-list address-list=ddoser address-list-timeout=1h packet-size=500-65000

49 ;;; Rate limit UDP
chain=detect-ddos action=return dst-limit=30/1m,5,src-and-dst-addresses/10s

50 chain=detect-ddos action=return src-address=80.72.*.*

51 chain=detect-ddos action=return src-address=80.72.*.*

52 chain=detect-ddos action=add-dst-to-address-list address-list=ddosed address-list-timeout=10h30m

53 chain=detect-ddos action=add-src-to-address-list address-list=ddoser address-list-timeout=10h

54 ;;; Drop from ddoser-list
chain=forward action=drop src-address-list=ddoser dst-address-list=ddosed

55 chain=forward action=drop connection-state=new src-address-list=ddoser dst-address-list=ddosed

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 3:13 pm
by mikrobill
Hello people, did anyone test the CCR router with PPP users on it ? What is the maximum throughput in Mbps and pps ? Mikrotik is writing about "25 Simple Queues" = throughput is in Gbps. But what will happen if we put there 1000 ppp users and 1 Gbps of traffic ?

We are thinking about buying one-two CCR, but here on forum I didn't find any positive feedback…

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 3:31 pm
by DirectX9
Hello people, did anyone test the CCR router with PPP users on it ? What is the maximum throughput in Mbps and pps ? Mikrotik is writing about "25 Simple Queues" = throughput is in Gbps. But what will happen if we put there 1000 ppp users and 1 Gbps of traffic ?

We are thinking about buying one-two CCR, but here on forum I didn't find any positive feedback…
will happen 1mbps on each user in ideal but i think (in example in my situation) 500 users can used connection without problems but more users may have problems with connection.

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 9:12 pm
by tontonalu
I am facing a problem, I installed a usb modem in CCR 16, rescource recognizes the modem, put into port usb ports appears not only serial port. version of mikrotik and 6rc11.

Re: CLOUD CORE ROUTER

Posted: Mon Mar 25, 2013 11:44 pm
by infused
Can anyone help me with a GRE Tunnel issue. Not sure if this is a bug:

I have 4 subnets attached to my main header IP

I have a gre tunnel listening on one of these ip addresses

it does not work.

If I use the same config on a single ip address with no additional ip addresses attached, it works.

I cannot see the issue.

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 5:58 am
by blitz
Can any of you provide us remote access to a router with this issue, especially where management eats more than one core to 100% ? Email support please with SSH details.
Ok. The problem is there. You have installed debug package and details ar on Ticket#2013031966000464
Please enter and see the problem because i cannot keep clients connected there too much.
Thanks
Andrew

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:19 am
by normis
We have fixed the management CPU usage problem, and NAND read only issue. New test build will be uploaded in 10 minutes.

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:24 am
by blitz
We have fixed the management CPU usage problem, and NAND read only issue. New test build will be uploaded in 10 minutes.
Good news :)

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:29 am
by normis

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:49 am
by majkel
QL ;) I will be test it too..

@Normis Can you check my rules? I wrote it few posts earlier.. Its strange that 500mbit TCP ddos attack (700k packets/s) is using 100% of all cpu (70%firewall 20% queining)

On attacks near 300mbit-350mbit the cpu is about 60%

When I get UDP DDOS everyting is ok... even if I get 8Gbit/s of DDOS attack

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:50 am
by normis
QL ;) I will be test it too..

@Normis Can you check my rules? I wrote it few posts earlier.. Its strange that 500mbit TCP ddos attack (700k packets/s) is using 100% of all cpu (70%firewall 20% queining)

When I get UDP DDOS everyting is ok... even if I get 8Gbit/s of DDOS attack
Did you enable the TCP syn cookie in firewall connection tracking options ?

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:52 am
by majkel
Dont know.. I think everything was in the rules... How to check this? and enable

EDIT.. I find it.. yes itn enabled..

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:55 am
by normis

ros code

/ip settings set tcp-syncookies=yes
or http://cl.ly/NpQ4

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:55 am
by majkel
Yes its enabled.. ;)

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 11:56 am
by normis
Yes its enabled.. ;)
you should make a new topic, about "dealing with massive DDoS"

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 1:48 pm
by tontonalu
Normis could see the problem of the usb port w CCR 1036 CCR 1016 not recognized in pots of Mikrotik?

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 1:49 pm
by normis
Normis could see the problem of the usb port w CCR 1036 CCR 1016 not recognized in pots of Mikrotik?
What have you plugged in there? Do you use v6rc12? Did you contact support about it? For our CCRs USB works fine

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 1:53 pm
by tontonalu
I'm using a ZTE Modem, In resource he acknowledges, but there is no port usb ports on the RC12

Could you let me know the email or in what part of the forum manages to come about that response?

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 1:57 pm
by normis
I'm using a ZTE Modem, In resource he acknowledges, but there is no port usb ports on the RC12

Could you let me know the email or in what part of the forum manages to come about that response?
official support is only provided by email to support@mikrotik.com
your ZTE modem is probably not supported. maybe we can add support. we need your supout.rif file. please make it, and send to the above address along with a problem description

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 2:53 pm
by blitz
This version looks fine untill now. I saw also in profile that one process call flash eats permanently about 5 % of one core. I did't see that process untill now. It is normal? It could be from debug package i did't uninstall? I will try tonight to uninstall that package to see if that process is still there.

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 2:58 pm
by normis
This version looks fine untill now. I saw also in profile that one process call flash eats permanently about 5 % of one core. I did't see that process untill now. It is normal? It could be from debug package i did't uninstall? I will try tonight to uninstall that package to see if that process is still there.
Try turning off the LCD touchscreen. This is normal, previously it was not correctly reported. 5-6% on one core sounds correct for the LCD touchscreen which is showing something.

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 3:05 pm
by blitz
This version looks fine untill now. I saw also in profile that one process call flash eats permanently about 5 % of one core. I did't see that process untill now. It is normal? It could be from debug package i did't uninstall? I will try tonight to uninstall that package to see if that process is still there.
Try turning off the LCD touchscreen. This is normal, previously it was not correctly reported. 5-6% on one core sounds correct for the LCD touchscreen which is showing something.
You are wright! I turned off lcd and that process dissapeared.


Thanks
Andrew

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 3:50 pm
by majkel
How to turn off the touchscreen I cant find it ? ;) only backlight find..

Re: CLOUD CORE ROUTER

Posted: Tue Mar 26, 2013 4:03 pm
by normis
How to turn off the touchscreen I cant find it ? ;) only backlight find..

ros code

[admin@MikroTik] /lcd> set enabled=no

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 12:32 am
by OlegM
March 20, RC12 working more stable than the last ...

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 12:48 am
by waszi
Is there any plans to add firewall rules support to fasthpath ? Stateless filters would be enough for us.
RouterOS could become great alternative to high-end boxes. Currently we are considering 8-16 ccr1036 boxes
for ddos mitigation, with this feature it could be only few boxes.

6wind has solution that offers high performance software filtering (more than 60Mpps on standard xeon server)
but it is very expensive piece of software.

stateless TCP synproxy/syncookies would be also a great idea.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 6:03 am
by Artelisys
e have fixed the management CPU usage problem, and NAND read only issue. New test build will be uploaded in 10 minutes.
Yes indeed, it has been fixed; I am no longer seeing high core CPU usage; currently running 800Mbps (400Kpps) in routing configuration only, no queues or filters and device is handling very well. Thank you for the hard work in resolving this issue!

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 8:41 am
by normis
Oleg, you are using an old build. Try March 26 , 5:18PM

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 9:40 am
by latuannetnam
Hi Normis.
I still have CPU load 100% problem with lasted rc12 on CCR (I posted problem detail already in forum). I have make a ticket [Ticket#2013032766000191] about this problem
Please take a look and try to fix the problem.
Thanks.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:03 am
by majkel
I had 200mbit of traffic and everything is ok..

latuannetnam Do you update firmware to 3.05 ?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:34 am
by blitz
I had 200mbit of traffic and everything is ok..

latuannetnam Do you update firmware to 3.05 ?
Do you have March 26 , 5:18PM version or 10:49 ?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:38 am
by normis
So far, 5:18PM build seems to fix all remaining issues. We are ready to release RC12

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:46 am
by majkel
strange.. I had Mar/26/2013 16:36:39 .. and download it today..

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:50 am
by DirectX9
Hello Normis
Have a trouble after update to FW 3.05 on CCR1036-12-4S
I have Upload speed limiting at 100Mbit from provider
If I test the speed between my CCR and 951G-2HnD by wire through internet I have upload speed about 97-99Mbit
but if I test the speed from the computer behind NAT (masquerade) by wire (1Gbit connection - no connection or end user cables problems) upload speed which can I see is only 38Mbit max, but really about 27 Mbit.
Changing places CCR with RB1100AHx2 solve the problem, because old firmware and ROS 5.18 on RB1100.
May be something changes in upload connections on CCR or sockets or concurrently channels or something changes in firewall engine of CCR.
Local connection of the my Computer 2xXEON 16GByte RAM with CCR is using Cisco SFP 1Gbit module.
this trouble happened a long time ago but only with CCR.
What have I do wrong?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:53 am
by normis
Hello Normis
Have a trouble after update to FW 3.05 on CCR1036-12-4S
I have Upload speed limiting at 100Mbit from provider
If I test the speed between my CCR and 951G-2HnD by wire through internet I have upload speed about 97-99Mbit
but if I test the speed from the computer behind NAT (masquerade) by wire (1Gbit connection - no connection or end user cables problems) upload speed which can I see is only 38Mbit max, but really about 27 Mbit.
Changing places CCR with RB1100AHx2 solve the problem, because old firmware and ROS 5.18 on RB1100.
May be something changes in upload connections on CCR or sockets or concurrently channels or something changes in firewall engine of CCR.
Local connection of the my Computer 2xXEON 16GByte RAM with CCR is using Cisco SFP 1Gbit module.
this trouble happened a long time ago but only with CCR.
What have I do wrong?
make a nework diagram showing the issue please. description is hard to follow. do you use march 26 build from 5:08PM ?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 10:59 am
by DirectX9
Hello Normis
Have a trouble after update to FW 3.05 on CCR1036-12-4S
I have Upload speed limiting at 100Mbit from provider
If I test the speed between my CCR and 951G-2HnD by wire through internet I have upload speed about 97-99Mbit
but if I test the speed from the computer behind NAT (masquerade) by wire (1Gbit connection - no connection or end user cables problems) upload speed which can I see is only 38Mbit max, but really about 27 Mbit.
Changing places CCR with RB1100AHx2 solve the problem, because old firmware and ROS 5.18 on RB1100.
May be something changes in upload connections on CCR or sockets or concurrently channels or something changes in firewall engine of CCR.
Local connection of the my Computer 2xXEON 16GByte RAM with CCR is using Cisco SFP 1Gbit module.
this trouble happened a long time ago but only with CCR.
What have I do wrong?
make a nework diagram showing the issue please. description is hard to follow. do you use march 26 build from 5:08PM ?
Use march 26 12:07
now just try 5:08PM
and write if problem will be exist.
and one question.....
Does the CCR1036-12-4 works with 100Mbit SFP or only 1Gbit SFP?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 11:05 am
by blitz
strange.. I had Mar/26/2013 16:36:39 .. and download it today..
Yes. It's 16:36. My mistake.
Management problem seems to be solved for me. I still have 10:49 version and cpus are loaded a little more then before (but maybe now they are showing the reality). I will try tonight 16:36 version if everything seems ok to you.

Andrew

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 11:10 am
by normis
Latest should be

ros code

10   name="system" version="6.0rc12" build-time=mar/26/2013 17:18:12 scheduled=""

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 11:24 am
by DirectX9
And now.
use last built 26march 17:18:12
the bandwidth between CCR and SXT G 2HnD by wire have trouble with duplex - only in one way (TX) I see the speed about 700-800Mbit by UDP traffic with mistakes and another way RX loses speed down to zero. in TCP mode with 20 connection count I see only 50MbitTX/40MbitRX but connection is a 1Gbit (the wires is very expensive 6CAT Belden with 23AWG)

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 11:26 am
by normis
And now.
use last built 26march 17:18:12
the bandwidth between CCR and SXT G 2HnD by wire have trouble with duplex - only in one way (TX) I see the speed about 700-800Mbit by UDP traffic with mistakes and another way RX loses speed down to zero. in TCP mode with 20 connection count I see only 50MbitTX/40MbitRX but connection is a 1Gbit (the wires is very expensive 6CAT Belden with 23AWG)
how are you testing this? with bandwidth test? where is the client and server? this is not a reliable method of testing

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 11:54 am
by DirectX9
And now.
use last built 26march 17:18:12
the bandwidth between CCR and SXT G 2HnD by wire have trouble with duplex - only in one way (TX) I see the speed about 700-800Mbit by UDP traffic with mistakes and another way RX loses speed down to zero. in TCP mode with 20 connection count I see only 50MbitTX/40MbitRX but connection is a 1Gbit (the wires is very expensive 6CAT Belden with 23AWG)
how are you testing this? with bandwidth test? where is the client and server? this is not a reliable method of testing
Yes using MTIK hardware bandwidth test in local network.
Internet connection test is using By speedtest.net with my nearly server of my provider which is connect with me by 10Gbit MetroEthernet Cisco Catalyst by fiber and has no phisics or soft or hardware connection problems with me.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 12:07 pm
by honzam
Now there is - build rc12 - 2013-03-27 10:52:10

Will be released today?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 12:13 pm
by coombes69
We are looking to replace our existing firewall in 2 weeks time.

I would like to know if the CCR is stable enough yet for a few firewall rules a few nat rules on a 50mb wan connection with upto 500 concurrent users.

I know this is vague and difficult to answer but i need to make an order today and its either the CCR 1036-12-4s or an 1100ah.

Anyones opinion would be muchly appreciated

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 1:21 pm
by DirectX9
We are looking to replace our existing firewall in 2 weeks time.

I would like to know if the CCR is stable enough yet for a few firewall rules a few nat rules on a 50mb wan connection with upto 500 concurrent users.

I know this is vague and difficult to answer but i need to make an order today and its either the CCR 1036-12-4s or an 1100ah.

Anyones opinion would be muchly appreciated
500users - haha
Recommend RB1200 or 1100AH - no difference
if you have only 50Mbit WAN up to 150Mbit
For more there is sense to think about CCR

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 1:26 pm
by normis
rc12 released.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 1:33 pm
by DirectX9
rc12 released.
LETS TASTE

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:13 pm
by coombes69
500users - haha
Recommend RB1200 or 1100AH - no difference
if you have only 50Mbit WAN up to 150Mbit
For more there is sense to think about CCR
2000 users - upto 500 concurrent. also 10 regular VPN users.

We are aware that those models may well be up to it, but from what i've heard they don't scale well to DDOS attacks. and i was advised that in our environment the CPU will probably be quite high

We will also be looking at traffic shaping, policy based routing with caching appliance shortly after installing. and 6 months down the line we will most likely be going to gigabit WAN.

I like to buy much higher spec than is required usually for future proofing.


What i would like to know is if the CCR could be classed as stable in our environment.

L

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:17 pm
by DirectX9
500users - haha
Recommend RB1200 or 1100AH - no difference
if you have only 50Mbit WAN up to 150Mbit
For more there is sense to think about CCR
2000 users - upto 500 concurrent. also 10 regular VPN users.

We are aware that those models may well be up to it, but from what i've heard they don't scale well to DDOS attacks. and i was advised that in our environment the CPU will probably be quite high

We will also be looking at traffic shaping, policy based routing with caching appliance shortly after installing. and 6 months down the line we will most likely be going to gigabit WAN.

I like to buy much higher spec than is required usually for future proofing.


What i would like to know is if the CCR could be classed as stable in our environment.

L
Unfortunately ccr is not stable, cause it doesn't be final commercial product yet

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:21 pm
by coombes69
Some of you are using these in production though right?

Are there any major issues?

Do they still require regular reboots?

I just dont want to buy a 1100AH2 to then end up buying a CCR a few months down the line, i will if i have to but im willing to take a chance if there are not any known bugs with the firewall, nat at the moment.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:25 pm
by DirectX9
Some of you are using these in production though right?

Are there any major issues?

Do they still require regular reboots?

I just dont want to buy a 1100AH2 to then end up buying a CCR a few months down the line, i will if i have to but im willing to take a chance if there are not any known bugs with the firewall, nat at the moment.
A lot of minor issues in CCR - that one big major issue. I have one CCR - top version with 16Gb RAM - it is not ready just for small business but the 1100AHx2 (I have too) doesn't have o lot of issues.
I have full line wireless product in 2Ghz - the best now is rb2011UAS-2Hnd,951G,SXT G-2HnD (somehow Metal)
Wired products that I have is RB1200, RB2011RM, RB450, RB1200, RB1100AHx2 - the best is a last one. RECOMMEND for Core!

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:25 pm
by normis
The CCR hardware will not change. Only software update could be required from time to time. Current RC12 release has many improvements and the CCR is quite usable.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:26 pm
by normis
Some of you are using these in production though right?

Are there any major issues?

Do they still require regular reboots?

I just dont want to buy a 1100AH2 to then end up buying a CCR a few months down the line, i will if i have to but im willing to take a chance if there are not any known bugs with the firewall, nat at the moment.
A lot of minor issues in CCR - that one big major issue. I have one CCR - top version with 16Gb RAM - it is not ready just for small business but the 1100AHx2 (I have too) doesn't have o lot of issues.
Did you upgrade to RC12, or you mean the minor issues that were fixed in RC12?

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:34 pm
by DirectX9
Some of you are using these in production though right?

Are there any major issues?

Do they still require regular reboots?

I just dont want to buy a 1100AH2 to then end up buying a CCR a few months down the line, i will if i have to but im willing to take a chance if there are not any known bugs with the firewall, nat at the moment.
A lot of minor issues in CCR - that one big major issue. I have one CCR - top version with 16Gb RAM - it is not ready just for small business but the 1100AHx2 (I have too) doesn't have o lot of issues.
Did you upgrade to RC12, or you mean the minor issues that were fixed in RC12?
Yes Normis. I've already upgrade to RC12 but I have troubles with routing and upload speed which is happened when use wire connection. I don't speak about wireless problems because it's not correct to tell about it now - think something wrong in my config or my mind.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:37 pm
by normis
I've already upgrade to RC12 but I have troubles with routing and upload speed which is happened when use wire connection. I don't speak about wireless problems because it's not correct to tell about it now - think something wrong in my config or my mind.
It would be nice if you contacted support about these issues, so we can fix them for you. Please email support@mikrotik.com with problem description and supout.rif file. Make a new ticket (not reply to old one)

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:38 pm
by DirectX9
I've already upgrade to RC12 but I have troubles with routing and upload speed which is happened when use wire connection. I don't speak about wireless problems because it's not correct to tell about it now - think something wrong in my config or my mind.
It would be nice if you contacted support about these issues, so we can fix them for you. Please email support@mikrotik.com with problem description and supout.rif file. Make a new ticket (not reply to old one)
OK

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 3:55 pm
by Beeski
500users - haha
Recommend RB1200 or 1100AH - no difference
if you have only 50Mbit WAN up to 150Mbit
For more there is sense to think about CCR
2000 users - upto 500 concurrent. also 10 regular VPN users.

We are aware that those models may well be up to it, but from what i've heard they don't scale well to DDOS attacks. and i was advised that in our environment the CPU will probably be quite high

We will also be looking at traffic shaping, policy based routing with caching appliance shortly after installing. and 6 months down the line we will most likely be going to gigabit WAN.

I like to buy much higher spec than is required usually for future proofing.


What i would like to know is if the CCR could be classed as stable in our environment.

L
We have had one of our Towers managed by a CCR on rc9 for more than 45 days without a reboot.
Approx 100Mbps of traffic, 300 customers, vlans and firewall rules.
I would say go with the CCR.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 4:06 pm
by coombes69
Thanks beeski & normis.

I think i will try out the CCR. worst case scenario is i swap patch leads over to our old firewall i suppose.

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 5:08 pm
by Attila
Dear Normis!

Ticket#2013020566000411: Multicast routing (PIM-SM) same source (IPTV channel) with different client IP (Set Top Box) not working in CCR1036 (RC6,RC7,RC8,RC9,RC10,RC11,RC12). Same ROS version (RC6,RC7,RC8,RC9,RC10,RC11,RC12) and same configuration (1. RP, 3. Interface) working correctly in RB2011.


Please investigate this problem...


Thx.

Attila

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 6:00 pm
by caiot5
EDIT: I forgot to mention the RoS version and the firmware: RouterOS: v6.0rc11 , Firmware: 3.02

We have several CCR boards running on our company (ISP) and we noticed that everytime we restore a backup from another routerboard like the RB1000 the lcd panel shows that it is booting but freezes on "loading services" screen.
I can access and use the RB normally but without any lcd function.

I have tried to enable it by the console but it freezes too and after a while prints an error:

/lcd set enabled=yes
action timed out - try again, if error continues contact MikroTik support and send
a supout file (13)

Can somebody give us a help?

Thanks in advance.
Best regards,
Caio

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 9:09 pm
by Leo72
hi all

we upgraded today our CCR1036 with reboot problems, to RC12 (yesterday build); let's see

I will keep you updated

regarding the CCR1016, 35days in production and still no issue

B/R

Re: CLOUD CORE ROUTER

Posted: Wed Mar 27, 2013 9:19 pm
by Leo72
hi again

we got some days ago our 3rd CCR, a CCR1016. We updated the ROS and then loaded the configuration of our CCR1036, of course there was a small issue, because the 4 SFP interfaces are missing, but we did not think this to be a big problem

anyway, after the configuration was restored, the CCR1016 seems "dead"; no way to access it either via IP address or via MAC

any idea? connecting it to a PC via serial port, it does not show anything (tested at 115200 bps 8N1 no flow control); the LCD stops at "loading kernel"

I opened a ticket (#2013032566000443) but still no answer

pushing the reset button seems not to produce any effect (but I don't know which exact procedure my colleague followed, I can't ask now because he has holidays)

do we have to return it ?

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 7:42 am
by DirectX9
EDIT: I forgot to mention the RoS version and the firmware: RouterOS: v6.0rc11 , Firmware: 3.02

We have several CCR boards running on our company (ISP) and we noticed that everytime we restore a backup from another routerboard like the RB1000 the lcd panel shows that it is booting but freezes on "loading services" screen.
I can access and use the RB normally but without any lcd function.

I have tried to enable it by the console but it freezes too and after a while prints an error:

/lcd set enabled=yes
action timed out - try again, if error continues contact MikroTik support and send
a supout file (13)

Can somebody give us a help?

Thanks in advance.

Please update FW to 3.05 - it would be better.
Best regards,
Caio

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 11:01 am
by greek
*) sstp server - removed test mode which allowed running server without certificate;
Oh, why ?

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 11:20 am
by mrz
*) sstp server - removed test mode which allowed running server without certificate;
Oh, why ?
Because of security reasons.

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 11:52 am
by janisk
everyone - do not use backup files to move configuration from one router to another.

use '/export compact' and save to file and then adjust it for router you want to import script into. Backup has a lot of router specific stuff that can cause problems.

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 1:40 pm
by caiot5
everyone - do not use backup files to move configuration from one router to another.

use '/export compact' and save to file and then adjust it for router you want to import script into. Backup has a lot of router specific stuff that can cause problems.
Thanks for the quick reply.
I haven't tried to use the /export compact command but instead I have used the /ip address export file=xxx , /ip route export file=xxx, etc. Unfortunately both of them are giving an error message "syntax error", I have tried to debug and I found that all the comment fields with accentuation fail to export and even if I delete all of them, it gives the syntax error.
That's why we used the backup function that "at least" works.

I will try to use the /export compact command but, do you really think it will work? I mean, that router is in production state, can I rely on that command?

Best Regards,
Caio.

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 2:28 pm
by DirectX9
everyone - do not use backup files to move configuration from one router to another.

use '/export compact' and save to file and then adjust it for router you want to import script into. Backup has a lot of router specific stuff that can cause problems.
Hello
Please tell me about SFP modules (I have some).
All modules (MultiMode or SingleMode) with Gigabit speed are corecctly works with CCR, but SFP with 100Mbit speed is not correctly works - CCR tell that is Gigabit module. What's wrong? Bug in firmware? (CCR1036-12-4 FW3.05 ROS 6rc12 last)

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 5:14 pm
by Chupaka
all the comment fields with accentuation fail to export
any example?.. what version do you use?

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 6:28 pm
by caiot5
all the comment fields with accentuation fail to export
any example?.. what version do you use?
I'm exporting it from ROS 6.0rc7 (RB1000) (I have tried with 6.0rc11 too) and importing in a CCR1036 with ROS 6.0rc11.

An example:

add comment="IP LIGA\C7\C3O TN / 5.8" distance=1 dst-address=187.9.30.176/30 \
gateway=172.31.153.171


This line contains accentuation and will return "syntax error".

Re: CLOUD CORE ROUTER

Posted: Thu Mar 28, 2013 11:54 pm
by majkel
I have the question about indicator of CPU use in my 1036

What u Can see in the profile the cpu use is about 8,5%... so why near the clock and in the resources the cpu use is 1%?

Its bug? or what ;)

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 1:17 am
by caiot5
hi again

we got some days ago our 3rd CCR, a CCR1016. We updated the ROS and then loaded the configuration of our CCR1036, of course there was a small issue, because the 4 SFP interfaces are missing, but we did not think this to be a big problem

anyway, after the configuration was restored, the CCR1016 seems "dead"; no way to access it either via IP address or via MAC

any idea? connecting it to a PC via serial port, it does not show anything (tested at 115200 bps 8N1 no flow control); the LCD stops at "loading kernel"

I opened a ticket (#2013032566000443) but still no answer

pushing the reset button seems not to produce any effect (but I don't know which exact procedure my colleague followed, I can't ask now because he has holidays)

do we have to return it ?
Probably you're facing the same problem as me, your backup got wrongly restored and all the interfaces have no IP address, and the MAC server is disabled.
But I think you can reset the device, try the following procedure:
1- Turn off the CCR1036
2- Press and hold the reset button
3- Turn it on with the reset button pressed and release it after about 5 seconds.

I think it will reset your CCR.
Please tell me if it worked for you.

Regards,
Caio.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 1:25 am
by Leo72
thanks, I will try tomorrow at work, and report

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 9:54 am
by jedrek
Hi everyone.

Does any one have a problem with BGP HoldTImer Expired on CCR1016?
From about a week i have 2 BGP flaps in 24h.

Logs:
02:52:10 route,bgp,error HoldTimer expired
02:52:10 route,bgp,error RemoteAddress=8x.1xx.1x.1xx
02:53:08 route,bgp,info Failed to open TCP connection: No route to host
02:53:08 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
02:53:31 route,bgp,info Failed to open TCP connection: No route to host
02:53:31 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
02:53:47 route,bgp,info Connection opened by remote host
02:53:47 route,bgp,info RemoteAddress=8x.1xx.1x.1xx

//EDIT

[admin@JDS-CORE.BGP] > /system routerboard print
routerboard: yes
model: CCR1016-12G
current-firmware: 3.05
upgrade-firmware: 3.05

[admin@JDS-CORE.BGP] > /system resource print
uptime: 7h50m17s
version: 6.0rc12
build-time: Mar/26/2013 17:18:12
free-memory: 1507.9MiB
total-memory: 1940.2MiB
cpu: tilegx
cpu-count: 16
cpu-frequency: 1200MHz
cpu-load: 0%
free-hdd-space: 431.1MiB
total-hdd-space: 512.0MiB
architecture-name: tile
board-name: CCR1016-12G
platform: MikroTik

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 10:14 am
by SwissWISP
On our 1036 we don't see such problems. We've got BGP sessions that are up since several weeks.
Logs:
02:52:10 route,bgp,error HoldTimer expired
02:52:10 route,bgp,error RemoteAddress=8x.1xx.1x.1xx
02:53:08 route,bgp,info Failed to open TCP connection: No route to host
02:53:08 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
02:53:31 route,bgp,info Failed to open TCP connection: No route to host
02:53:31 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
02:53:47 route,bgp,info Connection opened by remote host
02:53:47 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
The red lines look strange to me. I would say you've got a routing problem before BGP even runs.
Is you peer directely connected or not?

- Mat

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 10:29 am
by jedrek
On our 1036 we don't see such problems. We've got BGP sessions that are up since several weeks.
Logs:
02:52:10 route,bgp,error HoldTimer expired
02:52:10 route,bgp,error RemoteAddress=8x.1xx.1x.1xx
02:53:08 route,bgp,info Failed to open TCP connection: No route to host
02:53:08 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
02:53:31 route,bgp,info Failed to open TCP connection: No route to host
02:53:31 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
02:53:47 route,bgp,info Connection opened by remote host
02:53:47 route,bgp,info RemoteAddress=8x.1xx.1x.1xx
The red lines look strange to me. I would say you've got a routing problem before BGP even runs.
Is you peer directely connected or not?

- Mat
Yeah. It's a direct connection via fiberoptics.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 10:49 am
by SwissWISP
Yeah. It's a direct connection via fiberoptics.
Well, I would check the connection. It looks like your connection is flapping.
Try to ping the peer for some hours.

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 10:53 am
by jedrek
Yeah. It's a direct connection via fiberoptics.
Well, I would check the connection. It looks like your connection is flapping.
Try to ping the peer for some hours.

Yeah... that's my thought in the first place. But one thing is interesting... It's always around 21-22 in the evening and around 1-2 in the morning.

//EDIT

Everything is clear now. My ISP calld just few minutes ago, and the problem is on their side of the network ;-)

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 1:24 pm
by Leo72
caiot5, unfortunately the reset procedure you describe does not work here...

the LCD stops always at "loading kernel", no further message, no way to access the device via winbox

MTik support team, any other idea? is there another procedure for "load factory defaults"? or to access a boot manager and reflash the firmware?

Ticket#2013032566000443

do I have to return the device to our distributor?

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 5:44 pm
by Chupaka
An example:

add comment="IP LIGA\C7\C3O TN / 5.8" distance=1 dst-address=187.9.30.176/30 \
gateway=172.31.153.171


This line contains accentuation and will return "syntax error".
hm... I added that route, and "/ip route export" exported it normally... =)

Re: CLOUD CORE ROUTER

Posted: Fri Mar 29, 2013 9:58 pm
by raz
My CCR is since few Days in production enviroment, im using it as core Router with BGP Fullfeed including Firewalling, like Drop SYN Floods.

Great, the 16 Cores can filter out around 350k pps (!!!) with Conntrack before it goes down. A wonderful extension would be the possibility to Filter Packets by more Flags, like TCP len=0.

Re: CLOUD CORE ROUTER

Posted: Sat Mar 30, 2013 10:39 am
by jager
Hi everybody,

Does anybody experience (upgraded to v6.0rc12) usernames and passwords vanishing without reboot or any other issue? This is on CCR1036.
This router is our maing BGP router and was working OK for days after upgrade to the first pre-lease CR12. There is one full BGP route and if no BGP flapping exists, everything is normal.

Now we have some fibre maintenance and the BGP is going on/off sometimes. This completely makes the router crazy and it simply forget all usernames/passwords and it resets to factory defaul admin/no_passwd.
After /system reboot, the router is not accessible until we powercycle it.
Trying to make supout.rif before reboot does not work. It simply fails. Like it is impossible to write do disk.

This is so painfull and I'm really losing my patience. I hate even the idea to do BGP on Cisco, but if this is not going to be fixed soon, I will simply be forced to do so.

Any idea what's wrong???

By the way, the router don't have literally any other task than one BGP route. No firewalling, mangle, etcetc. Just one plain full BGP route and passing traffic to the rest of the network.

Re: CLOUD CORE ROUTER

Posted: Sat Mar 30, 2013 10:56 am
by yinternetmalaga
Hello all,

Recently our CCR1036 has been acting strange. Everynight at 1am the CPU usage jumps from 1% to 20%. When looking at the CPU usage, it is showing 8 cores running at 100%. Under "Profile", I have 20% usage on Management.

What features are classified as Management??

Also when this happens, we loose connectivity to any VLAN interface running on the CCR. Very strange!!

Anyone else seen this??

Re: CLOUD CORE ROUTER

Posted: Sat Mar 30, 2013 11:09 am
by jager
@yinternetmalaga

Try disabling SNMP

Re: CLOUD CORE ROUTER

Posted: Sat Mar 30, 2013 1:59 pm
by DirectX9
Hello my Dear support.
And How about Switch option (Manual:Switch Chip Features in WIKI) on CCR
Or it is not needed for such device?
I see you had allready implemented MASTER PORT feature in RC12.

Re: CLOUD CORE ROUTER

Posted: Sun Mar 31, 2013 9:43 am
by Arcticfox
Dear support, please help me,
I've bought CCR-1036-12G-4S (ROSv6rc12), and getting this 3 types of errors:
1. After making l2tp tunnel, and setting it up, I've found an impossibility to remove that tunnel.
2. Also CCR loses it's PPP profiles and it makes impossible to deactivate tunnel directly (by setting it's status to disable).
Then I go by 3 ways:
3. When I tryed to resetup tunnel profile, I've got a hanging webfig/cli to timeout:
[admin@MikroTik] > ppp profile add name="beeline-l2tp" change-tcp-mss=yes
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)
4. When I tryed to disable l2tp-client, I've got a next situation:
4.a It hangs at: [admin@MikroTik] > interface l2tp-client print
4.b After pressing Ctrl+C it prints:
Flags: X - disabled, R - running
0 R name="l2tp-beeline" max-mtu=1460 max-mru=1500 mrru=disabled
connect-to=195.14.38.42 user="user" password="password"
profile=(unknown) add-default-route=yes dial-on-demand=no allow=chap
4.c After direct trying to disable l2tp client directly:
[admin@MikroTik] > interface l2tp-client disable 0
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)

Trying to reboot CCR causes:
[admin@MikroTik] > sys reboot
Reboot, yes? [y/N]:
y
system will reboot shortly

After 2 minutes: LCD prints "rebooting..."
After more 3 minutes, still "rebooting...".
10 minutes past: still "rebooting..."

I thing something wrong with l2tp module on CCR. Could you debug it?

On ROSv6rc11 I've met next bug:
after deleting NAT rule router fall in "kernel panic!" and reboots.

Re: CLOUD CORE ROUTER

Posted: Mon Apr 01, 2013 2:25 pm
by caiot5
An example:

add comment="IP LIGA\C7\C3O TN / 5.8" distance=1 dst-address=187.9.30.176/30 \
gateway=172.31.153.171


This line contains accentuation and will return "syntax error".
hm... I added that route, and "/ip route export" exported it normally... =)
Thank you so much for the support.
But I can export the routes normally, the problem occurs only when I'm importing it.

Re: CLOUD CORE ROUTER

Posted: Mon Apr 01, 2013 2:59 pm
by lorenzesz
Hej! Could someone test if the proxy cache server is capable of using more than one cpu core at once? :)

Re: CLOUD CORE ROUTER

Posted: Tue Apr 02, 2013 10:10 am
by becs
Arcticfox, we cannot reproduce L2TP tunnel problems with v6.0rc12. Please write to support@mikrotik.com and send us supout.rif file for research.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 03, 2013 1:23 pm
by OlegM
RC12, which is available at the site, 2 days later started to brake, but after 3 days reboot itself. Rolled back to the version of March 20, RC12. It is stable.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 03, 2013 2:46 pm
by majkel
I Think You must send the supout file to the support, becouse on my 1036 first time I have 8 days uptime without problems

Re: CLOUD CORE ROUTER

Posted: Wed Apr 03, 2013 3:53 pm
by OlegM
The fact that even the nuclei RC12 work on March 20, significantly more stable than that of March 26. March 20, up 80% on the core and I have not seen addressed in almost all nuclei always. A rising number of 26 for a few seconds up to 100%, not all kernels is used.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 03, 2013 5:16 pm
by Arcticfox
Posted to @mail:
Can't make supout.rif because CCR do not want to create it.
Hanging self up and failed... failed... failed...

Re: CLOUD CORE ROUTER

Posted: Wed Apr 03, 2013 11:08 pm
by Leo72
hi, at the moment our CCR1036 doing BGP with RC12 has an uptime of 7 days

the max uptime with previous builds was 9 days

so let's see... fingers crossed :-|

Re: CLOUD CORE ROUTER

Posted: Fri Apr 05, 2013 3:30 am
by Leo72
???

an update about our production CCRs:

CCR1016 RC10 uptime 44 days; no crash until now
CCR1036 RC12 uptime 8 days; no crash until now, with this RC

Re: CLOUD CORE ROUTER

Posted: Fri Apr 05, 2013 9:27 am
by FiShYmAn
everyone - do not use backup files to move configuration from one router to another.

use '/export compact' and save to file and then adjust it for router you want to import script into. Backup has a lot of router specific stuff that can cause problems.
Hello
Please tell me about SFP modules (I have some).
All modules (MultiMode or SingleMode) with Gigabit speed are corecctly works with CCR, but SFP with 100Mbit speed is not correctly works - CCR tell that is Gigabit module. What's wrong? Bug in firmware? (CCR1036-12-4 FW3.05 ROS 6rc12 last)
As above I have the same issue with my CCR, I have a fibre connection that needs to be locked to 100mbit full duplex, when i use a 100mbit fibre SFP module the CCR displays this module as being 1Gbps even when i turn off auto negotiate and lock it to 100mbit, of course because it wont lock to 100mbit I cant get my fibre connection working and I have to run it into a media converter which is locked too 100mbit full duplex, then I run ethernet out of this into the CCR, I would ideally like to and cant see any reason why I cant run this direct, but the routeros or the CCR has issues with it.

Re: CLOUD CORE ROUTER

Posted: Fri Apr 05, 2013 12:43 pm
by complete2006
Second call:

Who's in production with actual RC? Who has PPPOE and BGP running?

Re: CLOUD CORE ROUTER

Posted: Fri Apr 05, 2013 7:38 pm
by Leo72
we have a CCR1036 RC12 in production, with BGP only, no PPP

as I was fearing, today we got the expected crash, just approaching the "9d" uptime mark

the router stopped forwarding

I entered it via winbox, it answered; all interfaces were missing; I was trying to keep calm but was not able to do any useful test :-|

I tried making a supout.inf file, but it did not succeed; customers were starting to call (a TV was broadcasting live), so I had to reboot by power cycling

Ticket#2013040566000701

screenshots sent to MT

Re: CLOUD CORE ROUTER

Posted: Fri Apr 05, 2013 11:09 pm
by Leo72
hi, today evening it crashed again

so we decided to NOT reboot it, instead we connected our lines to the backup router, a RB1100AHX2

so at the moment our "crashed" CCR1036 is on and in "crashed state", so that we or MT can further investigate

I am trying to produce the supout file; started 5 min ago and not yet finished, is that normal?

the CPUs are all 0%, one is 5% on average (probably working on the supout file generation?)

all IP addresses are disappeared

all interfaces are disappeared

(but I am connected to one of them and it actually works)

all BGP entries are disappeared

we can keep it powered on forever until we can find something interesting

MT, we can give you remote desktop access and you can see and investigate by yourselves

Re: CLOUD CORE ROUTER

Posted: Fri Apr 05, 2013 11:32 pm
by morf
You done that have caught this bug!
I bought 2 CCR1036, but I'm afraid to put in the real world. So read the forum and wait for a working RC.
I'm on the CCR1036 is not working as it should shaper. Earlier I marked connection then packages and create rules queues. Now in RouterOS 6 this does not work.

Re: CLOUD CORE ROUTER

Posted: Sat Apr 06, 2013 10:43 am
by complete2006
Mikrotik. I think you should remove CCR from routerboard.com for a while or modify the description in that way that people know that system isn't ready for use yet.

Re: CLOUD CORE ROUTER

Posted: Sat Apr 06, 2013 7:09 pm
by raz
Hi,

i have the same Problem with freezing CCR, i think its because it rans out of Memory. I have to reboot every 7 Days :/
Im running only BGP, some small Rules, thats all.

Re: CLOUD CORE ROUTER

Posted: Sun Apr 07, 2013 4:38 pm
by lorenzesz
Is this hardware working with webcache utilizing all cores?

What features work without crashing the router?

Please answer!

Re: CLOUD CORE ROUTER

Posted: Mon Apr 08, 2013 8:54 am
by majkel
Mikrotik. I think you should remove CCR from routerboard.com for a while or modify the description in that way that people know that system isn't ready for use yet.
I think its too late for that ;)

RC12 is stable.. but v6.0 needs a lot for work.. One year ago CCR comes out, and still dont have firewall fastpach supporta, and for 36 cores.. TCP DDOS attacks eat my CCR in 5 seconds.. I Thing MK do very good joob, but for clients what pay for ccr 500-1000$ is to slow.. CCR is outstanding router but his potential somewhere sleeping ;)

Re: CLOUD CORE ROUTER

Posted: Mon Apr 08, 2013 8:57 am
by complete2006
I think they are working hard to remove the bugs as they appear but that is exactly the problem: "as they appear". I made a pre-order in 2012 of 12 pcs CCR 1036 and canceled it after reading first forum posts. From my point of view the CCR is the right way but the step was to big. I would prefer as a first step to have a RB-1xxx with four SFP (or 24 SFP :D ) that will run stable ...

Re: CLOUD CORE ROUTER

Posted: Mon Apr 08, 2013 10:46 am
by Chupaka
TCP DDOS attacks eat my CCR in 5 seconds..
have you checked your own topic? http://forum.mikrotik.com/viewtopic.php ... 33#p362233
you know you have bad firewall rules - and still complains that router cannot process them under heavy DDoS?..

Re: CLOUD CORE ROUTER

Posted: Mon Apr 08, 2013 10:57 am
by majkel
I change firewall rules with instructions, with help another peoples.. its better, But still 1Gbit of TCP packets kills router..

I have couple of times situation, that i get TCP SSYN with attack 300-400mbit and router block himself for 2 minutes..

Re: CLOUD CORE ROUTER

Posted: Mon Apr 08, 2013 11:03 am
by Chupaka
I change firewall rules with instructions, with help another peoples.. its better, But still 1Gbit of TCP packets kills router..
I can't comment the rules you don't show

Re: CLOUD CORE ROUTER

Posted: Mon Apr 08, 2013 4:05 pm
by complete2006
Hmm. The blocking of the router seem not to bee an CCR issue. I see this here with PC and RB1200 routers. After 2 min they come back. I can log on with winbox . I can ping from the router to the subnet but I can't ping from the subnet to the router.

Re: CLOUD CORE ROUTER

Posted: Tue Apr 09, 2013 7:49 pm
by inasset
Mikrotik :

Why don't you release RouterOS 5.24 for the CCR serious, production users, and leave the 6.0rcN series for this who can afford to be your (free) beta testers?

When I paid for the CCR router I thought I was buying a stable production Router, as indicated in your videos, technical and marketing documentation. I was definitely NOT buying a 'someday-will-be' production router.

R

Re: CLOUD CORE ROUTER

Posted: Tue Apr 09, 2013 8:29 pm
by macgaiver
Mikrotik :

Why don't you release RouterOS 5.24 for the CCR serious, production users, and leave the 6.0rcN series for this who can afford to be your (free) beta testers?

When I paid for the CCR router I thought I was buying a stable production Router, as indicated in your videos, technical and marketing documentation. I was definitely NOT buying a 'someday-will-be' production router.

R
Then blame your distributor - in all official announcements MT informed that this is "pre-production batch for those who wanna try it before full production"
You can't have RouterOS v5 , cause this is completely new CPU architecture that didn't exist before v6

Re: CLOUD CORE ROUTER

Posted: Tue Apr 09, 2013 8:46 pm
by inasset
Then blame your distributor - in all official announcements MT informed that this is "pre-production batch for those who wanna try it before full production"
You can't have RouterOS v5 , cause this is completely new CPU architecture that didn't exist before v6
Taken from : http://routerboard.com/CCR1036-12G-4S

"CCR1036-12G-4S is an carrier grade router with a cutting edge 36 core Tilera CPU! Over 20 times faster than our previous top model."

Now, it seems your concept of 'Carrier Grade' is a bit different from mine.

And, if you have the source code for v5.24, why can't you compile it for Tile64?

R

Re: CLOUD CORE ROUTER

Posted: Tue Apr 09, 2013 8:51 pm
by biomesh
Then blame your distributor - in all official announcements MT informed that this is "pre-production batch for those who wanna try it before full production"
You can't have RouterOS v5 , cause this is completely new CPU architecture that didn't exist before v6
Taken from : http://routerboard.com/CCR1036-12G-4S

"CCR1036-12G-4S is an carrier grade router with a cutting edge 36 core Tilera CPU! Over 20 times faster than our previous top model."

Now, it seems your concept of 'Carrier Grade' is a bit different from mine.

And, if you have the source code for v5.24, why can't you compile it for Tile64?

R
You need to read everything on the page (i.e. at the bottom)

"Pre-production samples for evaluation purposes will be available from Distributors, starting December 2012. Place your order for test units with your Distributor now!"

Re: CLOUD CORE ROUTER

Posted: Tue Apr 09, 2013 8:56 pm
by inasset

You need to read everything on the page (i.e. at the bottom)

"Pre-production samples for evaluation purposes will be available from Distributors, starting December 2012. Place your order for test units with your Distributor now!"
Yes, I read it. This confirms it is not a Carrier Grade router. It may be, someday.

R

Re: CLOUD CORE ROUTER

Posted: Mon Apr 15, 2013 3:08 pm
by rower

You need to read everything on the page (i.e. at the bottom)

"Pre-production samples for evaluation purposes will be available from Distributors, starting December 2012. Place your order for test units with your Distributor now!"
Yes, I read it. This confirms it is not a Carrier Grade router. It may be, someday.

R
the router is. the software is not. and there is almost no information on that by any reseller.

Re: CLOUD CORE ROUTER

Posted: Mon Apr 15, 2013 11:47 pm
by raz
Hi,

how long it takes to get an Reply of: [Ticket#2013041366000268] ? :-)
btw

hping3 --rand-source –S –L 0 –M 0 –p 179 MIKROTIK IP --flood will kill the CCR <3 Seconds. ONLY Basic Setup, no Conntrack ONLY ip firewal drop TCP to Port 179 @ IP.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 10:59 am
by janisk
We are working on the issue.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 12:28 pm
by coombes69
We now have a CCR-1036 in production, all has been working well for a week now on 6.rc13

I decided to add a few queues which worked fine for around an hour (queue tree, 6 child queues matching packets for priority with queue type ethernet-default.)

The whole queue service appears to have crashed whilst everything else works perfectly.

I cant reboot router during the day, is there a way to restart the service?

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 1:30 pm
by raz
We are working on the issue.
Great to hear, dont got a Feedback :-) if you need more Infos send me a Mail.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 1:41 pm
by otgooneo
We now have a CCR-1036 in production, all has been working well for a week now on 6.rc13

I decided to add a few queues which worked fine for around an hour (queue tree, 6 child queues matching packets for priority with queue type ethernet-default.)

The whole queue service appears to have crashed whilst everything else works perfectly.

I cant reboot router during the day, is there a way to restart the service?
Unfortunately, No. You can not restart service or process. All you can is disable/enable queues or restart router itself.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 1:48 pm
by aTan
Does Master port feature works? I have RC13 and for me it doesn't. I can set Master port, but it doesn't work, and after restart setting vanishes.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 3:30 pm
by becs
Does Master port feature works? I have RC13 and for me it doesn't. I can set Master port, but it doesn't work, and after restart setting vanishes.
Master-port setting will not take effect because CCR1036-12G-4S and CCR1016-12G do not have switch-chips.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 5:13 pm
by n3c8
I'm just wondering. Are there any estimates about when we can expect the CCR to be production standard. Also I've previously mentioned a lack of MTU, any movement on that? One final question, are there any indications that the actually hardware spec will change in production models making our current purchase purely a prototype/pre-production model.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 17, 2013 5:29 pm
by DirectX9
CCR does not have swtich chips, so master port setting is not working as there are nothing to work on.
Are you recommend to use BRIDGE instead of?

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 2:34 am
by rogeriodj
Is to get my money back?
My CCR-1036 sucks!
Because neither the gbic own mikrotik does not work, the link is ok, most do not have any traffic, longer connect a rb in other works!
Now in rb2011 works perfect.
What the fuck is that CCR does not work?

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 9:42 am
by janisk

Are you recommend to use BRIDGE instead of?
as ccr does not have switch option use of bridge is only way on how to extend the Ethernet network if you have to.

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 11:55 am
by infused
Is to get my money back?
My CCR-1036 sucks!
Because neither the gbic own mikrotik does not work, the link is ok, most do not have any traffic, longer connect a rb in other works!
Now in rb2011 works perfect.
What the f**k is that CCR does not work?
So what you are saying is you should have read that this was a pre-production release?

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 12:45 pm
by SwissWISP
Our CCR acts like it got infected by a Virus.
It began to create scripting jobs by itself, changed the position of firewall rules (I was looking at the rules while it was doing it) and deleted my whole BGP config after a reboot.

Am I the only one with this problem or did someone else see this too?

- Mat

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 1:22 pm
by janisk
check if you are running latest release of 6.0rc or you have secured the router

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 2:08 pm
by SwissWISP
It runs on RC14 and there are firewall rules to limit access to this router and of course username and password are not default.

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 2:14 pm
by janisk
please generate supout rif when in one state and afterwards generate another one in altered state. we have not seen anything like that.

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 3:27 pm
by SwissWISP
please generate supout rif when in one state and afterwards generate another one in altered state. we have not seen anything like that.
I just saw why these Jobs are created. It's because a autosupout.rif got created in the background (and partly fails). The stuff that happens to the BGP config is a bug and can be reproduced (at least on my device). The only thing that I can not explain is why the firewall rules changed.

Well, I opened a new ticket because I also found some other bugs.

- Mat

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 4:18 pm
by JbBoin
Two days ago i tried the RC14 i found on the forum on my CCR, one of the CPU got stuck ~100% after few seconds while getting a BGP full routing table so i couldnt do a /routing bgp * print which would never end up (but it could be cancelled with control+c).

Back to RC13 and everything is working fine.

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 5:20 pm
by janisk
SwissWISP, check if you have not sected different firewall rule ordering. That could explain rules changing order.

Re: CLOUD CORE ROUTER

Posted: Thu Apr 18, 2013 5:27 pm
by SwissWISP
SwissWISP, check if you have not sected different firewall rule ordering. That could explain rules changing order.
That's a good hint. Maybe I have accidentely clicked on that tab. I will keep an eye on that. If it never happens again, it was just my fault.

Re: CLOUD CORE ROUTER

Posted: Fri Apr 19, 2013 12:41 am
by raz
Sorry for asking a lot, but any News at Ticket#2013041366000268 ?

Re: CLOUD CORE ROUTER

Posted: Fri Apr 19, 2013 9:04 am
by morf
Hello!
Strange CPU with two cores. The CCR1036 has no firewall rules, queues, nothing. But for some reason the load on the two cores of about 5-6%.
I do not want to say that this is a problem, but it can be any source of the problem? :)

Re: CLOUD CORE ROUTER

Posted: Fri Apr 19, 2013 2:09 pm
by onnoossendrijver
5 - 7 percent cpu utilization on 2 of the 36 cores corresponds to about 0.4% overall cpu utilization. I don't see any strange things here.

Re: CLOUD CORE ROUTER

Posted: Fri Apr 19, 2013 4:40 pm
by morf
5 - 7 percent cpu utilization on 2 of the 36 cores corresponds to about 0.4% overall cpu utilization. I don't see any strange things here.
Maybe so. I found it strange that in the "pure" ССR1036 is any load on the CPU.

Re: CLOUD CORE ROUTER

Posted: Fri Apr 19, 2013 5:55 pm
by morf
how CCR works with BGP, and how to cope with the routing of about 1 Gbps of traffic? Please write, those who used ССR with 2 or more BGP uplinks.

Re: CLOUD CORE ROUTER

Posted: Fri Apr 19, 2013 8:21 pm
by SwissWISP
how CCR works with BGP, and how to cope with the routing of about 1 Gbps of traffic? Please write, those who used ССR with 2 or more BGP uplinks.
I wouldn't use the CCR for BGP routing at the moment. There is a problem with stuck routes: http://forum.mikrotik.com/viewtopic.php?f=14&t=57781.
I was told by support that they are working on a solution.

- Mat

Re: CLOUD CORE ROUTER

Posted: Sun Apr 21, 2013 10:57 pm
by infused
Does anyone get long pauses on the CCR? Almost like it's timing out?

We've noticed we get this outage for about 5 seconds. If you are trying to login to the router at that time, the login hangs as well. Had this on all versions so far.

Re: CLOUD CORE ROUTER

Posted: Mon Apr 22, 2013 12:06 am
by friction
Does anyone get long pauses on the CCR? Almost like it's timing out?

We've noticed we get this outage for about 5 seconds. If you are trying to login to the router at that time, the login hangs as well. Had this on all versions so far.
I've got no CCR to compare this and I think I haven't got this issue on any other MT rboards yet, but on a linux machine, it usually occurs when it performs a reverse lookup on your IP address... Have you set any dns servers, e.g google dns (8.8.8.8, 8.8.4.4)? This may in fact be a totally different issue, ofc, just trying to help.

Re: CLOUD CORE ROUTER

Posted: Mon Apr 22, 2013 1:46 am
by infused
Does anyone get long pauses on the CCR? Almost like it's timing out?

We've noticed we get this outage for about 5 seconds. If you are trying to login to the router at that time, the login hangs as well. Had this on all versions so far.
I've got no CCR to compare this and I think I haven't got this issue on any other MT rboards yet, but on a linux machine, it usually occurs when it performs a reverse lookup on your IP address... Have you set any dns servers, e.g google dns (8.8.8.8, 8.8.4.4)? This may in fact be a totally different issue, ofc, just trying to help.
Interesting, you may be right. We had googles one set for some reason... will change and update.

Re: CLOUD CORE ROUTER

Posted: Mon Apr 22, 2013 12:13 pm
by nick3dos
Hello

I just get my new CCR1016-12G.
I have installed 6.0rc13 version.

I made my hotspot just like i had it before with RB1100AH v.5.24.
Everything works fine but in ip -> hotspot -> active, i can't see any traffic on Tx Rate collum

Anybody knows why is this happening???

Re: CLOUD CORE ROUTER

Posted: Wed Apr 24, 2013 3:19 am
by louisg
We're running our core infrastructure with a CCR1016-12G.

Certainly recommend this to anyone that is looking at replacing or upgrading core devices.

Mikrotik get a +1 for this.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 24, 2013 7:03 pm
by athlonxp78
We're running our core infrastructure with a CCR1016-12G.

Certainly recommend this to anyone that is looking at replacing or upgrading core devices.

Mikrotik get a +1 for this.
What versión of RouterOS you are using? 100% Stable?

Re: CLOUD CORE ROUTER

Posted: Wed Apr 24, 2013 11:04 pm
by coombes69
We are now using a CCR-1036 as our firewall/internet gateway and we are very impressed

We have 2000 users with 5-600 concurrent on a 100mb WAN and 250 firewall rules, 20 NAT rules, 20 mangle rules, OSPF, PBR to caching box and PPTP VPN

10 PCQ Queues

I have to say that for the money this device is amazing obviously the feature set is great as all mikrotik devices carry the same features but with 500 concurrent users and hundreds of PCQ connections the highest CPU load i have seen is 3%

I know this is probably overkill for our setup but its still substantially cheaper than other firewalls on the market.

This has been running RC13 for 2 weeks now with only a slight glitch with queueing that was down to config and a reboot resolved it.

+1 to mikrotik.

Re: CLOUD CORE ROUTER

Posted: Wed Apr 24, 2013 11:36 pm
by regardtv
Unfortunately, No. You can not restart service or process. All you can is disable/enable queues or restart router itself.
A couple of times a day I wish I had the 'devel' login to be able to kick some services in the balls and just restart them. SNMP is one I specifically wish I could restart - but alas ;-)

Re: CLOUD CORE ROUTER

Posted: Fri Apr 26, 2013 7:05 am
by donny
I am using CCR1016-12G OS version 6.0rc13,
Sometime list in simple queue and queue tree are disappeared. And at the same time SNMP error too.
After reboot, everything back to normal, but after few hour, its happen again.

Re: CLOUD CORE ROUTER

Posted: Fri Apr 26, 2013 11:21 pm
by inSaNo
Today I've ordered a CCR1016-12G (via my local reseller) for one of my customers.
I can't wait to get my hands on it.. I'll be implementing it at a new colocation site. :D

Re: CLOUD CORE ROUTER

Posted: Mon Apr 29, 2013 4:46 pm
by etorla
The SNMP is not found properly. I need reboot the Cloud Core every days.

I have ccr1016-12G with V6.0rc13

Thanks

Re: CLOUD CORE ROUTER

Posted: Thu May 02, 2013 5:37 pm
by hero12
[16:32:00] spinka8: I was using CCR36 about 3 days -firewall/queue/pppoe+dynamic queue/radius/linux+mysql+ssh-->mikrotik and it worked perfect. 3% CPU 200/200 Mbps. One problem appearded with the queues which disappeared when I activated them for the first time. Good job Mikrotik :)

CLOUD CORE ROUTER

Posted: Thu May 02, 2013 8:39 pm
by GhostWorks
We are now using a CCR-1036 as our firewall/internet gateway and we are very impressed

We have 2000 users with 5-600 concurrent on a 100mb WAN and 250 firewall rules, 20 NAT rules, 20 mangle rules, OSPF, PBR to caching box and PPTP VPN

10 PCQ Queues

I have to say that for the money this device is amazing obviously the feature set is great as all mikrotik devices carry the same features but with 500 concurrent users and hundreds of PCQ connections the highest CPU load i have seen is 3%

I know this is probably overkill for our setup but its still substantially cheaper than other firewalls on the market.

This has been running RC13 for 2 weeks now with only a slight glitch with queueing that was down to config and a reboot resolved it.

+1 to mikrotik.
Thanks for your info it does look very impressive , I'm considering it for my network , it's not a huge network but my current draytek vigor3900 is at 67% CPU load and have had several issues , looking at this forum which it's progress in resolving issues and RC every 2-4 weeks looks very promising ...

Over kill yes , but we all like our over kill , or fast cars wouldn't exist

Re: CLOUD CORE ROUTER

Posted: Thu May 02, 2013 10:01 pm
by acemesh
Hi,

For a wireless ISP ( with radius backend ) , how many concurrent sessions might 1016-12G and 1036-12G support?
If I get 2, will it be easier to load balance them ?


Thanks,

Re: CLOUD CORE ROUTER

Posted: Fri May 03, 2013 9:34 am
by otgooneo
Hi,

For a wireless ISP ( with radius backend ) , how many concurrent sessions might 1016-12G and 1036-12G support?
If I get 2, will it be easier to load balance them ?


Thanks,
We have 3 CCR1036 but not load balancing, just 3 separate networks. As I know one is CPU is max=3%, when 270 active users, 12 firewall filter rules, 32 NAT rules, 5 mangle rules, 4 static simple queues. Uses FreeRadius for AAA and PPPoE clients don`t have MPPE encoding. I believe if u use encoding, it will eat much more CPU. It works without any critical issue. Sometimes console freezes (crashes). Console become alive after do supout command or wait some hours.

The load balancing is simple, just start start exactly same hardware with exactly same ROS and configuration. It should do load balancing. I heard it from this forum. But don`t remember links.

Re: CLOUD CORE ROUTER

Posted: Mon May 06, 2013 12:18 pm
by SwissWISP
Are there any plans to make the BGP process multi processor capable?

Re: CLOUD CORE ROUTER

Posted: Tue May 07, 2013 3:32 pm
by jriera
Are there any plans to make the BGP process multi processor capable?
+1!! Any news about it?

Re: CLOUD CORE ROUTER

Posted: Thu May 09, 2013 3:05 pm
by paoloaga
Are there any plans to make the BGP process multi processor capable?
+1!! Any news about it?
I am using a CCR-1036 with 3 peers with a full view and as a route-reflector for ~50 RR clients. One core is constantly at 100% CPU and BGP updates are very slow. Hope it can be parallelized.

Re: CLOUD CORE ROUTER

Posted: Fri May 10, 2013 11:15 am
by nick3dos
Even with the new update, i can't yet see any traffic in Hotspot's Tx Rate collum

Anyone else the same problem?
Any ideas???

Re: CLOUD CORE ROUTER

Posted: Fri May 17, 2013 1:36 pm
by maxwellnina
hi nick3dos
one question how did you set your hotspot config??
just hope you didn't backup your old config and then put it on the new hardware/upgrade soft?
because I suffered this issue while upgrading ROS every time.
to solve this issue I made an export compact then after for example upgrade to (v6-rc13 or v6-rc14) i did a reset
and then i use my compact file to reconfigure the box now everything (Tx/Rx) are displaying like a charm

Re: CLOUD CORE ROUTER

Posted: Fri May 17, 2013 1:50 pm
by sguox
maybe a standardised rj45 console port same as the RB2011?

Re: CLOUD CORE ROUTER

Posted: Fri May 17, 2013 2:12 pm
by nick3dos
hi nick3dos
one question how did you set your hotspot config??
just hope you didn't backup your old config and then put it on the new hardware/upgrade soft?
because I suffered this issue while upgrading ROS every time.
to solve this issue I made an export compact then after for example upgrade to (v6-rc13 or v6-rc14) i did a reset
and then i use my compact file to reconfigure the box now everything (Tx/Rx) are displaying like a charm
Hello

I made every setting from the beggining
with the RB1100AH 5.24 i had before, everything was working great.
Now exept this, i have more problems, in my mangle rules, and disconnections of winbox

Not working as it should be... :?

CLOUD CORE ROUTER

Posted: Mon May 20, 2013 6:06 pm
by GhostWorks
I've just ordered a CCR1036-12g-4s, hopefully my vigor 120's Adsl to Ethernet modems are best companion for it

I believe my ISP on all 3 Adsl lines use Fujitsu DSLAM
ImageUploadedByTapatalk1369062351.149300.jpg

Re: CLOUD CORE ROUTER

Posted: Tue May 21, 2013 9:34 am
by Begetan
CPU utilisation with 4 BGP full view
http://www.youtube.com/watch?v=XJ7qQCJI8pA

Could anyone provide informaion about routing latency when runing BGP full view?

The main target for CCR is BGP world, but we need beter optimization for it.

Re: CLOUD CORE ROUTER

Posted: Tue May 21, 2013 2:08 pm
by honzam
What you mean in the name --> -EM ?

http://routerboard.com/CCR1036-12G-4S-EM

Re: CLOUD CORE ROUTER

Posted: Tue May 21, 2013 2:15 pm
by normis
What you mean in the name --> -EM ?

http://routerboard.com/CCR1036-12G-4S-EM
"Extra Memory". Comes with 2x8GB modules

Re: CLOUD CORE ROUTER

Posted: Wed May 22, 2013 2:01 pm
by raz
Why 16 GB RAM?

Re: CLOUD CORE ROUTER

Posted: Wed May 22, 2013 4:11 pm
by simpl3x
hello mikrotik team,
Is the problem solved for Ticket#2013020666001015? we had to remove the device from the production and could not further diagnose the problem, since the problem on the test bench do not reproduce.

Re: CLOUD CORE ROUTER

Posted: Wed May 22, 2013 4:12 pm
by normis
Why 16 GB RAM?
Why not?

Re: CLOUD CORE ROUTER

Posted: Wed May 22, 2013 4:22 pm
by Attila
Dear Normis!

Sorry about the duplicate post.
Multicast routing (PIM-SM) same source to different interface still doesn't work in CCR1036.
Same ROS version and same configuration (1. RP, 3. Interface) work like a charm in RB2011.

Please check out the problem.

Attila

Re: CLOUD CORE ROUTER

Posted: Wed May 22, 2013 10:40 pm
by chapex
Why 16 GB RAM?
Why not?
:lol:

Re: CLOUD CORE ROUTER

Posted: Wed May 22, 2013 11:09 pm
by Shkrid
I tried to make EoIP tunnel from CCR1036 to RB750GL.
Set keepalive interval 10s, but link state("R") is incorrect when i disable/enable EoIP interface on both sides.
Keepalive interval on EoIP tunnel from RB750GL to RB750GL seems to work fine.
Can you fix this on CCR1036?

Has anybody else have this problem?

Re: CLOUD CORE ROUTER

Posted: Thu May 23, 2013 4:06 pm
by BulliteShot
Why 16 GB RAM?
Why not?
I like this guy :)

I got the CCR1036-12G-4S yesterday. I've been playing around with it in winbox for a few hours and I love everything about it. Using BGP routing which I will find out the performance within the next few weeks.

I'm pretty much a noob when it comes to routers. My data centre wanted me to spend over €18,000 on a juniper router. I was going to resort to using Vyetta but then came across this baby.

In the future I'm going to buy a second one and setup VRRP for redundancy.

Re: CLOUD CORE ROUTER

Posted: Thu May 23, 2013 4:10 pm
by normis
Nice! Let us know if you ever need help with configuration.

Re: CLOUD CORE ROUTER

Posted: Thu May 23, 2013 10:58 pm
by biasottocarvalho
Could someone provide me rc14 for CCR1016-12g?

Re: CLOUD CORE ROUTER

Posted: Fri May 24, 2013 1:52 am
by biasottocarvalho
Even with the new update, i can't yet see any traffic in Hotspot's Tx Rate collum

Anyone else the same problem?
Any ideas???
Hello,
Could make the file available for CCR1016-12g Version RC14?
thank you,

Re: CLOUD CORE ROUTER

Posted: Fri May 24, 2013 9:42 am
by coffeecoco
So...... tell me.... why did you even call this a Cloud Core Router?

I WANT x86_64 ROS So i can RUN KVM 64bit.........



no one uses 32bit......

Re: CLOUD CORE ROUTER

Posted: Sat May 25, 2013 3:45 am
by biasottocarvalho
Could someone provide me rc14 for CCR1016-12g?

Re: CLOUD CORE ROUTER

Posted: Sat May 25, 2013 6:14 am
by Ivoshiee
So...... tell me.... why did you even call this a Cloud Core Router?
Marketing? Cloud is a buzzword, it will sell whatever box you stick that label on. ;)

Re: CLOUD CORE ROUTER

Posted: Sat May 25, 2013 12:14 pm
by honzam
Could someone provide me rc14 for CCR1016-12g?
http://download2.mikrotik.com/routeros/ ... .0rc14.npk

Re: CLOUD CORE ROUTER

Posted: Sat May 25, 2013 2:21 pm
by simpl3x
board-name: CCR1036-12G-4S
version: 6.0

7 February we opened the request [Ticket # 2013020666001015]. At that time was RouterOS 6.0R7. We had two units. One of them worked fine, another was freezing every 3-4 hours. We were forced to remove it from service after 1 mounth of work mikrotik support and wait for a stable version. Now, on the device that working normally they appeared increased load cover those symptoms. We have changed the firmware to 6.0 stable and the device continues to freeze up every 1-1.5 days. We configured watchdog, but at the moment of freez it does not work, ie the device itself like works, but the routing and management is not available. As a result, we have two devices that do not work properly when a load of about 300-400 Mbit\s with IPoE, Nat, BGP (1 default route) and 2 GRE tunnels. We would like to know whether Mikrotik plans to finally release a stable version, or indeed it will continue to sell devices that do not work. Or for an answer we need to come to Moscow MUM?

Re: CLOUD CORE ROUTER

Posted: Sun May 26, 2013 7:03 pm
by macgaiver
board-name: CCR1036-12G-4S
version: 6.0

7 February we opened the request [Ticket # 2013020666001015]. At that time was RouterOS 6.0R7. We had two units. One of them worked fine, another was freezing every 3-4 hours. We were forced to remove it from service after 1 mounth of work mikrotik support and wait for a stable version. Now, on the device that working normally they appeared increased load cover those symptoms. We have changed the firmware to 6.0 stable and the device continues to freeze up every 1-1.5 days. We configured watchdog, but at the moment of freez it does not work, ie the device itself like works, but the routing and management is not available. As a result, we have two devices that do not work properly when a load of about 300-400 Mbit\s with IPoE, Nat, BGP (1 default route) and 2 GRE tunnels. We would like to know whether Mikrotik plans to finally release a stable version, or indeed it will continue to sell devices that do not work. Or for an answer we need to come to Moscow MUM?
:) You most definitely need to come to MUM Moscow!! It will be fun.
But think realistically - they will not be able to solve all your problems there, you still need to do it the usual way - problem description, debug logs, supout.rif files, serial console printouts and maybe even full access to problematic board.

before that you can check what is minimal necessary configuration to repeat the problem, by narrowing it down.

Re: CLOUD CORE ROUTER

Posted: Sun May 26, 2013 7:45 pm
by simpl3x
But think realistically - they will not be able to solve all your problems there, you still need to do it the usual way - problem description, debug logs, supout.rif files, serial console printouts and maybe even full access to problematic board.
all that we do, but we can not keep our customers on such equipment, we had to replace it with the x86 platform. on the test bench we have no problems on the actual traffic is present. all features minimal for us.
we can not do the actual supout file because:
1. if we restart it by snmp, it is not automatically created.
2. if restarts on its watchdog file is not created too, though in the settings:
watch-address: 8.8.8.8
    watchdog-timer: yes
     no-ping-delay: 5m
  automatic-supout: yes
  auto-send-supout: no
Now, we can't provide access through the console, because at the moment of the freeze access to all the devices out there is lost.
We would be glad to help, but how?
and we want other people to think before buying a CCR because ROS stable version and like it can be run in production, but it is actually not so good as said vendors.

Re: CLOUD CORE ROUTER

Posted: Tue May 28, 2013 8:03 am
by Masyanich
Another problem.I want to redirect iptv to the pptp user .Adding user manually is not a problem, and TV works.

Image

BUT! If the user turns off and on, the interface is not added automatically, I see a message "unknown interface" (but the user is connected and name of the connection is the same ), and nothing works. How to fix it?

Image

Re: CLOUD CORE ROUTER

Posted: Tue May 28, 2013 8:10 am
by Masyanich
++++++


:log info "///---->backup"
:global backupfile ([/system identity get name]. ".backup")
:if ([/file find name=$backupfile] != "") do={/file rem $backupfile}
:delay 5s
:global logMessages;
:set logMessages ""
:foreach i in=[/log find ] do={
:set logMessages ($logMessages. [/log get $i time ]. " ");
:set logMessages ($logMessages. [/log get $i message ]);
:set logMessages ($logMessages. "\n") }
:delay 5s
/system backup save name=$backupfile
:delay 10s
/tool e-mail send server=74.125.143.108 port=587 user= USER password=PASSWORD tls=yes to=USER@gmail.com from=USER@gmail.com subject=Backup file=$backupfile body=("Name ". [/system identity get name]. ". \n done: ". [/system clock get time]. " ". \ [/system clock get date]. " \n____________________\n \n Uptime: ". [/system resource get uptime]. "\n free memory: ". [/system resource get free-memory]. " from ". [/system resource get total-memory]. " kb. \n Free space: ". [/system resource get free-hdd-space]. " from ". [/system resource get total-hdd-space]. " kb. \n bad blocks: ". [/system resource get bad-blocks]. " %. \n CPU USE: ". [/system resource get cpu-load]. " % \n____________________\n \n log: \n \n". $logMessages. " \n____________________ \n". [/system identity get name])
:log info "///----> mail"
:delay 20s
/file remove $backupfile
:log info "///---->done"
/file remove $backupfile


this script worked perfectly in version 5x and 6RC up to 13
But in the last RC and the final version 6, it simply does not work, even in the log is empty, when it started the counter says that the script is done, but in fact no action.

WTF?

Re: CLOUD CORE ROUTER

Posted: Tue May 28, 2013 1:20 pm
by simpl3x
Another problem.I want to redirect iptv to the pptp user .Adding user manually is not a problem, and TV works.

Image

BUT! If the user turns off and on, the interface is not added automatically, I see a message "unknown interface" (but the user is connected and name of the connection is the same ), and nothing works. How to fix it?

Image
if pptp-IgorVPN dynamic interface, you need create static entry in PPP - Interface + PPTP Server for this User (Secret), and use this interface in igmp-proxy

Re: CLOUD CORE ROUTER

Posted: Tue May 28, 2013 1:29 pm
by normis
++++++


:log info "///---->backup"
:global backupfile ([/system identity get name]. ".backup")
:if ([/file find name=$backupfile] != "") do={/file rem $backupfile}
:delay 5s
:global logMessages;
:set logMessages ""
:foreach i in=[/log find ] do={
:set logMessages ($logMessages. [/log get $i time ]. " ");
:set logMessages ($logMessages. [/log get $i message ]);
:set logMessages ($logMessages. "\n") }
:delay 5s
/system backup save name=$backupfile
:delay 10s
/tool e-mail send server=74.125.143.108 port=587 user= USER password=PASSWORD tls=yes to=USER@gmail.com from=USER@gmail.com subject=Backup file=$backupfile body=("Name ". [/system identity get name]. ". \n done: ". [/system clock get time]. " ". \ [/system clock get date]. " \n____________________\n \n Uptime: ". [/system resource get uptime]. "\n free memory: ". [/system resource get free-memory]. " from ". [/system resource get total-memory]. " kb. \n Free space: ". [/system resource get free-hdd-space]. " from ". [/system resource get total-hdd-space]. " kb. \n bad blocks: ". [/system resource get bad-blocks]. " %. \n CPU USE: ". [/system resource get cpu-load]. " % \n____________________\n \n log: \n \n". $logMessages. " \n____________________ \n". [/system identity get name])
:log info "///----> mail"
:delay 20s
/file remove $backupfile
:log info "///---->done"
/file remove $backupfile


this script worked perfectly in version 5x and 6RC up to 13
But in the last RC and the final version 6, it simply does not work, even in the log is empty, when it started the counter says that the script is done, but in fact no action.

WTF?
change tls=yes to start-tls=yes

Re: CLOUD CORE ROUTER

Posted: Tue May 28, 2013 2:31 pm
by Masyanich
simpl3x, normis, thanks! All my problems are solved :-P :-P :-P

Re: CLOUD CORE ROUTER

Posted: Tue May 28, 2013 11:00 pm
by bryans2k
V6.0 GA

Anyone else have a problem of routing not updating on a bridge if you enable/add/disable routes after reboot?

The routes will work if I reboot the CCR but will not take effect if I add/enable/disable them while it's running.

Bryan

Re: CLOUD CORE ROUTER

Posted: Wed May 29, 2013 11:56 am
by thehoff
I assume as this thread has really slowed down as most people are not having as many issues with CCR's since RC12?

Looking to put a pair of CCR's into a production environment in the next week. 2 BGP feeds to each. iBGP between them. Handful of firewall rules and a few policy routes. I have had RB1100's in last year but removed them for Junipers, biggest mistake I have made...

Re: CLOUD CORE ROUTER

Posted: Wed May 29, 2013 12:34 pm
by SwissWISP
I assume as this thread has really slowed down as most people are not having as many issues with CCR's since RC12?

Looking to put a pair of CCR's into a production environment in the next week. 2 BGP feeds to each. iBGP between them. Handful of firewall rules and a few policy routes. I have had RB1100's in last year but removed them for Junipers, biggest mistake I have made...
My tests showed that the CCRs run quite stable as BGP routers with just some firewall rules to protect them self. But the BGP performance isn't that good at the moment. If you don't need very fast convergence of multiple full tables it's ok, but for us they are to slow with just one core running BGP.

- Mat

Re: CLOUD CORE ROUTER

Posted: Thu May 30, 2013 6:00 am
by thehoff
we had some RB1200's before, so single core at 700mhz i think they are? New ones are 1.2G so I should actually see an improvement in BGP.

I do appreciate the heaps up on the BGP convergence times, it is an issue with the RB but they will still be faster than what I have now (juniper) and what I had previously in the RB1200 :)

Re: CLOUD CORE ROUTER

Posted: Thu May 30, 2013 8:24 pm
by rogeriodj
What is this shit? On my X86 with Ros 5:25 have no problem, since that shit CCR does not work nothing to pay, OSPF error, high throughput, ta difficult. Pack or stop doing shit!

Re: CLOUD CORE ROUTER

Posted: Fri May 31, 2013 12:14 pm
by Bitto
Any updates on Uneven CPU usage and speed of BGP process?
It should be fixed if this is a cloudcore router and BGP is the integral part of it also this router with 36 core should be faster at routing process.
So far it is good on queue's and firewall i will test ddos filters and post the results soon.

Re: CLOUD CORE ROUTER

Posted: Fri May 31, 2013 12:37 pm
by thehoff
I just got my two CCR1016's today.

Anyone else noticed they whistle? Sounds like the buzzer on very low power... odd.

Re: CLOUD CORE ROUTER

Posted: Fri May 31, 2013 12:38 pm
by normis
I just got my two CCR1016's today.

Anyone else noticed they whistle? Sounds like the buzzer on very low power... odd.
Experiment with fan settings, it could be a fan speed resonating

Re: CLOUD CORE ROUTER

Posted: Fri May 31, 2013 5:23 pm
by jarosoup
Yes, I've noticed some odd high-pitched sounds on our new 1036 that occur right before the fan starts to spin up (after being off and cool for awhile) and during reboots. Hard to explain, but steps/ticks with a high frequency then it ramps up in sound and the fan kicks in. Once the unit has been running and the fan is on there is nothing more than fan noise. Is this normal?

Re: CLOUD CORE ROUTER

Posted: Sat Jun 01, 2013 11:40 am
by Begetan
Hello all!

I am running now border on RB1100AHx2 with two Fast Ethernet uplinks. Using simple BGP settings and NAT rules. I have a plan to go to gigabit uplinks with full BGP tables. So I am interesting in CCR.

There is a one question to Normis - are your going to make BGP process multicore compatible?

Second question about CCR performance with full BGP onload. Is routing procces works fine during BGP establishing full view? It's not a problem to wait full table, but there is a problem if qustomers will have bad latency until BGP work completed. Is routing process works fine after table loading has completed?

Last question is it possible to setup 2xFull View on my RB1100 with 2 Gb RAM? Trafic about 100-150 Mbit, cpu up to 40-60%. I need temporary solution to wait for first and second questions :)

CLOUD CORE ROUTER

Posted: Sat Jun 01, 2013 5:06 pm
by GhostWorks
Yes, I've noticed some odd high-pitched sounds on our new 1036 that occur right before the fan starts to spin up (after being off and cool for awhile) and during reboots. Hard to explain, but steps/ticks with a high frequency then it ramps up in sound and the fan kicks in. Once the unit has been running and the fan is on there is nothing more than fan noise. Is this normal?
Same here , I believe it's the norm

Re: CLOUD CORE ROUTER

Posted: Sun Jun 02, 2013 6:10 pm
by Ivoshiee
Yes, I've noticed some odd high-pitched sounds on our new 1036 that occur right before the fan starts to spin up (after being off and cool for awhile) and during reboots. Hard to explain, but steps/ticks with a high frequency then it ramps up in sound and the fan kicks in. Once the unit has been running and the fan is on there is nothing more than fan noise. Is this normal?
Same here , I believe it's the norm
If it has internal beeper then maybe it is a POST sound. You can turn off the internal beeper and check if the noise is there or not:
/system routerboard settings
set silent-boot=yes

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 9:15 am
by morf
Hello! CCR1036 works as a PPTP server and the shaper.
Used shaper queue tree & queue simple & marking rules.
Version ROS 6.1rc1 May/30/2013 09:54:26
1. Very high processor load, with little traffic. (200 Mbps)
2. winbox disappear in queue Simple Rules
3. Badly working shaper queue tree / queue simple
4. Very slow access through winbox under load.

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 9:40 am
by morf
CCR 1036.
Version ROS 6.1rc1 May/30/2013 09:54:26
Use queue simple with packet mark and PCQ. Very strange behavior shaper. Subscribers complain about the speed.

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 12:22 pm
by morf
Comments?

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 12:38 pm
by mishaM
Hi dear Mikrotik team ,
i have problem on CCR1036 with routeros v6.0 ,
after 17 ~ 18 hour working managment is died (cannot connect via winbox , telnet , ssh , and api ) works only mac telnet , also dies MPLS , static routes works strangely , some times die . memory use stability is very hesitant,

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 2:29 pm
by morf
Dear mikrotik!
Will there be any changes in the a tree queue with marking rules of traffic?
Dynamically created rules in the tree queue are working properly, but more complex with marking rules of traffic work very badly.

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 3:48 pm
by macgaiver
Do not use target=0.0.0.0/0 - it is wrong - your queue doesn't know what is target upload and what is target download

specify your client subnet as target.

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 4:02 pm
by morf
Do not use target=0.0.0.0/0 - it is wrong - your queue doesn't know what is target upload and what is target download

specify your client subnet as target.
I replaced it on the IP address. Nothing has changed.
I was more interested in queue tree, that did not work as it should.
PS: Могу ли я с Вами пообщаться через какой - нибудь мессенджер icq/skype, если это удобно, конечно.

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 7:39 pm
by dcs
Is there a design or support life stated for this hardware, I'm looking for 5+ years?
Thanks

Re: CLOUD CORE ROUTER

Posted: Mon Jun 03, 2013 9:04 pm
by promind
Same problem with queue simple dynamic created rules and queue tree static rules(disabled by the way).
After some time queues disappear( day/day and a half ).
Traffic load is ~250Mbps peak. CPU load is 8-15%.
OSPF performance is slower than on x86 hardware.
Running version is 6.1rc1 on CCR-1036-4S.
It would be nice these bugs to be fixed ASAP. It's just annoying...

Re: CLOUD CORE ROUTER

Posted: Tue Jun 04, 2013 9:39 am
by SwissWISP
[...]
There is a one question to Normis - are your going to make BGP process multicore compatible?
+1 on this question
Second question about CCR performance with full BGP onload. Is routing procces works fine during BGP establishing full view? It's not a problem to wait full table, but there is a problem if qustomers will have bad latency until BGP work completed. Is routing process works fine after table loading has completed?
I can't tell what happens if you have several hundred Mbps running over the CCR. But with low traffic you won't see higher latency than normal, because the other cores take the load of the traffic. I expect you will not see higher latency until all cores run on higher load, but like I wrote above, I never tested it with that much of load.

Re: CLOUD CORE ROUTER

Posted: Tue Jun 04, 2013 11:55 am
by Bitto
Any updates on multicore BGP process? Are there any plans for this in mikrotik HQ?

Re: CLOUD CORE ROUTER

Posted: Tue Jun 04, 2013 2:41 pm
by DirectX9
hello Normis
And what is the latest firmware for CCR1036-12G-4S?
Can I download the 3.08 (tilegx-3.08.fwf) from the routerboard.com from model with 16Gbites on the board?

Already done. it works.

Re: CLOUD CORE ROUTER

Posted: Tue Jun 04, 2013 5:39 pm
by mishaM
Hi dear Mikrotik team ,
i have problem on CCR1036 with routeros v6.0 ,
after 17 ~ 18 hour working managment is died (cannot connect via winbox , telnet , ssh , and api ) works only mac telnet , also dies MPLS , static routes works strangely , some times die . memory use stability is very hesitant,
I downgrade router to RouterOS v6.0rc14 and same problem , also downgrade to v6.0rc12 , same situation :(

somebody can advice me some old and stable routeros version , which can't have it problems ?

Re: CLOUD CORE ROUTER

Posted: Tue Jun 04, 2013 11:21 pm
by coltaan
Hi dear Mikrotik team ,
i have problem on CCR1036 with routeros v6.0 ,
after 17 ~ 18 hour working managment is died (cannot connect via winbox , telnet , ssh , and api ) works only mac telnet , also dies MPLS , static routes works strangely , some times die . memory use stability is very hesitant,
I downgrade router to RouterOS v6.0rc14 and same problem , also downgrade to v6.0rc12 , same situation :(

somebody can advice me some old and stable routeros version , which can't have it problems ?
I had several problems with mpls, bgp based vpls, TE interfaces, pppoe server with simple queues and much more with all versions of rc and table version.
All of them are working fine for me now, router uptime is more than six days.
I made a downgrade to v6rc14 (from v6.0 stable), configuration reset and upgraded my ccr to v6.0 stable.
I made a brand new configuration for all of used services, and tada..it's working.
Why? I don't know. ;-)

Re: CLOUD CORE ROUTER

Posted: Wed Jun 05, 2013 1:56 pm
by mishaM
Hi dear Mikrotik team ,
i have problem on CCR1036 with routeros v6.0 ,
after 17 ~ 18 hour working managment is died (cannot connect via winbox , telnet , ssh , and api ) works only mac telnet , also dies MPLS , static routes works strangely , some times die . memory use stability is very hesitant,
I downgrade router to RouterOS v6.0rc14 and same problem , also downgrade to v6.0rc12 , same situation :(

somebody can advice me some old and stable routeros version , which can't have it problems ?
I had several problems with mpls, bgp based vpls, TE interfaces, pppoe server with simple queues and much more with all versions of rc and table version.
All of them are working fine for me now, router uptime is more than six days.
I made a downgrade to v6rc14 (from v6.0 stable), configuration reset and upgraded my ccr to v6.0 stable.
I made a brand new configuration for all of used services, and tada..it's working.
Why? I don't know. ;-)
yesterday i downgrade on v6.0rc9 and same situation :( i migrate configuration from 1100axh2 , If a configuration reset (to stock) and then upgrade to last firmware revision helps this problem, I will perform it. I'm just saying it, because configuration is big and I need to know if it will work, for my work not to be in vain.

Re: CLOUD CORE ROUTER

Posted: Wed Jun 05, 2013 2:01 pm
by HaPe
How much will cost CCR with 10G SFP+ ports?

Re: CLOUD CORE ROUTER

Posted: Thu Jun 06, 2013 8:30 am
by morf
After 2 days of CCR1036 (ROS 6.1) was very buggy through winbox management, as well as turn off pptp session of my subscribers to a timeout.

Re: CLOUD CORE ROUTER

Posted: Thu Jun 06, 2013 9:27 am
by mishaM
15 minutes ago i had the same problem with 6.1 rc1 , there was a problem with mac telnet too, and all routes were dead.

here is the support.rif for this situation
MemTotal:        4064256 kB
MemFree:         3311936 kB
Buffers:               0 kB
Cached:            92160 kB
SwapCached:            0 kB
Active:            53888 kB
Inactive:          72768 kB
Active(anon):      39040 kB
Inactive(anon):      256 kB
Active(file):      14848 kB
Inactive(file):    72512 kB
Unevictable:        4480 kB
Mlocked:            4480 kB
SwapTotal:             0 kB
SwapFree:              0 kB
Dirty:              2560 kB
Writeback:             0 kB
AnonPages:         40960 kB
Mapped:            19328 kB
Shmem:               832 kB
Slab:             517888 kB
SReclaimable:      80832 kB
SUnreclaim:       437056 kB
KernelStack:       15744 kB
PageTables:        12416 kB
NFS_Unstable:          0 kB
Bounce:                0 kB
WritebackTmp:          0 kB
CommitLimit:     2032128 kB
Committed_AS:      99520 kB
VmallocTotal:    4194304 kB
VmallocUsed:      235264 kB
VmallocChunk:    3873984 kB
HugePages_Total:       0
HugePages_Free:        0
HugePages_Rsvd:        0
HugePages_Surp:        0
Hugepagesize:      16384 kB
CPU
cpu count	: 36
cpu list	: 0-35
model name	: tilegx

Re: CLOUD CORE ROUTER

Posted: Sat Jun 08, 2013 5:12 pm
by infused
I really hope the switch performs better guys. Already have them on order.

Re: CLOUD CORE ROUTER

Posted: Wed Jun 19, 2013 9:20 am
by szastan
Hello,

yesterday I received first CCR-1016-12G, and I've instantly saw one bug. Unit was configured with BGP (iBGP + OSPF) full mesh, two interfaces (eth1, eth2) connected. After performing reboot, unit is constantly rebooting, what I can see is that interfaces on switch it's connected to are turning on and off (10 sec cycle), and CCR on display shows "routerboard configuration", then for part of a second "loading kernel from nand", then display is off and everything starts over. When I turn off interfaces on switch, or pull out cables, it starts fine. Did any of you had such situation? RoS is 6.1.

Re: CLOUD CORE ROUTER

Posted: Wed Jun 19, 2013 1:20 pm
by rogeriodj
Hello,

yesterday I received first CCR-1016-12G, and I've instantly saw one bug. Unit was configured with BGP (iBGP + OSPF) full mesh, two interfaces (eth1, eth2) connected. After performing reboot, unit is constantly rebooting, what I can see is that interfaces on switch it's connected to are turning on and off (10 sec cycle), and CCR on display shows "routerboard configuration", then for part of a second "loading kernel from nand", then display is off and everything starts over. When I turn off interfaces on switch, or pull out cables, it starts fine. Did any of you had such situation? RoS is 6.1.
That along with the RB system 6.xx, do not pay even this much proven that can not afford to use any CCR in production!

Re: CLOUD CORE ROUTER

Posted: Fri Jun 21, 2013 9:24 am
by Jetrider
Hi dear Mikrotik team ,
i have problem on CCR1036 with routeros v6.0 ,
after 17 ~ 18 hour working managment is died (cannot connect via winbox , telnet , ssh , and api ) works only mac telnet , also dies MPLS , static routes works strangely , some times die . memory use stability is very hesitant,
I downgrade router to RouterOS v6.0rc14 and same problem , also downgrade to v6.0rc12 , same situation :(

somebody can advice me some old and stable routeros version , which can't have it problems ?

I have been whining about this for ages. Spent 2 months sending them supout files to MT, rebooted working environment device every second day and got my arse kicked by them bowses of mine. No cookie. My experience with resolution of this was not a happy one, I just got tired of all this. v6 is a huge disappointment so far. Ceiling cat is not amused, me neither.

Re: CLOUD CORE ROUTER

Posted: Sat Jun 22, 2013 5:29 pm
by brianlewis
Same problem here with RouterOS 6.0rc and v6.1 on CCR1036, no rhyme or reason why it stops passing traffic after XX # of hours. Seems to be related to BGP because units I have deployed without any BGP work fine for basic firewall.
Hi dear Mikrotik team ,
i have problem on CCR1036 with routeros v6.0 ,
after 17 ~ 18 hour working managment is died (cannot connect via winbox , telnet , ssh , and api ) works only mac telnet , also dies MPLS , static routes works strangely , some times die . memory use stability is very hesitant,
I downgrade router to RouterOS v6.0rc14 and same problem , also downgrade to v6.0rc12 , same situation :(

somebody can advice me some old and stable routeros version , which can't have it problems ?

I have been whining about this for ages. Spent 2 months sending them supout files to MT, rebooted working environment device every second day and got my arse kicked by them bowses of mine. No cookie. My experience with resolution of this was not a happy one, I just got tired of all this. v6 is a huge disappointment so far. Ceiling cat is not amused, me neither.

Re: CLOUD CORE ROUTER

Posted: Tue Jun 25, 2013 10:28 am
by normis
Jetrider: Our last email to you was in March, you did not reply. Did you try v6.1 ? If problem still happens, please update the ticket. Your number is 2013022566000258
mishaM: Have you contacted support?
brianlewis: Have you contacted support?

Re: CLOUD CORE ROUTER

Posted: Tue Jun 25, 2013 12:33 pm
by chemil
Hello Normis,

could you be so kind and check my ticket 2013060266000151 ?

It seems that I'm not alone with the stability problem of the new CCR and also problems regarding IPSec tunnels.

I'm sending supout file with detailed description almost every day however your support has stopped answering two weeks ago.

Thank you in advance

Re: CLOUD CORE ROUTER

Posted: Tue Jun 25, 2013 4:14 pm
by brianlewis
Jetrider: Our last email to you was in March, you did not reply. Did you try v6.1 ? If problem still happens, please update the ticket. Your number is 2013022566000258
mishaM: Have you contacted support?
brianlewis: Have you contacted support?
Yes Ticket # 2013030966000072 (yes thats 03/09/2013)

Re: CLOUD CORE ROUTER

Posted: Wed Jun 26, 2013 10:54 am
by Bitto
Guys,

Any news about CCR BGP multicore usage?
I am using our CCR 36 as a main router on an edge of a international fiber line i have %4 cpu usage normally but i notice 2.5% constant routing usage on profile coincides 100% usage of one core all the time. Will there be a fix for this soon and will this slowed down my router?

Thanks.

Re: CLOUD CORE ROUTER

Posted: Wed Jun 26, 2013 6:07 pm
by paoloaga
Guys,
Any news about CCR BGP multicore usage?
I am using our CCR 36 as a main router on an edge of a international fiber line i have %4 cpu usage normally but i notice 2.5% constant routing usage on profile coincides 100% usage of one core all the time. Will there be a fix for this soon and will this slowed down my router?
Thanks.
My setup with 3 peers with a full view takes up to 8 minutes to update routes. It's VERY VERY slow, and one core is constantly working at 100%.

Re: CLOUD CORE ROUTER

Posted: Thu Jun 27, 2013 12:44 pm
by YUJOBIKA
What happened with CCR1016-12G ? Is there anyone can help me please ?
CPU load below 40%, but my throughput so small because ping to 127.0.0.1 (itself) is bad :(
bad--ccr16.jpg

Re: CLOUD CORE ROUTER

Posted: Thu Jun 27, 2013 12:49 pm
by normis
ping to self is not a diagnostics method.

traffic could be slow because of traffic source.

Re: CLOUD CORE ROUTER

Posted: Thu Jun 27, 2013 1:08 pm
by YUJOBIKA
ping to self is not a diagnostics method.

traffic could be slow because of traffic source.

Usually ping to itself is a way for troubleshoot. I was using x86 Xeon before, and just try CCR16 for two weeks.
With x86, ping to itself always 0ms, even with CPU load above 50%.

Also I have RB1100AH with CPU above 40%. All working good with this one. Here my RB1100AH:
rb110ahx2.jpg
So only with CCR16 my network feel so bad :(

Re: CLOUD CORE ROUTER

Posted: Thu Jun 27, 2013 11:54 pm
by yarda
Could someone provide me rc14 for CCR1016-12g?
try: http://sys-data.com/mirror/6.x/

Re: CLOUD CORE ROUTER

Posted: Sat Jun 29, 2013 9:50 pm
by Bitto
ping to self is not a diagnostics method.

traffic could be slow because of traffic source.

Usually ping to itself is a way for troubleshoot. I was using x86 Xeon before, and just try CCR16 for two weeks.
With x86, ping to itself always 0ms, even with CPU load above 50%.

Also I have RB1100AH with CPU above 40%. All working good with this one. Here my RB1100AH:
rb110ahx2.jpg
So only with CCR16 my network feel so bad :(
Why is this happening? Ping it self should've always the best score until cpu reaches its limits (if you do not que the router it self lol) .. It must be software related issue a bug maybe?

Re: CLOUD CORE ROUTER

Posted: Mon Jul 01, 2013 11:27 pm
by crtee
Suffering from the same problem as mishaM and Jetrider here, already posted about a similar effect on the RouterOS 6.1 thread here. Shouldn't have been so optimistic, about two days after this post this bug hit me at 1:00am in the morning :-/. Replacing the unit with a RB1100AHx2 resolved the issue, at least for now.

Debugged it to the point that if you run MPLS and by the moment you enable redistribution for a VRF via BGP, then one core is constantly at 100% load and a few moments later routing completely stops working.

Also noticed that loading BGP full table between two RB1100AHx2s ist way faster than between two CCRs. And after days of poking around and just speculating: am I right with my estimation that all routing protocols are running in just one thread/process?

Anyways - despite all problems - Hardware is great, no question. But please get this damn routing process flying ;-)

PS: Oh, and my ticket number is 2013062466000243, just for the case ;-)

Re: CLOUD CORE ROUTER

Posted: Tue Jul 02, 2013 4:20 am
by nz_monkey
Debugged it to the point that if you run MPLS and by the moment you enable redistribution for a VRF via BGP, then one core is constantly at 100% load and a few moments later routing completely stops working.
Join the party :) http://forum.mikrotik.com/viewtopic.php?f=14&t=73820

Re: CLOUD CORE ROUTER

Posted: Tue Jul 02, 2013 4:47 pm
by krakenant
MikroTik,

I don't know what you have or haven't done, but the CloudCore is junk right now. We are running a hotspot with minimal firewall rules, a simple queue for each user based on a radius attribute and that's it. The unit is on 250Mbps fiber. The top image is from last night with the CCR, the bottom one is the previous Monday on a dual core X86 box. I did an upgrade to 6.1, reset the device to defaults and reconfigured it with our configuration script.

Last night, there was a negative correlation for users to bandwidth, IE we used less bandwidth as the number of users went up, which is both counter intuitive, and a very serious issue. I obviously can't leave our network in this state, so please let me know when you figure out what the bottleneck is and get it fixed.


Image

Re: CLOUD CORE ROUTER

Posted: Wed Jul 03, 2013 5:20 pm
by complete2006
And what should MT do with your info? Take out a crystal ball and try to see an bug???

Re: CLOUD CORE ROUTER

Posted: Wed Jul 03, 2013 11:29 pm
by krakenant
There is obviously something they haven't optimized yet that gets affected by having many users log into the device via the hotspot, whether that is NAT, Queues, etc.

They should be able to deduce where it still needs to be optimized to work with large amounts of users given they should know what has and has not been fully optimized to make use of the Tilera cores.

Calling it garbage was probably a bit harsh, I have been awaiting the release of the CCR since they announced it. We deal with large hotspot applications and this is an exciting product. The fact that they have gone through 13 release candidate versions and now are working on their second post production release and not everything on the CCR is optimized, is very dissapointing.

Re: CLOUD CORE ROUTER

Posted: Thu Jul 04, 2013 8:21 am
by complete2006
You are right.
Using CCR is something like lottery.

From my point of view: The idear of ccr is good but we need + 1 year to see a working Tilera optimized ROS on CCR. We made a lot of money by using mikrotik in the past because we could deliver internet for a good price. Nowadays times have changed. Small service interruptions cause a little "customer shit storm" because they think "internet must allways available". The worst thing is: They think the big ones will deliver the "always on internet" ...

Coming back to CCR: I thinking it over since weeks. Should I buy a known running Cisco ASR1000 or should I wait ??? I don't know. I will give CCR a chance and I will decide after summer ...

Re: CLOUD CORE ROUTER

Posted: Thu Jul 04, 2013 10:21 am
by manson
Cisco is stable as rock. Personally i'm using ASR 9006, and there was never any problem with it. If you have any choise, don't wait God only knows how long.

Re: CLOUD CORE ROUTER

Posted: Thu Jul 04, 2013 6:10 pm
by complete2006
I know. I use 7301 for BGP since years. MTs management is really nice and I don't like ciscos software update behavior (smart net). And between ASR and CCR are 10.000€ per item ...

Re: CLOUD CORE ROUTER

Posted: Mon Jul 08, 2013 12:09 pm
by manson
Ok, so buy cheaper but not working hardware. Personally I found no use for my two CCR at this stage. That's very disappointing, waste of money. :(

Re: CLOUD CORE ROUTER

Posted: Mon Jul 08, 2013 9:36 pm
by snons
And between ASR and CCR are 10.000€ per item ...
Well, perhaps for the ASR1002, but definitely not for a 9006, where you get the chassis for 9000$...

Re: CLOUD CORE ROUTER

Posted: Wed Jul 10, 2013 3:23 am
by IPANetEngineer
Cisco has its fair share of bugs that cause hiccups and downtime. The only difference is that Ciscos bugs tend to be more frequent with advanced features and not mainstream routing/switching. Mikrotik bugs more commonly show up in mainstream routing/switching

At least thats been my experience...ymmv

Re: CLOUD CORE ROUTER

Posted: Thu Jul 11, 2013 11:22 am
by x187
CCR1036-12G-4S on v6.1

lost after winbox attempt

Reply from 192.168.10.252: bytes=32 time<1ms TTL=64
Reply from 192.168.10.252: bytes=32 time<1ms TTL=64
Reply from 192.168.10.252: bytes=32 time<1ms TTL=64
Reply from 192.168.10.252: bytes=32 time<1ms TTL=64
Request timed out.
Request timed out.
Request timed out.
Request timed out.

how do i send supout?

Re: CLOUD CORE ROUTER

Posted: Thu Jul 11, 2013 11:57 am
by lavv17
CCR1036 is stable here, with 700 PPPoE users and 1 BGP session. My only concern is about latency jitter. I think there is a mutex in the kernel which is held for too much time.

Re: CLOUD CORE ROUTER

Posted: Thu Jul 11, 2013 10:25 pm
by skylaer
We can buy your CCR router.
Write me PM, pls

p.s. Only for items located in Russia.

Re: CLOUD CORE ROUTER

Posted: Fri Jul 12, 2013 6:43 am
by brianlewis
CCR1036-12G-4S

Been fighting it most of today, one customer getting slammed with a DoS Packet attack, 150,000-250,000 pps, its enough to cause this CCR to overload to 100% cpu! When the attack stops the router drops to 5-10% cpu, when the attack starts back up, back to 100% cpu. This is on 6.0rc7, 6.1 Release, 6.2rc1, tried all 3.

Switched to 5.25 x86 system temporarily until Mikrotik fixes the CCR

Re: CLOUD CORE ROUTER

Posted: Fri Jul 12, 2013 7:52 pm
by complete2006
That is what I mean :(
One DOS and the CCR is away...

Re: CLOUD CORE ROUTER

Posted: Sat Jul 13, 2013 1:34 pm
by majkel
I`m fithing with MK from a half year to optimize CCR for DDOS attack but no results.. still the same...

One company from Poland install some linux distribution on CCR and without problem Can filtering attacks about 1,5mln PPS with 80% of CPU . Router OS is horibble .

Re: CLOUD CORE ROUTER

Posted: Tue Jul 16, 2013 12:24 pm
by 0005
I've some issue regarding dynamic shaper.
Equipment: CCR1036-12G-4S
Tested on: 6.0rc9, 6.1, 6.2rc1
Scheme: Mikrotik is transparent and working only like a shaper. eth5, eth6, eth10 are in bridge mode. eth 10 is connected to CSN (WAN), 2 PCs are connected to eth5 and eth6.

The main idea is to dynamically divide 2 Mb/s to 2 users, so each user should get 1 Mb/s for DL and UL simultaneously.
The problem is when 1 PC Downloads and another PC Uploads simultaneously total throughput for DL about 1.5-2 Mb/s(not stable)
and for UL max 1 Mb/s(also not stable).
But if you make only Download simultaneously on 2 PCs the total speed for DL is 2Mb/s, each PC get 1Mb/s - stable. Same for Upload, also stable.
CPU usage during tests 0%, Ports are 1Gbs, Full Duplex.
Is it a bug of software or maybe some hardware problems. Changing ports didn't get result.

Config:
/ip firewall mangle add chain=forward src-address-list=101 action=mark-connection \ new-connection-mark=101UC passthrough=yes disabled=no
/ip firewall mangle add chain=forward connection-mark=101UC action=mark-packet \ new-packet-mark=101UP passthrough=yes disabled=no
/ip firewall mangle add chain=forward dst-address-list=101 action=mark-connection \ new-connection-mark=101DC passthrough=yes disabled=no
/ip firewall mangle add chain=forward connection-mark=101DC action=mark-packet \ new-packet-mark=101DP passthrough=yes disabled=no
/queue type add name="101D" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=dst-address pcq-total-limit=2000
/queue type add name="101U" kind=pcq pcq-rate=0 pcq-limit=50 pcq-classifier=src-address pcq-total-limit=2000
/queue tree add name=101-Download parent=global packet-mark=101DP queue=101D priority=8 limit-at=2M max-limit=2M
/queue tree add name=101-Upload parent=global packet-mark=101UP queue=101U priority=8 limit-at=2M max-limit=2M
/ip firewall address-list add list 101 address=192.168.0.2
/ip firewall address-list add list 101 address=192.168.0.3

Re: CLOUD CORE ROUTER

Posted: Tue Jul 16, 2013 5:59 pm
by LeoCombes
Which problems still remain in core routers using 6.1 rOS version?
Which features are optimized to the multicore architecture and which ones uses only one CPU (speaking about processes or features that can eat completely one CPU, while the other CPUs still idle)?
Reboot, login/winbox, CPU usage problems are fixed?

Only speaking about CCR router, which problems are still unsolved or should I take in consideration?

Re: CLOUD CORE ROUTER

Posted: Wed Jul 17, 2013 1:49 pm
by januszzz
Hello,

anyone willing to sum up the bugs? I'm planning to buy CCR for some simple routing, filtering, hotspot and queues. Will it do or I'm asking for troubles?

J.

EDIT: traffic about 250-700Mbit/s download, 100-200Mbit/s upload

Re: CLOUD CORE ROUTER

Posted: Wed Jul 17, 2013 4:45 pm
by krakenant
From our experience the CCR isn't ready for hotspot use. The traffic on one of our sites had a negative trend where the bandwidth passed was lower when more users were online. This was contrary to what we experience with our X86 box as well as being contrary to logic.

Re: CLOUD CORE ROUTER

Posted: Wed Jul 17, 2013 6:01 pm
by shukko
CCR1036-12G-4S

Been fighting it most of today, one customer getting slammed with a DoS Packet attack, 150,000-250,000 pps, its enough to cause this CCR to overload to 100% cpu! When the attack stops the router drops to 5-10% cpu, when the attack starts back up, back to 100% cpu. This is on 6.0rc7, 6.1 Release, 6.2rc1, tried all 3.

Switched to 5.25 x86 system temporarily until Mikrotik fixes the CCR
exact same thing happens to me today. What A shame... 36 Cpu's all %100 ..
I don't want to go back to my x86 system..
Please fix this mikrotik...

Re: CLOUD CORE ROUTER

Posted: Thu Jul 18, 2013 11:12 pm
by morf
I have read the changelog.
Normis, please tell me, any planned improvements in the performance of CCR?

Re: CLOUD CORE ROUTER

Posted: Fri Jul 19, 2013 8:12 am
by complete2006
Yes. I want to now this too.

Is the "3sec-CCR-kill" with hping3 solved?

Re: CLOUD CORE ROUTER

Posted: Sun Jul 21, 2013 7:37 pm
by sonny
CCR1036-12G-4S

Been fighting it most of today, one customer getting slammed with a DoS Packet attack, 150,000-250,000 pps, its enough to cause this CCR to overload to 100% cpu! When the attack stops the router drops to 5-10% cpu, when the attack starts back up, back to 100% cpu. This is on 6.0rc7, 6.1 Release, 6.2rc1, tried all 3.

Switched to 5.25 x86 system temporarily until Mikrotik fixes the CCR
Is SNMP turned on?
If yes try to disable and test again.
We found out SNMP causes much trouble on CCR. In ours it is always off.

Re: CLOUD CORE ROUTER

Posted: Mon Jul 22, 2013 8:06 am
by 0005
Another one issue regarding ping losses.
Equipment: CCR1036-12G-4S
Tested on: 6.1
Ports: Full Duplex, 1Gbs
Scheme: Mikrotik is transparent, no any configuration in Firewall and Queues.
sfp1 and sfp2 are in bridge mode. sfp1 is connected to CSN (WAN) sfp2 is connected to LAN.
Traffic load: avarage for DL 400Mb/s, for UL 100Mb/s
Avarage users: 4500
CPU load: max 15%
RxTx errors and drops: 0

The problem is when connecting CSN to LAN without Mikrotik no any ping losses to users and from them. But when connect Mikrotik between CSN and LAN
each 3-4 pings you get 1-2 ping losses to each user and traffic decreases.
Changing optical fiber, optical ports and modules, changing from optical to electrical ports didn't get any results.