MikroTik

wildbill442

@wildbill442, just a couple of suggestions: - if your router is the default gateway and is working, configure zt to use any interface. Make sure outbound traffic is not filtered. - If you're behind nat/cg-nat, expose (is dst-nat) the zt instance port to avoid possible forwarding though external ser...

wildbill442

It was part of the troubleshooting process.. was trying to use an IP not in use by a customer device. But i just proved my theory.. SRC-NAT'd the traffic from the WAN IP to the loopback and zerotier connected right up... Now I'm going to see if I can get a routable subnet on the WAN side so I don't ...

wildbill442

Zerotier isn't forming the adjacencies via the peer to peer network.. There are no paths shown in the /zerotier/peer/pr tables. I'd suspect it's also not resolving DNS for my.zerotier.com because I can't speficy the src-address.

wildbill442

The interface set on the zerotier instance (zt1) controls where it will look for paths. I suspect the problem is the lo0 isn't getting NAT'ed when zerotier tries to communicate the my.zerotier.com controller. Any reason you're using a loopback interface, instead of a WAN interface? Otherwise you'll...

wildbill442

I think its just not binding to the correct IP address. I'm going to open a support ticket.

wildbill442

Doesn't even show up.. It did on the bench and it was approved, but I removed it while I was troubleshooting.

The fact the peer list/path isn't populating makes me think its not communicating properly to the cloud controller / peer to peer network.

wildbill442

I have the zt1 instance assigned to a loopback interface as the WAN interface IP is not a publicly routable address, the lo0 IP is. I've also tested an L2TP connection from that loopback and it works fine when the loopback is specified as the src-address. I see the outbound connections on UDP port 9...

wildbill442

ISIS would be a welcomed addition for many of the reasons already listed.

wildbill442

+1 would love to see 464XLAT.

wildbill442

Here's a sequence of events on how this issue started for us: It began with a kernel failure on one of our edge routers, I'll call it EDGE A. To fix this we decided to do a netinstall on EDGE A and bring the router up to the latest stable release at the time (6.45.5) due to CVE fixes etc. Prior to t...

wildbill442

What reboot frequency did you have previously? One to multiple times in a 24HR window. Mikrotik support wanted me to turn off watchdog and log error / generate supout.rif once locked. The generated supout.rif files I provided after the watchdog reboot didn't yield any useful information. I opted to...

wildbill442

can anyone confirm that version 6.44.5 is stable with the CCR1072?

We’ve just downgraded to latest long term, I’ll update in 48hrs.

wildbill442

Hey, guys After upgrading CCR1072 and CRS317-1G-16+ to version 6.42.2, the kernel crashes have stopped. I hope they have really solved this great problem. Best Regards, Vagner Felipe Becker Unfortunately they are not! Neither in ROS 6.42.2 nor in any other ROS version!!! CCR1072 is not capable to h...

wildbill442

https://forum.mikrotik.com/viewtopic.php?f=3&t=122525&p=691266&hilit=CCR1072+random+reboot#p691266 I'm starting to think I have the same issue as these users... In the last few months we added some larger MDU customers pushing aggregate inbound traffic from 1.6Gbps to 2.6Gbps across one ...

wildbill442

CCR1072-1G-8S+ running 6.45.5 stable having random reboots. Thought it was hardware related, but I've replaced, one of the CCR's with a brand new unit, and power supplies and still rebooting. My next step is to downgrade to the long term release. Logs just indicate "router was rebooted without ...

wildbill442

I can confirm this is happening... I have two brand new PowerBoxes right out of the box. If you try to update the Router OS on the Powerbox by either dragging the package over via winbox and reboot or using the /sys pack up in the devices reboots and then loses all indication of power. When you powe...

wildbill442

OK well.. it wasn't as straight forward as: sh ip bgp | i /25 in ROS its gotta be a regex.. ip route pr where dst-address~"^[0-9 \\.]*/25" rinse and repeat for other prefixes... and wait for the CCR to go through all 1.6Million routes. This seems too resource intensive -- can we get grep a...

wildbill442

So I recently ran into an issue where one of my BGP peers was sending me very specific routes smaller than /24 causing some routing loops within our internal network. Is there a way to search the routing table for routes based on subnet mask or prefix length? I have three BGP peers and over 1.5milli...

wildbill442

This may be known or already reported -- but when running a ping to any device using the dude's ping utility in the client you almost immediately get disconnected from the dude and have to reconnect.

Running 6.34rc20 on a CCR1016-12G

wildbill442

Nothing!

I expected there to be more respect for customers by the Mikrotik... maybe one day...

I too need support for MPLS over ECMP connections. When will this be implemented?

wildbill442

Installed a RB2011 Last week for a customer was working great and then WiFi stopped broadcasting this morning. It appears the radio is receiving data as I can run a scan and see nearby access points, but the SSID does not show up on any devices (windows 7pro / apple iphone / android phone / etc). I'...

wildbill442

I can confirm that my CCRs running NTP-server package all Crashed @ 5:00PM PST Jun/29/15 (00:00 GMT).

Only fix was physical reboot of routers.

CCR's using NTP Client for time set were not effected.

All CCRs were CCR1036-12G-4S

wildbill442

Can Connection marking be "Fasttracked" for use with Queue Tree / PCQ's?

wildbill442

Recently I've been running into a recent issue with one of our CCR's. Randomly the router would stop forwarding ICMP packets through the router. I'd get about 100+ nagios alerts that certain hosts behind the router were showing as down. After further investigation everything was actually online, but...

wildbill442

Thanks for the reply, from their IOS configs they're using the LAN IP's of the HSRP routers for iBGP peering... I don't see a Loopback interface defined. That would just cause the iBGP session to terminate if the LAN interface of the router were to go down, shouldn't cause this specific issue right?...

wildbill442

Can those hops be pinged individually from inside / outside your AS? Do you know the IP's of those hops?

It sounds like something (ISP) is filtering ICMP on those hops, or like road racer indicated the subnet between you and the ISP isn't announced, which, is independent from your announcement.

wildbill442

I have a customer we provide service to with full routes via BGP. They have no problems when they just have our peer active or their other peer active. When they bring both peers online they can't get to certain websites, or certain AS as a whole. They have two Cisco routers running HSRP between the...

wildbill442

Or just deploy an active Ethernet 10G fiber network... Problem solved!

wildbill442

Just deployed 4 x RB922UAGS-5HPacD's... (netmetal5) They've all had bouts were all wireless clients would disconnect and would not reconnect until the wireless interface was disabled and enabled. CPU just started acting strangely as I write this its now pegged @ 100% and kicked me out of winbox... L...

wildbill442

I'd be nice to not only graph bits/s transferred over interfaces with Mikrotik's graphing function, but to graph total bandwidth used in Bytes. I know this can be done via MRTG+RRDtool and SNMP remotely, but it'd be nice to have a feature showing customers their bandwidth by accessing their CPE/Rout...

wildbill442

Can anyone explain how RSTP functions in a bridged network with station-bridged wireless devices? It seems like a root bridge is elected behind each station-bridged segment of the network... Is that normal operation? Is station-bridge truly transparently bridging? How does this effect RSTP's ability...

wildbill442

Any solution to this or just defective hardware? This is the dual chain lite version. No wlan1 interface showing up, nothing in the PCI/IRQ settings of the resource page to indicate the interface exists. Tried doing a reset of the board software and short circuiting the jumper on the board. Did a Ne...

wildbill442

I usually order about 10-15 units a week and my technicians have been reporting random mounting hardware missing from the packaging. Sometimes its the nuts that hold the mounting bracket to the panel, other times its the pivot bolt on the mounting bracket. Anyway -- just thought I'd pass this along....

wildbill442

We're an ISP so I don't want to filter their traffic in the event that my customer's need to access their network.

Plus enabling BGP through the core puts the infrastructure in place for peering at different geographical locations.

wildbill442

Maybe I didn't clarify that the customer needed full routes.

wildbill442

Why complicate things with tunnels? Using BGP and routing filters to propagate the intended routes to intended peers works just fine.

wildbill442

Just to confirm, I ended up enabling BGP on all the core routers on top of OSPF and used routing filters to propagate full internet routing tables to respective peers. OSPF does not redistribute any BGP learned routes. Loopback addresses are used for BGP peering to preserve OSPF ECMP routes. No need...

wildbill442

I've also seen some routers with the same dynamic primary and secondary servers listed 10-20+ times repeatedly.

wildbill442

Any chance of adding DHCP client support for management address? I currently use a DHCP server w/ RADIUS auth and static reservations to assign management IP's to AP's and RB750UP switches.. It makes renumbering / subnetting networks easier. Looking at moving to 260GSP's platform to replace RB750UP,...

wildbill442

Upgraded RB411AH from 5.25 to 6.14. No problems.

I downloaded all packages and installed the packages that I needed, including the wireless package. Reboot....tada.

I assume the problem is with the upgrade package.

Yeah must be, I used the all-in-one package.

wildbill442

Upgrading from 5.x to 6.14 will remove wireless config so DON'T!

If you want you can upgrade to 6.13 AND THEN to 6.14, that works fine.

Yes found that out the hard way! Mikrotik may want to put a warning on the download page.

wildbill442

Had an issue with 3 of the 4 devices I upgraded to 6.14 from 5.26. All of them were mipsbe devices, and after upgrading they did not reconnect. Connecting locally to the ethernet interface showed no wireless interfaces listed. A firmware upgrade had to be completed prior to the wireless interfaces b...

wildbill442

I should also note this CCR has been in production for just over a year, so this isn't a new setup. This is the first issue I've had.

wildbill442

Just had a strange thing happen with one of my CCR BGP Edge routers.. All ethernet interfaces stopped passing traffic. The only way I could get into the device was (thankfully) through the SFP/Fiber WAN ports. When I logged in all Ethernet ports showed no links. The primary and secondary LAN links w...

wildbill442

ste:

Whose your distributor?

Non of the US based distributors seem to have them yet.

As for the debate on cost... Compare it to a dual pol ARC Integrator series 23dBi gain RB911 board w/ pigtails and all and you're coming out ahead...

I would have liked to slap the ARC ABS mounts on these units...

wildbill442

Awesome... That slide was exactly what I was looking for...

The diagram I posted above was simplified. I have ECMP routes distributed via OSPF between multiple routers, and was afraid I'd lose that by using BGP.. Looks like I'll just enable BGP through the core and go that route.

wildbill442

Purely for redundancy. They have a second peer.

wildbill442

Do I have to run BGP throughout my core to accomplish the following: iBGP.png Currently eBGP is working with ISP A/B Peers in a multihomed configuration. I have a customer who wants to be able to use BGP that is connecting through one of our core routers. Do I have to run BGP throughout the core (on...

wildbill442

Jeez... I just realized the original post is from 2010!

Is this feature request anywhere near completion ?

wildbill442

I'd like this for IPv4 + IPv6

wildbill442

This is also happening on 6.10. I'll try and get a supout.rif after it happens.

wildbill442

Since 2007 I use "Peer DNS" on PPPoE Client. Never happened that problem. Sample from RouterOS 6.7 on my real gateway (except gateway IP = 1.1.1.1): /ip dns set allow-remote-requests=yes cache-max-ttl=1h cache-size=4096KiB servers=8.8.8.8 /ip pool add name="pool Le Forane" range...

wildbill442

Seeing a more reoccurring theme here. Customer calls in with connection problems, and no DNS servers are listed on the router. DNS servers are obtained automatically via PPPoE. When logging into the router Dynamic DNS servers are blank, so no DNS resolution occurs. Upgraded to 6.10, however, nothing...

wildbill442

Will/Does the CRS support layer 2 port isolation / Private VLANs?

I have a campus network application I'd like to use these for but want layer 2 isolation.

wildbill442

I believe it states this in the product brochure... 1000Base-LX is just defining the laser wavelength and other specifications... Mikrotik uses 1310nm Single Mode, which is in the range of 1000Base-LX. Check with your provider to make sure you have the correct type of interface/wavelength, and that ...

wildbill442

+1 for no problems w/ the SXT devices.

Maybe the mild California climate is to blame.

That being said I prefer a ARC integrator enclosure w/ RB911 over a SXT/SEXTANT any day. Better mounting bracket, better quality antenna, just overall better quality...

wildbill442

I've opened a support ticket. Hopefully its just a bad board.

wildbill442

Why can't I use the built in POE port on the RB951? Also I have another location where I'm doing fiber to the antenna due to cable distances. I have a remote reboot-able POE controller (http://tinyurl.com/d4523hv) and will be using R9xx Outdoor series. The device is only rated for 100Mbps. Without i...

wildbill442

I've resolved both problems... One appears to have been a Netgear router. Tried a new RB911, new POE's, still only got 10Mbps Half Duplex. Plugged into a new RB951 router, and got 100mbps FDX. The other instance appears to have been a bad RB911.... Tried new router, new poe, everything was only show...

wildbill442

This problem still exists on the RB9xx series equipment.

http://forum.mikrotik.com/viewtopic.php?f=3&t=79260

wildbill442

Just had another customer call in with connection problems...

Similar issue:

RB911G-5HPnD -- Ether1 is only showing a 10Mbps half Duplex connection.

wildbill442

I have the following setup:

RB911 (5Ghz) <===> RB951Ui router

RB911 is plugged into POE port.

Won't negotiate higher than 10mbps Full Duplex with lots of packet loss.. 951 shows red light lit even when ethernet cable is unplugged from ether5.

both devices running RoSv6.6 and firmware 3.10

wildbill442

yeah.. i bumped it up to 40 and still the same result.

wildbill442

Why am I only getting ~400Mbps Tx or RX TCP traffic between CCR's and ~250Mbps aggregate TCP? Is this a limitation of the bandwidth test, or is there a known issue? This is tested on the bench with 1' CAT5e UTP / CAT5e FTP / and CAT6 cables. Same results all around. Also the single direction bandwid...

wildbill442

Get better LoS...

There's no "magic bullet" that defies physics.

wildbill442

I just logged on to specifically request this same feature...

two or four ports would be awesome.

Or maybe even an 8-12 ports SFP only switch/router?

wildbill442

I just logged on to specifically request this same feature...

two or four ports would be awesome.

wildbill442

I've had about 4 of these fail in the last week. All have been 1-2+ years old, can't really point to any environmental factors.

wildbill442

Can't you already do this with FreeRADIUS?

wildbill442

How does one obtain the Mikrotik Certrified Trainer certification?

wildbill442

Manson, While I agree it would be great for all daemons to be fully multi-threaded I must concur with one of the previous posters - making the CCR your network's main DNS recursors/resolvers is really a crappy idea. We have a rather large DNS infrastructure and dealing with DNS attacks (DDOS and ot...

wildbill442

Also to design the solution effectively you left out one of the biggest variables... What do you expect to deliver to the customer in terms of latency/throughput? And why the same SSID? Seems like a management headache to have 6 AP's with the same SSID. I usually incorporate Azimuth and Polarity int...

wildbill442

Way not deploy half as Vertical only and half as horizontal only... Use standard 20MHz channels, and do all the other good suggestions like spacing, and shielding. You'll also want a good channel plan so that those overlapped channels are facing opposite directions. If there's noise drop to 10MHz ch...

wildbill442

Thanks for the feedback. I moved to Queue Trees and PCQ's awhile back because simple queues were eating up the CPU on our routers. To switch back to simple queues would require changing our customer management system to feed the correct radius attributes.. Not very difficult to do, but I'll look int...

wildbill442

Any users have a CCR in a production environment? I've been extremely hesitant to deploy my CCR - but really need the fiber support at one of our sites. I'm running OSPF w/ multiple areas, ECMP, PPPoE servers with ~600 users, Queue Trees etc... All the basics seem to work on the bench, but just wond...

wildbill442

well no kidding.. but it's nice to have an actual bench mark to shoot for.

My licensed links do 250Mbps-375Mbps @ 256QAM depending on channel size.. I don't think it'd do us a disservice to have this info.

wildbill442

well no kidding.. but it's nice to have an actual bench mark to shoot for.

wildbill442

Any chance of getting performance test data across the wireless interface in a point to point setup? Similar to the Ethernet tests you've performed for the other Routerboard devices. It'd be nice to know actual throughput in a test environment over the various modulation rates, and frame sizes using...

wildbill442

Awesome, that did it!

wildbill442

Uploaded the wrong firmware upgrade file (1.9) to the RB250GS... Instead of swos-rb250-1.9.lzb I uploaded the 260 version...

Any recovering from this? It doesn't appear to be responding on the IP address it was assigned.

wildbill442

That is great thanks for the info. Is there a way to do it with this piece of hardware? http://routerboard.com/CCR1036-12G-4S-EM I really appreciate the help. Thank you thank you. Troy The CCR1036-12G-4S-EM has two Power Supply headers on the board. One is in use by the factory shipped AC/DC Power ...

wildbill442

What is the PSU connector type called on the board? The two pin header?

wildbill442

Someone correct me if I'm wrong -- but I think his problem was setting the Antenna mode to ant-b when it should have been set to ant-a. The 411AR's built in radio is a SISO, 802.11b/g device with only a single MMCX jack, so there is no ant-b present on the device. Either way it's fixed -- and as for...

wildbill442

Tell me the product. There are a lot of products claiming to do magic. But using the same channel at the same location is always a problem. You have to do frequency planning to avoid this situation. With sync you can reduce channel spacing need and you may reduce the impact of double using a freque...

wildbill442

Just to confirm... I've tested Queue Trees / Address lists / PPPoE Server They all seem to be working fine. I did a fresh install on a CCR-1036-12G-4S of ROS6.0 and restored a backup file from my production RB1100AHx2 running 5.25. I did have to make some changes to the packet markings, queue trees,...

wildbill442

Booting up my CCR -- It shows 24VDC under system>health... So I'm guessing it takes anything between 10 - 28VDC.

As for Polarity.. Breakout a multimeter and check the built in PS, unless you get an answer sooner.

It'd be nice if this information was published in the CCR's user guide.

wildbill442

Nevermind -- http://forum.mikrotik.com/viewtopic.php ... R+DC+Power

Answered my question.

wildbill442

To clarify I'm using the CCR1036-12G-4S if that wasn't assumed.

wildbill442

So I'm sadden the CCR1036 router does not come with a POE/DC power port out of the box as I need a fiber capable router at one of my DC Powered sites. I opened up the enclosure of the CCR and see there's a second jumper next to the main jumper that's connected to the AC/DC power supply. J1403 is the...

wildbill442

http://www.l-com.com/ethernet-converter ... timode-2km

That runs @ 24VDC.

wildbill442

Most IP phones I've come across are based on the 802.3af standard, which, is 48VDC.

So unless you can find an IP phone that will take 24VDC on the POE port, no IP phone would be compatible.

wildbill442

The torrent download links for ALL packages for Beta/Stable/Legacy are all incorrect.

They are all pointing to various board specific packages (PPC,x86,etc).

wildbill442

What's new in 5.22 (2012-Nov-23 09:28): *) wireless - fixed rare nv2 link stall; So, how serious is this? Every links goes down now and than. Should I now upgrade or not? (I just finished upgrading to 5.21...) Did the links stall under certain conditions? Or in general. In the first case I would li...

wildbill442

Damn I wish I would've seen this before using nconf to manually enter 200+ devices. After I was done I thought, I should write a perl script to parse the XML backup file for the dude to import this information.

Haven't used the script yet, but nicely done.

wildbill442

I scrapped the 5GHz links... Speeds were really sporadic it seems to be interference or cross talk between the three links. thats causing the poor performance. We're putting in a 24GHz UBNT link, and using the 5GHz as a redundant path. On and slow is better than down. I also have an 11GHz licensed l...

wildbill442

I should note that until yesterday the link between the Core Router and ATC Router was only a dual 5Ghz setup. I added a third 5Ghz link to see if we could increase throughput. Prior to adding the third 5GHz link traffic was routed over the 2 5GHz links equally about ~50Mbps per link. Same aggregate...

wildbill442

See attached diagram. I'm having an issue with poor performance across equal routes. The Core Router and ATC router are linked by three 5GHz wireless links. OSPF is used throughout to distribute routes dynamically, and ECMP and failover is established correctly through OSPF. Testing each 5GHz link (...

wildbill442

/32 -- http://wiki.mikrotik.com/wiki/Manual:In ... _addresses

I've heard VPLS is much faster in comparison to EoIP. Haven't played with it much, but again I've seen a lot of good things about it on these forums.

wildbill442

You could use a central based NAS and run MLPS on top of the OSPF network and tunnel the traffic back to the central NAS ... I've seen a few posts of people doing this, I'm not sure what the impacts from added overhead are... but it's one way to have your cake and eat it too. Also look into /32 rout...

wildbill442

Currently we have centrally located NAS/PPPoE servers (we have multiple) and it works well. I'm looking at pushing them further out into the network and using OSPF for the core/distribution layer of the network and using PPPoE to handle the access layer. That way it's just layer 2 from the AP to the...

wildbill442

Couldn't this be done via packet/connection marking in the mangle rules?

wildbill442

+1 and Option 82 support.

wildbill442

Was also able to get LACP to load balance and do failover using layer3/4 hash across a /30 point to point link. Although i think the 802.3ad standard only specifies layer2/3 hash so you'd need mikrotiks on both ends to do this.

wildbill442

I subscribe to PC Magazine's online distributions primarily. Everything else is forums, knowledge bases, white papers, RFC's, and the like..

wildbill442

well it appears that all of www.mikrotik.com is currently down...

wildbill442

Unable to update client licenses -- failed to connect to www.mikrotik.com...

I've tried from multiple devices...

wildbill442

Nevermind... i just realized the problem with using 802.3ad and a /30 subnet.

balance-rr works... i'm worried about what that might do for TCP sessions...

wildbill442

I just tested this... Here's the specifics: ROUTER A: RB1100AH ROSv.5.12 10.0.0.1/30 ROUTER B: RB1100AH ROSv.5.12 10.0.0.2/30 I have ether 1-3 bonded using 802.3ad with ARP for link monitoring Layer2+3 TxHashPolicy LACP rate is 30s. Same settings on both routers. IP address is assigned to the bonded...

wildbill442

@normis,

Any idea when these will be shipping ? Still waiting to get my hands on one with an SFP port.

wildbill442

Yes exactly... Only for PPPoE too.. I didn't realize it was implemented already for DHCP. I use PPPoE primarily and would love to have this extended to it.

wildbill442

Any chance we can get a feature to set NTP servers dynamically through dynamic protocols like DHCP, and PPPoE?

wildbill442

Looks good +1 for basic PPPoE options.. All my configs and i think most other users would require user/pass, null service name field, add-default-route, use-peer-dns... As for usefulness, I think its great, not all my field techs have a solid understanding of TCP/IP or Router OS... Making it easy fo...

wildbill442

SFP ports are a step in the right direction.. I need this today.. upgraded to a GigE port and our provider will only hand this off in optical format.... When do these ship??

wildbill442

Yeah I was looking to use a pure Mikrotik solution. --- Wireless connection 1 --- / \ RB.A === === RB.B \ / --- Wireless connection 2 --- Wireless connection 1 and 2 would be bonded using 802.3ad using two RouterBOARD 1100s only. No other layer 2 devices. Just looking for feedback to see if anyone h...

wildbill442

We use FreeRADIUS, but requires designing/customizing your own front end to view/enter/manipulate the data. There are pre-made GUI's you can get but I'd say its best to design to your specific use. I haven't used User Manager much at all but would probably be an easier out of the box solution. There...

wildbill442

Has anyone used the RouterBOARD 1100/1200 devices for LACP?

I'm going to be setting up multiple licensed links bonded together using LACP (802.3ad). Was wondering if anyone has done this using Mikrotik hardware.

Link specs are 4 x 11GHz 40Mhz channels bonded together for a 1Gbps microwave link.

wildbill442

Uldis - I'm using a Passive POE with a solar setup. 48VDC system 8 x 6VDC AGM 150Ahr Batteries 8 x 175Watt 12 VDC Panels (2 x 48VDC arrays in parallel) Charge controller Not sure on amperage, its just drawing whatever is needed. There's more than enough power at this site its completely overkill as ...

wildbill442

OK I see that... What is this for?? /ip firewall nat add action=netmap chain=srcnat comment="ROUTER OS (SOURCE NAT)" disabled=no to-addresses=172.16.0.1 It sounds like 172.16.0.1 is your management IP address.. Just assign this to the public interface there's no NAT settings required to po...

wildbill442

More information is needed to troubleshoot.

Please provide the queue syntax for the mikrotik-rate-limit field the RADIUS server is submitting, relevant configuration, log files, etc...

wildbill442

Destination NAT If you want to link Public IP 10.5.8.200 address to Local one 192.168.0.109, you should use destination address translation feature of the MikroTik router. Also if you want allow Local server to talk with outside with given Public IP you should use source address translation, too. A...

wildbill442

I upgraded to 5.9 and upgraded the firmware about 20hrs ago.. Only time will tell if it holds.. Well that didn't resolve it. Same problem, "kernel failure" error in the logs a "/system routerboard pr" shows a null field under current-firmware. I have an open ticket with mikrotik...

wildbill442

I upgraded to 5.9 and upgraded the firmware about 20hrs ago.. Only time will tell if it holds..

wildbill442

I'm having problems with a RB800 rebooted every ~24hrs. The RB800 is running RouterOS v5.7, and has 4 x R52Hn-m cards. The error message is written in the log file after reboot. Contents of the autosupout.rif file include the following: routerboard: yes model: 800 serial-number: 24D301AFE4E1 current...

wildbill442

I on the other hand like the 1Watt power output.. It eliminates the need for an external amplifier. I have a number of installations where it makes sense to run longer lengths of LMR because it brings the sensitive equipment down to a height that is easier to maintain. Case and point.. We often use ...

wildbill442

Hey guys, The CPU usage of my RB1000U increases when using Dude monitoring. I have seen from profiler it shows management process is 20%-28%. I`m monitoring only CPU usage, PPPoE active users, 2 queue rules using OID. How can I disable other SNMP sources (like interfaces, routes, IP addresses...) o...

wildbill442

Downgrading seems to be the solution.. however it doesn't appear all 5.5 AP's are affected... I'm going to make some supout files and open a trouble ticket...

It looks like there is an issue with RSTP/Bridging and 5.5. I tried 5.6 as well but that exhibited the same symptoms.

wildbill442

To add some more information to this. When trying to MAC-PING the device from the AP yields nothing but timeouts with an occational reply. Just downgraded to ROS 5.2 on the AP and now all the devices are showing in the bridge host table, and MAC-PING responds without drops. It looks like this may ha...

wildbill442

I have a segment of the network that is bridged. The client devices are setup as basic routers with a wlan1 (WAN) and ether1 (LAN) interface. The pppoe-out interface is set to wlan1. Wlan1 is setup in station mode and basic NAT config settings. AP is setup as a straight bridge, ap-bridge mode, bridg...

wildbill442

OK,

I was more worried about resource usage because i have 500+ active connections on this device and was considering switching the default-small queue type to SFQ since that seemed to work the best for this particular connection.

wildbill442

I've been using Mikrotik as a NAS for years now and I just ran into an issue I haven't had to deal with before. I have a customer who runs an ISP which we provide the bandwidth for. Their connection is terminated via PPPoE on a Mikrotik NAS authenticated by a RADIUS server. The connection sets up fi...

wildbill442

Apparently it is not possible at this time. No idea if and when it will be.

wildbill442

Yeah.. That's not the problem. There's no encryption involved. And I agree, the error message is pretty clear. The problem is the whole "/ip route ..." section of Router OS is unavailable when the problem occurs... Kind of like the routing service of the operating system is hung up. Reboot...

wildbill442

Lately I've been coming across customer premise devices that appear connected, Wireless client associated to the AP and their PPPoE session is active, but unable to ping to internet devices. The customer premise devices are setup as routers RB411 or RB711 boards configured with PPPoE interface, NAT,...

wildbill442

Here's an example:


function wireless_interface($arg1)
{
ros_command("interface wireless registration-table print count-only where interface='$arg1'")
}

wireless_interface(wlan1) -> returns value to dude for specified interface.

wildbill442

I vote for better documentation for syntax for functions/probes/etc.

wildbill442

Anyone know if there are any predefined variables for use when creating functions in the dude? Or does anyone know the syntax for creating/using variables?

I'm trying to write a function that needs arguments passed to it.. is this possible?

wildbill442

weird... cause v3.6 wouldn't read the SNMP values off of any devices I had running ROS 5.x. I upgraded to the beta version of dude and it seemed to fix it.. Maybe I just needed to restart the dude service... either way its working now so I'm happy.

wildbill442

I have a simple function called pppoe()... oid("iso.org.dod.internet.private.enterprises.cisco.ciscoMgmt.ciscoAAASessionMIB.casnMIBObjects.casnActive.casnActiveTableEntries.0") I'm trying to graph total PPPoE active connections across all of my PPPoE concentrators in the dude. Can I do thi...

wildbill442

Dude 3.6 will not connect to RouterOS 5.x via SNMP.

Upgrading to Dude v4.0beta3 resolved the problem.

wildbill442

Additional bug... no huge priority:

Telnet seems to be forcing SSL encapsulation and thus doesn't connect... I can't telnet to any routers on V5.0 only SSH.. Not a big issue for me since i really only SSH, but something I did notice.

wildbill442

Do you have the right attributes defined? Have you tried running the RADIUS server in debug mode to see that its actually sending the rate-limit attribute to the NAS? Can you post your relevant configs, relevant output of radius server in debug while authenticating the PPPoE client (radiusd -X)... A...

wildbill442

Perhaps if you provided your intended use or some specs to go off of you could get a recommendation on what hardware would be required.

wildbill442

Increase the queue limit...

It sounds like he's hitting the threshold and packets are being queued too long and thus dropped. Check the stats for the simple queue.

wildbill442

My work around for this was to use a read only user object for all mikrotik devices, and then login directly with privileged account if management was needed. Or since I'm using a RADIUS backend, simply changing the user group in the mysql server for the RADIUS user will switch it to readonly rw ful...

wildbill442

Buy a ubiquiti dual pol sector, they're priced well and work great, you just need to get some connectors for RP-SMA.

I'm using a couple w/ mikrotiks, and you don't need to put up two panels.

wildbill442

Everytime I try to test the email notifications I get a return "OK" from the dude, but the emails never go through. After further troubleshooting it appears the dude is attempting to connect to my mail server on TCP 465 (SMTP-Auth) but there are no parameters for SSL/TLS or authentication ...

wildbill442

I also have seen this problem.. Simple fix was not to downgrade but to switch the wireless protocol from NV2 to NSTREME on the interface... Seems to be a problem with NV2. After a duration of time all clients will disconnect. I think they eventually reconnected but would not pass any traffic until t...

wildbill442

I think the standard answer here is going to be wait for the stable release...

But let me know how it goes !

wildbill442

I think all this GPS stuff is over hyped . It is because we are all operating in a license-free band and yes, you can get away from self-interference but your competitor again will be shouting in your ear a few meters away. If we had operating in license-exempt bands, we could save spectrum and red...

wildbill442

Try using the firewall to filter the unwanted traffic from accessing the internet. I'm assuming you're trying to stop clients from accessing the WAN unless their IP is in the 192.168.111.0/24 subnet. So block all traffic that is not 192.168.111.0/24 from going out the WAN. I'm going off assumptions ...

wildbill442

As a general rule in an ISP environment, we block all outbound SMTP unless its destination is our mail servers. This forces users to employ SSL (465) or SMTP-AUTH (TCP 587). Without this rule a user will inevitably get a virus and land one of your IP addresses on an SMTP blacklist. If you NAT custom...

wildbill442

Yeah that's what I did in the past.. It's been awhile since I've needed to forward PPTP through to an internal RAS.

wildbill442

Make sure the helper in the firewall is enabled:

/ip firewall service-port enable pptp

Also I see you've DST-NAT'd the ports, but did you SRC-NAT them back out the public interface?

wildbill442

And your PPPoE Server is listening on bridge1 ? Try setting your Bridge's MAC statically... If the current mac is 00:11:22:AA:BB:CC set it statically to 02 :11:22:AA:BB:CC. This will keep the Bridge's MAC from changing if the port on the bridge goes down from which it obtained its MAC address. I'd s...

wildbill442

Can you create a static lease for that mac with a bogus IP address just so it completes the lease and stops requesting? Or disabling bootp support like SurferTim previously suggested.

wildbill442

can you post your configs... i'm not sure I completely understand how you have this device setup. Mainly just the bridge and ppp submenus. It could be that the MAC address of the bridge is changing due to an interface going up/down, which could also explain why all PPPoE connections are lost. If the...

wildbill442

I'd try enabling RSTP on the bridge, and bridging devices.. It sounds like on every reboot the main bridge is having to relearn the network and rebuild its hosts table. If this is the case traffic will probably stop for a good 30 seconds after a reboot. If you enable RSTP this will significantly dec...

wildbill442

Not 100% sure, but im pretty sure i have read somewhere that running RB on batteries, doing so using POE is not such a good idea. May be you could try using the power jack on the board rather than the POE? I have Routerboards running on batteries using PoE no problems, installations dating back to ...

wildbill442

Can Mikrotik confirm this? I have multiple PPPoE Servers however they are on different versions and different hardware and have not experienced this problem, however, I'm running pre-4.12 releases. Two are Portwell NAR-5060's running 4.11 and 4.7. A mikrotik RB800 running 4.11 and a RB600 running 4....

wildbill442

Yeah... The default being 300ms would cause a lot of redundant chatter on the network. If you have the reject_delay at 1 its going to try your primary radius server, then because of the time outs hit your secondary, and maybe even be thrown back to the primary before it just times out all together.....

wildbill442

I just started noticing this recently... I don't recall it happening before. RouterOS's default radius timeout is 300ms.. This seems to cause unnecessary retransmits and timeouts on the NAS request packets when using free radius's default reject_delay setting in radiusd.conf and mikrotiks default ra...

wildbill442

Poor stability than prerelase of rc2 - all things was ok on prerelase.. now its broken 1. Bios upgrade shows old bios "" upgrade bios "2.27" after upgrade all bios settings go to default and any change / console or manually in bios / doesnt have any change" only option is t...

wildbill442

My switch group 1 on my RB1100 seems to have stopped working after the upgrade... Had to move hosts to the other switch group in order to restore connectivity... I haven't done much troubleshooting yet, I'll try resetting the configs and reconfiguring and report back.. Just wondering if anyone else...

wildbill442

My switch group 1 on my RB1100 seems to have stopped working after the upgrade... Had to move hosts to the other switch group in order to restore connectivity... I haven't done much troubleshooting yet, I'll try resetting the configs and reconfiguring and report back.. Just wondering if anyone else ...

wildbill442

FYI

The bandwidth test server only seems to look at the local users file for authentication. Is there a way to allow it to query the RADIUS server for auth ?

wildbill442

wildbill442, what device is connected to ether13 when these problems occur?

Sorry for the late reply -- it was a Motorola DOCSIS 3.0 Cable modem. Can't remember the model off hand. I was using ether13 as the WAN port for the router.

wildbill442

Ports 11, 12 and 13 on RB1100s were giving me all kinds of grief even on 4.11 so I pretty much stopped using them completely.

bummer... OK well at least i know its not just me!

wildbill442

Any of you guys using the RB1100 having issues? Mine has been acting strange a short while after the upgrade to RC1. I'm continually losing my link on the ether13 (poe/boot) port and the routerboard randomly rebooted on me. I power cycled the router after tolerating the problem for some time. After ...

wildbill442

+1

This is great!

wildbill442

Anybody check if stability of 802.11n wireless is better? Not sure what you're referring to exactly.. I had no problems with stability and 802.11n on 5.0beta6.. Only stability problems I noticed were when using NV2. NV2 seems to be much more stable I have clients connected for 1day5hr+ which is abo...

wildbill442

I still can't authenticate clients via RADIUS w/ NV2... have to use local ACL. I have deployed on two production AP's but they are very small only 3 clients on them.. NV2 seems to be working well, but it's only the 6hr mark. I had problems with all clients disassociating with the AP at random times ...

wildbill442

Nevermind, Looks like it was a loose connection on one of the ethernet ports, must have been feeding garbage into the network causing the packet loss. I have no other explanation, but it was fixed when the ethernet cables were unplugged/replugged into the switch. Symptoms were very similar to a root...

wildbill442

I've been searching this forum and found some topics with similar problems, but none of the solutions presented seem to be resolving the problem. Problem: Packet loss present to multiple hosts on a layer2 segment for sporadic periods of times. It appears to be a root port election problem as the onl...

wildbill442

The dual ports are for MIMO support. Contrary to another post you CAN use both at the same time, provided they're are in the same frequency as the card is operating (you can't operate in 2.4GHz and 5.8GHz at the same time on a single radio). To configure the behavior of the antennas you need to set ...

wildbill442

Quick question... I currently have multiple RADIUS servers setup for my network. I'd like to have my routers ACL's authenticated via the same servers. Is there a way to setup a user or group that is only allowed to authenticate with Mikrotik devices with the RADIUS server set to "login"? W...

wildbill442

No, that's preferred. You should see the number of users that have a bridged network and are trying to convert it to a routed model. Routed segments scale far better, and you have much more control over traffic. When in doubt - route! :) Basically you want to limit your broadcast / collision domain...

wildbill442

Just submitted a supout.rif.

wildbill442

Are both sides beta6? can you send us the supout.rif files that you made after the disconnection has happened, before restoring the connection? Yes all sides were beta6. I forgot to make the supout.rif -- I'll switch them back to NV2 (standard NSTREME was more stable) and generate it when they disc...

wildbill442

Another issue in 5.0beta6 w/ NV2 In the two ptmp environments i've installed it on the users disconnect after about 12hrs and will not reconnect unless the interface is disabled/re-enabled. I forgot the disassociation message that appeared in the logs - but it was pretty generic. The point to point ...

wildbill442

The terminal window displays weird due to font... but other than that it works! I too like the network discovery, it works well.

I've become accustom to just using ssh instead of winbox on my Mac...

wildbill442

Meanwell makes a "UPS" product, which essentially has three terminals: AC Input DC Output - Load DC Batteries It will automatically switch from AC to DC batteries when the AC power is lost w/ zero down time. It provides full amperage on the load side, and it will trickle charge your batter...

wildbill442

Spammy, You can create multiple address pools from which your PPPoE server assigns client addresses from. You simply create a new pool "suspended" on your PPPoE Server(s), and have the suspended client set to that pool. The RADIUS server will pass the attribute to the PPPoE server to assig...

wildbill442

Normis... Another problem found... with RouterOS v5 beta 6, i set it running on the MPLS + NV2 and apply the NV2-qos-default. the dude manager is not able to read the snmp. when i downgrade back to the RouterOS v5 beta 5, then i having no issue with it. I too noticed SNMP data is not available for ...

wildbill442

William, in beta6 we have a new latency optimization system, see newsletter

Yeah the newsletter is what prompted me to test the newer beta release. Any ideas on the RADIUS issue? Do you need a supout?

Also SNMP appears to be broken in 5.0beta6...at least for monitoring interfaces.

wildbill442

@NORMIS or ULDIS Found a little bug: When using NV2 protocol - security profiles are overridden. I use RADIUS for MAC-Authentication and it will not authenticate when mode is set to NV2. ROS only consults the local ACL and if the MAC is not present it rejects authentication from the client. If I hav...

wildbill442

I did some PTMP tests with 2.4GHz-G only mode 20MHz channels... only 3 CPE's connected to the AP, but the average latency when throwing everything i had at the CPE's was still 16ms... And I was able to get 2.5Mbps synchronous off an RB133 board... about 6-7Mbps asynchronous... If only I had a higher...

wildbill442

I think this would be a request for the Dude.. RouterOS just simply outputs SNMP data queried by the OID.... any statistical/mathematical manipulation should be the job of the software creating the graphs. I tend to prefer Cacti for graphing, and dude for network management/notifications. But I don'...

wildbill442

Will NV2 support full duplex links?

I have a NSTREME DUAL link I'd like to try this on... Not sure if NV2 was designed or ready for this type of implementation...

wildbill442

Well done MT! I tested on the following hardware (identical @ both sides) RB411A R52N ARC Dual Pol Antenna/Enclosure (2x2 MIMO) Link distance ~7miles ROS V: 5.0beta6 I ran the bandwidth tests FROM the router, so if i had tested through the router I may have been able to achieve higher throughputs. N...

wildbill442

I have another R52Hn card deployed in a PTMP environment... Anyway it has a mix batch of 30+ clients connecting with no problems.... ...Damn that's another outdoor senario... However I would play with the power settings -- or set to regulatory domain if needed. Prior to the power changes, I did noti...

wildbill442

There are two linear planes in which you can transmit radio frequencies.. Horizontal and Vertical.. There's no real advantage to one or the other, you can use either just make sure the polarization of all antennas are the same.

wildbill442

Or get a four way splitter and turn your sectors into one big omni.

wildbill442

And it was.. Thank you Mikrotik for the quick fix!

wildbill442

Higher gain antenna on both ends? Otherwise you'll probably need to add additional repeater locations in order to get acceptable signal.. my guess is the trees are too dense and attenuating the signal to unusable levels. Another option would be to amplify both ends.. 900MHz is the best solution for ...

wildbill442

I'm debating on adding a basic RTS/CTS configuration to my installers config scripts so that its set automatically at install. If NSTREME is enabled on the CPE does NSTREME's protocol override the RTS/CTS framework, or do I have to remove any RTS/CTS configs that may still be present on the CPE to a...

wildbill442

Why not just leave the rates at their default on the AP? Then this problem wouldn't exist, correct?

I seem to recall having no problems connecting to an AP in a/n mode with a client in a mode, but then again I don't change data rates on the AP.

wildbill442

I'd go with the spacing idea.. that or get more separation in bandwidth. maybe 60+MHz apart especially if all the antennas are of the same polarization. If the clients are dual polarized, then an easy solution might be to just change the polarization on the sector, increase channel separation, and s...

wildbill442

Why on earth are all your clients in station-WDS!? There's your problem right there. Convert them to station or if you need to bridge station-pseudobridge mode... The only time you need WDS is if you're transparently bridging traffic, which should only happen with wireless backhauls, not client CPE'...

wildbill442

I don't see the confusion.. I was referring to your original post that said you need to be able to transfer gigabyte sized files... Well the more traffic you push through the board, the higher the load on the CPU, might be best to have the power there if need... The RB***H have a higher clock speed ...

wildbill442

I did here's their response:

Hello William,

Nstreme OIDs should be fixed in version 4.7, they should provide you with all
necessary information.

Regards,
Sergejs

Search found 1055 matches