MikroTik

schadom

Because it supports protocols that RouterOS doesn't? I wonder what's the point? Running container with routing engine ... on a router? Why not take a decent RPI (more RAM, user can choose decently sized storage) and run FRR there? Pair RPI with a decent managed switch and you have a winning combina...

schadom

Is https://hub.docker.com/r/frrouting/frr supported?

schadom

Any updates on this?

schadom

+1111111111111

schadom

Seems to be unfunctional / broken ...

schadom

Mikrotik please consider making uRPF configurable on a per-interface basis instead of globally only. Like Cisco and others have it. The current implementation breaks asymmetric routing. Thanks

schadom

Hi mrz, Do you have an estimate of the release date for BGP in the development channel? Even if it's full of bugs or without RPKI ... but so that we have an idea of performance. Several of my clients have asked me for alternatives to Mikrotik because of the RouterOS 6's poor performance in learning...

schadom

Any news on RPKI Route Origin Validation on ROS? As written above, there's an open source C library available under MIT license... http://rpki.realmv6.org/

schadom

Really excited to see some BGP development in V7 RPKI would be awesome. But I would be more than happy with decent BGP performance, including route ingestion and interactive lookup. By replacing their custom routing implementation (Quagga fork or whatever) with something more recent like the frrout...

schadom

Asking for a friend...

schadom

Pride comes before a fall . Companies much larger than MikroTik have had to learn this valuable lesson. One more time ... please hire a Product Manager who understands your users . Yes, but please also some software QA guys that write automated tests to make at least some of the "fixed xxx int...

schadom

+1 Open-Source RPKI/RTR implementation in C available over at http://rpki.realmv6.org/

schadom

SNMP related problem with CRS328-4C-20S-4S+ and combo ports. If combo ports´ copper port is used SNMP shows notPresent(6) although copper port is physically up and traffic flows. ... When I plug SFP in combo3 and use the copper port, then correct port status is reported. Correct status is also repo...

schadom

Yes, we are working on BGP at the moment. First beta with enabled BGP is coming soon.

Finally some great news, thanks!

schadom

Looks like something has been changed with the SNMP MIKROTIK-MIB / IF-MIBs too. Starting with v6.46.x, combo interfaces are not visible within Observium monitoring anymore. Could you please update http://download2.mikrotik.com/Mikrotik.mib? mikrotikExperimentalModule MODULE-IDENTITY LAST-UPDATED &qu...

schadom

We have basically have the same setup just that we are using two CRS305-1G-4S+. No problems at all with VMWare, but we do not have both switches connected together directly. Each server has two 10G NICs, one connected to Switch A and one connected to switch B. Our storage is connected to both Switch...

schadom

Are there any plans for further improvements to the current BGP routing implementation (like overall stability, convergence time, BGP4 SNMP MIBs, security features like RPKI and ROV, etc.) or can we safely replace all of our CCRs with frrouting in 2020? New features like Cloud, LoRa, etc. are intere...

schadom

What about virtual stacking?

schadom

You can choose between our legendary feature-packed RouterOS for booting or a simpler, but still powerful SwOS.

I LOL'd. Legendary in terms of what - the ROS v7 joke?
But the new switches are imho really sexy! Just fix the software please

schadom

*) crs317 - fixed multicast packet receiving (introduced in v6.45); *) hotspot - fixed default profile values not being used (introduced in v6.45); *) rb4011 - fixed SFP+ interface linking (introduced in v6.45.2); *) supout - fixed SIM slot printing (introduced in v6.45); and once again mostly fixe...

schadom

OpenVPN is not working anymore for us after upgrading to 6.45.1 and 6.45.2. OpenVPN clients are unable to get traffic from the OpenVPN-Net (10.10.10.x/24) to the Management Network (10.80.80.x/24). The IP Firewall in Winbox shows the following message on the rules which include the ovpn-instance: i...

schadom

Try adding this to the top of your mangle rules: /ip firewall mangle add action=accept chain=prerouting dst-address=10.255.255.0/24 in-interface=bridge I believe your rules are too loose and catching any traffic from your LAN to VPN IP ranges. That's what we get if the openvpn client tries to ping ...

schadom

We're experiencing the same problem after upgrading to 6.45.1 ...
It's time to finally throw all Mikrotik devices out of the window.

schadom

OpenVPN is not working anymore for us after upgrading to 6.45.1 and 6.45.2. OpenVPN clients are unable to get traffic from the OpenVPN-Net (10.10.10.x/24) to the Management Network (10.80.80.x/24). The IP Firewall in Winbox shows the following message on the rules which include the ovpn-instance: in...

schadom

https://indico.uknof.org.uk/event/46/contributions/667/
https://indico.uknof.org.uk/event/46/co ... PROVED.pdf

schadom

viewtopic.php?p=725088#p725088 — isn't that about authenticity?

dude, honestly i'm not here for the lulz. we work with business customers and we expect clear statements from MT so that we can plan our next hardware purchases.

schadom

I'll just leave this here....

http://thebrotherswisp.com/index.php/mi ... ked-video/

@normis can you confirm the authenticity of this video? if real, this would be very nice!

schadom

Hey MT, any updates on BGP4 MIBs? This feature has been requested numerous times for over a decade now. Thanks

schadom

No updates concerning ROSv7
No announcements on new CCR hardware with ARM64
No announcements on new RB hardware with ARM64

I feel blue.

schadom

+1 for increased BGP performance and security:
- faster routing table updates !!!
- faster route matching (via /ip route print where x)
- RPKI ROV support (see https://rpki.realmv6.org)

schadom

Updated a CCR1009 and RB4011 without any issues. Great work MT!
Now please make us happy with some BGP improvements in 6.45

schadom

Although higher port density would be nice, the design doesn't seem feasible to me. In my opinion you should better focus on new RB or CCR/CRS models which can be dual-mounted in 1U. I definitely see a market for such devices in cases where redundancy is required but budget and space are limited (fo...

schadom

You might benefit from simply modding it yourself (take the board out and put it in a custom case).

No. I think a twin-tray version would sell very well.

schadom

I think it would be very nice to have smaller RBs4011s in the future which can be dual-mounted in 1U. This would be very beneficial in situations where space is limited but redundancy is required. Currently the RB4011iGS+RM has width of 228mm. Shrinking it to ~216mm width per unit would be awesome. ...

schadom

+1

i would love to have a future tandem-tray capable RB4011 or CCR router

schadom

Hi Mrz, Is this correct? chain=in prefix=8.8.8.0/24 prefix-length=24 invert-match=no action=passthrough set-bgp-weight=100 set-bgp-prepend-path="" I would apply this to the BGP1? Thanks! https://wiki.mikrotik.com/wiki/Manual:Routing/BGP https://wiki.mikrotik.com/wiki/Manual:BGP_Best_Path_...

schadom

Hello, could BGP route matching might be optimized in a future ROS release? For example ip route print detail without-paging where bgp-as-path~"15169\$" which should return all ~485 IPv4 prefixes for Google's AS15169 takes around 30 minutes for full output on an CCR1016 with two BGP full t...

schadom

Without actually having a look on your config it's hard to tell.
Please provide the output of /routing filter export and /routing bgp peer export hide-sensitive

schadom

Mikrotik might consider dividing their software into different releases like Cisco does with IOS, IOS-XR and the SMB stuff.
You mean, like RouterOS and SwOS?

Lol yeah...

schadom

Where to sign up?

schadom

Mikrotik might consider dividing their software into different releases like Cisco does with IOS, IOS-XR and the SMB stuff.
Requirements are simply too different. CCR as BGP edge router, an access point or a home router are simply not comparable.

schadom

We've encountered this particular error message already with other VMs after kernel panics occurred. As a workaround, you could try to edit the CPUID mask settings and check if the CHR-VM might boot again: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.vm_admin.doc/GUID-E64FC69D-E8...

schadom

What's new in 6.43.6 (2018-Nov-07 10:40):

(factory only release)

What's new in 6.43.5 (2018-Oct-25 12:37):

(factory only release)

Just wondering why two versions have been skipped? Never seen that before

schadom

I'd love to see some routing and BGP-related improvements and features (like RPKI Origin Validation). According to ROS changelogs, it's now almost over a year ago since the last BGP-related fix has been released: What's new in 6.41 (2017-Dec-22 11:55): ... *) bgp - added 32-bit private ASN support; ...

schadom

WTF?!?! I thinked that mikrotik realy cool device... this is unreal, openvpn client without support UDP!!! Without support SHA512 and SHA256. Same mikrotik don't support DoH (DNS over HTTPS) such as cloudflare and google! What kind of stupid developers creating and updating reuterOS ?! Calm down. A...

schadom

BGP BGP BGP BGP BGP BGP BGP BGP.... \:D/

Agree with that. +1 for improved BGP performance and RPKI/ROV support.

schadom

Already tried that, no difference. From my perspective a reject rule without any attributes (inculding address-family) should always reject everything. address-family="" on the reject rule would only reject routes where address-family = NULL, which should never be true. If you want it to ...

schadom

I think the address-family="" in your reject rule is probably causing it to not match anything.

Already tried that, no difference. From my perspective a reject rule without any attributes (inculding address-family) should always reject everything.

schadom

Development takes time and resources. And when I say resources, I mean people-hours and brainpower. We are working on it, don't worry. @normis: Personally I believe that most of the issues are due to the closed source and properitary nature of most of the components used within ROS. Instead of re-i...

schadom

Hello, we are currently using something like ... 0 chain=ixp-peer-in bgp-as-path=^6451[2-9]|645[2-9][0-9]|64[6-9][0-9][0-9]|65[0-4][0-9][0-9]|655[0-2][0-9]|6553[0-5]$ invert-match=no action=discard 1 chain=ixp-peer-in bgp-as-path=^420[0-9][0-9][0-9][0-9][0-9][0-9][0-9]$ invert-match=no action=discar...

schadom

BGP route filtering seems broken starting with v6.43.x. Eample below. IXP Peering: > routing bgp peer print detail where name=AS_SOMEPEER Flags: X - disabled, E - established 0 E name="AS_SOMEPEER" instance=default remote-address=x.x.x.x remote-as=12345 tcp-md5-key="xxx" nexthop-...

schadom

@ghusson As you are a consultant for proxmox. Can you please tell me the performance of proxmox on Mikrotik running as pppoe-server. I got very poor performance on all the servers. Mikrotik couldnt give me any answer other than "try hyper-V". In proxmox performance degrades after 800 pppo...

schadom

And hopefully some new ARM64-based hardware as CCR replacement.

schadom

I hope they focus on developing their proprietary stuff in a way, so that kernel upgrades will be less of a hassle in the future like 4.x to 5.x

schadom

Have MikroTik ever had a discussion about the format of rackmounts. So to be able to mount TWO instead of only ONE RBx00x device in 1 rack-unit ? Would love to have the option of mounting 2 RBx00x devices in 1U instead of having to use 2U. See this example from Juniper SRX100: https://rickmur.com/w...

schadom

AWS costs is around 10 EUR per month. Is there any other cheaper Cloud service dedicated or supported for RouterOS?

cheaper? serious?

schadom

AWS, Azure, Google, Rackspace, etc ...

AWS has an official CHR image on their marketplace: https://aws.amazon.com/marketplace/pp/B01E00PU50

schadom

RPKI/ROV guys, please. No need to re-invent the wheel.
See RTRlib for a lightweight, open-source C library: http://rpki.realmv6.org/

PS: Perfect for a weekend hackathon @ Mikrotik HQ while the weather outside is bad

schadom

I'm sure it's just a matter of time before we cannot even peer in the in exchange without it. If you have valid ROAs for all your routes, no need to worry with IXPs or routeservers for now, although ultimately we also need to increase ROV adoption among networks, therefore we need routing software ...

schadom

RPKI/ROV guys, please. No need to re-invent the wheel.
See RTRlib for a lightweight, open-source C library: http://rpki.realmv6.org/

schadom

Screenshot 2018-10-23 at 08.41.39.png

And now a screenshot from a folder one level deeper please.
Just to make sure those are not empty folders

schadom

https://wiki.mikrotik.com/wiki/Manual:Routing/BGP
https://wiki.mikrotik.com/wiki/Manual:BGP_Case_Studies
https://wiki.mikrotik.com/wiki/Manual:BGP_HowTo_%26_FAQ

schadom

Not yet, but soon

schadom

They are aware but they don't care :lol: According to their job listings page they are still looking for C/C++ and embedded systems devlopers in Latvia for over six months now! Frankly, to me it seems their development team is fully occupied with other stuff (ARM/NV2-mess, w60g, etc.) and they urge...

schadom

Some Internet Exchanges are going to start requiring RPKI validation to participate in 2019. MIKROTIK NEEDS TO RELEASE A RELIABLE RPKI IMPLEMENTATION BY THE END OF THE YEAR! Yes, SwissIX for example. MT please really consider to implement RPKI in ROS. Most other vendors already have it and the tren...

schadom

Any update on BGP4 SNMP MIBs?

schadom

CCR1009, memory usage higher then normal and keep increasing slowly when compare to 6.42.7, I am talking about 100MB+ different, as I had schedule reboot so dunno if it just higher memory usage or leak. Upgraded our CCR1009s to 6.43.4 yesterday and no issues so far. In our case memory consumption e...

schadom

Yes, you can. maybe anyone has an example? I know that ROS has /interface 6to4 but since 6in4 (STI) and 6to4 (STF) are NOT the same, the wiki article is misleading: https://wiki.mikrotik.com/wiki/Manual:IPv6_Overview#6to4_.286in4.29_tunnels https://en.wikipedia.org/wiki/6to4 https://en.wikipedia.or...

schadom

hi, is it possible to configure a 6in4 (SIT) tunnel server / endpoint in ROS? not as client for a tunnelbroker like HE, but rather to act as a tunnelbroker itself. with iproute2 on linux this works with something like ip tunnel add tun-6in4 mode sit remote <client ipv4 addr> local <local ipv4> ip li...

schadom

Yes, it will keep working with full functionality, but will not allow upgrades. At least for now. Further restrictions could be added in time. @normis: Just as an idea wouldn't it be possible to integrate some kind of license generation tool over at mikrotik.com based on some sort of HW identifier ...

schadom

making RouterOS great again.

RouterOS first!

schadom

I don't agree with "automatic update" we already have too many problems with windows 10 (like the last update that erased a lot of data?) we don't want that with mikrotik, i need to trust my rigs, I know I trust mikrotik as it is now. We should have automatic security updates. Security up...

schadom

BlueField goes up to 16 A72 cores. It has PCIe 4.0 and 100GbE/IB.

http://www.mellanox.com/related-docs/np ... ld_SoC.pdf

That SoC indeed looks really nice.

schadom

Top story at HN at the moment: Some Russian guy claims he secured 100k MT devices which were vulnerable and openly accessible via the internet. He added some firewall rules and left an informational message for the device owners, some of which recently reported here in the forums that their router a...

schadom

Yes, we are aware of this peculiarity and we are working also on new routers that have higher power per core, not just many cores.

Awesome! Please consider a new CCR with ARM, 12G-4S+ and redudant PSUs.
Would be ideal for smaller environments where you have fiber uplinks and access with copper.

schadom

Stop with the multithreaded BGP.
https://m.facebook.com/story.php?story_ ... 4744771319

Ok then what about a new CCR series with beefy x86 quad/hexa/octa/deca-cores

schadom

Newer hardware is still needed because Mikrotik does not fit well all basic needs.

Of course it is, but throwing new hardware on the market still won't fix any of the existing software-related issues and limitations.

schadom

Things improve over time. Improvement needs time, I agree, but many of the issues related to the routing-engine are known since at least 2012, the year in which the CCR-series and 6.x were released. Since then we've been told multiple times to just be patient and wait for ROSv7. Now it's 2018 and s...

schadom

Thank you for the benchmark. The outcome of this must literally feel like a punch in the face for those business customers who bought the fairly expensive CCR1036 or CCR1072 models in the past. The new RB4011 seems to outperform the CCR-series in BGP convergence time - and that for just 200 bucks! @...

schadom

+1

We have plans for RPKI in RouteroS v7

MT might consider backporting RPKI from ROSv7 to 6.x

schadom

We encountered an issue with the /routing bgp advertisements print detail where ... command which seems to crash/reboot our CCR1009-7G-1C-1S+s running on 6.43.1. We have two BGP full feeds with each approx. 720k IPv4 and 58k IPv6 routes, Cymru feed with 105k bogon prefixes and we redistribute a full...

schadom

from here :
https://www.reddit.com/r/Windscribe/com ... ard_setup/

how about SHA512 auth,
I can not use my windscribe account

+1 for sha256/sha512 in openvpn
seems it got implemented for ipsec recently

schadom

MT please consider doing some BGP and routing-related fixes for christmas.
Would make A LOT of MT users very, very happy! Just to give some examples:
- multi-threading
- BGP4 SNMP MIBs
- better BGP convergence time
- faster route table searches
- fix ipv6 route reflection
- add RPKI support

schadom

I'm wondering about Mikrotik's long-term orientation and strategy (if there is any)? As far as I'm aware of, besides the pretty active MT community and userbase, the fact that MT makes use of standard hardware components, your internally developed ROS-software seems to be among your biggest assets s...

schadom

Yeah, why not? For home-use, private projects and WISPs - Mikrotik is a great choice.
For serious businesses and enterprise MT currently is awful and a waste of money in my opinion.

schadom

It is indeed a slippery slope. What if MikroTik took us to the test and started some outside funding project on kickstarter (or whatever crowdfinance portal) in order to get major development done? This way we could (hopfeully) keep our beloved MikroTik HW+SW, but we could help advance their effort...

schadom

Is there any fundamental reason why mikrotik does not support RFC 3021, so it is compatible with other vendors (cisco) without problems?

Same as with many other things here...
Hundreds of requests by many customers over years and they simple ignore it

schadom

Remember that in MikroTik RouterOS, backup file is for restoring past configuration on the same device, not a safeguard against a lost or damaged device, for restoring on other devices, you should be using "export" config files. Why can't device-specific stuff like MAC-addresses simply be...

schadom · Re: MIkrotik BGP Monitoring Thread created at Wed May 22, 2013 7:14 am bump

Thread created at Wed May 22, 2013 7:14 am

bump

schadom

Please consider some BGP fixes and improvements for 6.44: - make route matching via /ip route print where=.. with BGP full feeds faster - do not reset/re-establish a BGP session when it's comment is changed - improve overall BGP convergence time on CCR/tile + introduce BGP4 SNMP MIBs + introduce pri...

schadom

Make sure you are using the latest Winbox release (v3.17) then it should work:
https://download.mikrotik.com/routeros/ ... winbox.exe

There had been some changes within the authentication process.

schadom

Upgraded two CCRs to 6.43 and no issues (including the described ones above) so far. Only thing we noticed that the OpenVPN bridge was disabled after upgrading and we had to re-enable it manually. *) winbox - fixed "sfp-connector-type" value presence under "Interface/Ethernet"; S...

schadom

Hello,
please consider implementing BGP4 SNMP MIBs in a future ROS release.
This feature is long-awaited and was requested already years ago.

https://tools.ietf.org/html/rfc4273
http://www.oidview.com/mibs/0/BGP4-MIB.html

Thanks

schadom

Would be very nice to see some routing (especially BGP, BGP4 SNMP MIBs, etc.) improvements for 6.44!
Also currently peering session re-connects when it's comment is changed in Winbox. This is annoying and could be changed.

schadom

Hello.. I have a similar question and a problem I am facing for a while and have not received a proper solution. We have 2 bgp peers. Problem faced: No pages load all of a sudden no pages load. If we shutdown one peer everything works great. The only solutions is to restart the router. What it look...

schadom

Actually old firewall protected router just fine. Users ef-ed up configuration and did not adjust firewall accordingly. Of course we will think about improvements, but there will always be the case when somebody change something and complain that router is not secure. Thanks mrz for all your effort...

schadom

Has anyone ever managed to get a custom kernel running stable on the CCR-series (tilegx) hardware? I'm aware of some initiatives by the openwrt community but it seems it got silent around it a few months ago... https://forum.archive.openwrt.org/viewtopic.php?id=50897 Although there will be no offici...

schadom

More than four (4) years since my initial post, and still there is no proper ECMP support ... Welcome to Mikrotik... I guess they should remove the "Router" from "RouterOS", as it seems there had been no progress on the routing engine for years now. Instead hundreds of fixes for...

schadom

I deeply disappointed by Heise to not investigated further for them selves and inquire with Mikrotik. I had high regarded for Heise as a reliable and trustworthy news source. That they neglected the bugfix version and declared any version below 6.42.x as unsafe. That Heise made this blunder is shoc...

schadom

Before we did not all times had to update the firmware. If Mikrotikvonly increase the firmware version number if there has been a change to it in real you could spare yourself a load of second reboots. Or they combine package update and ROS firmware upgrade into a single process, which would be the...

schadom

This has been asked many times since the new routerboot firmware versioning but it has been ignored.

Hopefully they will fix it somewhen

schadom

The current ROS software update and firmware upgrade process is way too slow and time-consuming. While two reboots might be no problem for a home router or AP, in fact it is a HUGE PROBLEM for core routers having lots BGP sessions. In combination with the still very poor BGP convergence time on all ...

schadom

While two reboots might be no problem for a home router or AP, in fact it is a HUGE PROBLEM for core routers having lots BGP sessions. In combination with the still very poor BGP convergence time on all the CCR models, the current situation is very unsatisfactory. Mikrotik please finally fix the upd...

schadom

*) sfp - hide "sfp-wavelength" parameter for RJ45 transceivers;

"sfp-connector-type" is still falsely displayed as "LC" for S-RJ01 modules in Winbox and CLI

schadom

The main problem with Mikrotik/RouterOS in my opinion is the default "accept any", whereas it should be "reject any except..." instead. Mikrotik might consider shipping future ROS devices with a stronger default firewall ruleset which locks down all services except Winbox/SSH fro...

schadom

I think the router cpu’s temperature not high.

Can't confirm that issue. Just checked some of our CCR1009's and their CPUs
are operating at around 50-58°C which is absolutely normal for TILE-Gx9 processors.

schadom

RSS is good, but will be nice to have some mailing list for security announcement and firmware update

+1 for security announcement mailinglist

schadom

Mikrotik did a good job in timely fixing and communicating the security issue with their customers. It's not their fault but many admins and device owners are just lazy or do not check the news. @MT: Maybe a security announcement mailinglist like other vendors offer them could be beneficial for the ...

schadom

Yes sure, but how useful is a roadmap when it is not followed anyway? The actual route being taken depends much more on the ideas of the day than on a long term planning. It isn't even clear what market is being focused on. There used to be a direction towards businesses, with larger and more power...

schadom

I'm not sure. In the past there have been lots of promises w.r.t. development and that has mostly lead to disappointment. But now, sometimes nice features suddenly appear in the RC version. While this might be true, for many business and enterprise cusomers the current situation of constantly hopin...

schadom

Good evening,

I'm wondering why Mikrotik never considered publishing a development/feature roadmap for ROS?

I think this would be quite nice.

Thanks

schadom

We currently have a CCR1072 with 2 full peers, 100 BGPv4 sessions and 120 routing filters. 0 firewall rules It works? Well, it's routing about 8gbps at peak hours. Maximum CPU usage is 10% (one core ALWAYS at 100%). Similar scenario here, although within a much smaller environment: * CCR1009-7G-1C-...

schadom

It's rather a design glitch than a bug but we noticed that the S-RJ01 modules in v6.42.6 are displayed with sfp-connector-type: LC instead of RJ45 in both Winbox and CLI:

winbox.png

Thanks

schadom

i will invite u to drink it with me :-) i can't believe for what i need 36 cores on tile .... Concerning the CCR/CRS'es, while being very ambitious at the beginning, to me it seems Mikrotik has lost it's interest in getting into the core-routing and -switching market. Maybe the competition among th...

schadom

I hope that bgp monitoring with snmp will be implemented soon.

four years later and BGP4 MIBs are still missing in ROS

schadom

Will we ever see some improvement here?

schadom

Hi, we have a CCR1009 with a BGP full feed (~702.000 IPv4 and ~55.000 IPv6). Matching routes for a specific originating-AS eg. via ip route print detail where bgp-as-path~"15169\$" sometimes takes up to 5 minutes. The router is running on latest ROS 6.42.5 and CPU usage is at around 10% in...

schadom

Can't we have some basic improvements to BGP in router OS 6, rather than waiting on the mythical v7?

- Commands like ip route print where... way too slow
- Multi-thread BGP

+111!!! and BGP4 SNMP MIBs

schadom

Hello, during the last 12-24h we noticed a lot of the following log entries below on our MT devices. The requests are mainly originating from China and Asia: 17:29:59 ovpn,info TCP connection established from x.x.x.x 17:29:59 ovpn,debug,error packet with wrong keyID 1, expected 0, dropping 17:29:59 ...

schadom

Will we ever see BGP4 SNMP MIBs on ROS? Please!

schadom

schadom

Short question; does ROS support RFC7911 - https://datatracker.ietf.org/doc/rfc7911/ ?

Thanks

schadom

schadom

schadom

MTs argument is that such a feature would make it easier for an attacker to remove edvidence. I don't think so as there are also other ways around that (like the workaround with setting the lines to 1 and back) or just rebooting the device if logs are only kept in memory or simply wiping the logs on...

schadom

Unless you have a switch chip, its single bridge for all VLANs. Also, why are you explicitly disabling hardware offloading? You may also need to add the bridge name itself to the "tagged=" list for trunks to other devices. Thanks for the hint. The example given is from a CCR which does no...

schadom

Here is a presentation from the MUM in Berlin, explaining the new bridge implementation pretty well: https://www.youtube.com/watch?v=ZMMpza-O7_w&

Thanks!

schadom

Anyone?

schadom

Hi, I'm wondering about the new bridge implementation since 6.40.x. Is it recommended to have a single or multiple bridges when a bunch of tagged vlans should be bridged to different ether ports? For example, let's assume we have three physical ether ports (and no switch-chip) and three tagged vlans...

schadom

Steve is right. There is barely anything left in v7 that we haven't backported. Please enable openvpn udp support and also ability to manually enter ip for ovpn tunnel in pop profile that can be used for bgp next hop resolution.These two bugs are stopping me from using mikrotik for my DN42 network....

schadom

*) snmp - added w60g support;

BGP4 MIB (RFC 4273) next please

schadom

Did not found how to pm here. Wonna honest answer? Go mx80 for your business. second that. if you could talk your upstreams into limiting your bgp-view (ie only local routes and no full feed) you might still have fun with CCRs. Would you mind elaborating a bit more in detail, why your suggestion to...

schadom

We see a development (and others too) port scanning for winbox 8291 is dropping while port 2000 (bandwidth-test-service) is going strong. Also telnet ist still highly active with those hijacked mikrotiks. Can confirm this. Although no clue yet if port 2000 is used just for probing or if there is an...

schadom

Would like to bump the feature request for SHA256 authentication. SHA1 is broken - https://shattered.io/
No need for other complicated features such as udp or lzo, as long as the current implementation is secure enough.

Thanks

schadom

works good so far!

schadom

Please check whether this OVA suits your needs and can be deployed on the ESXi without any additional steps: * It has SCSI drive * It has been exported from the ESXi https://www.mikrotik.com/download/share/RouterOS_CHR_SCSI.ova If this suits your needs we'll see how to automate the creation of such...

schadom

In our build environment we use Qemu tools to convert images to various formats (qemu-img convert), including to VMDK. To convert a VMDK image created by Qemu to ESXi compatible format, VMWare tools (vmkfstools) are necessary. They are provided together with the ESXi server so you can do it on your...

schadom

whenever that is.

haha

schadom

My top three would be:

* open-vm-tools and xen-tools
* ova/ovf for ease-of-deployment
* BGP multicore support

schadom

i have the same problem. any solution?

schadom

Since you already do BGP just solve it with that. For ISP A, accept the same routes you prefer ISP B for but use AS path prepending and local preference to make them less preferred than the ISP B path. For ISP B, accept only the routes you want and prefer that link for those routes with normal BGP ...

schadom

Hello, I'm trying to implement some sort of policy routing by using connection- and routing marks in order to return incoming traffic on the same outbound path. Basically I'm having two upstreams ISP A and ISP B, which both send me a default-route via BGP. > ISP A is main-uplink (local-pref=200 and ...

schadom

Please add install iso file for CHR! It would massively easy up life for most of people(no need for separate guides and so on - just install from ISO like nearly any other system and it will work for cases like ProxMox where we don't have actual VM file but have compatible KVM ). +1 for ISO or OVF ...

schadom

Winbox 3.11 currently misses the "Dst. Address" filter attribute under IPv6 => Routes
Maybe this could be added in v3.12

Thanks

schadom

Short answer: no.

schadom

Please add the 'Comments' column and the 'Add/Edit Comment Button' which is currently missing in WinBox 3.11 under Routing =>BGP => Networks Routing => BGP => Aggregates Interestingly it is available in Routing => OSPF => Networks, but missing in all of the other tabs While I personally prefer the C...

schadom

Is the checkbox "Limited Upgrade" checked or not?

It's not checked.

schadom

I think I (might) just have fixed this. What I did is I generated a new System ID on the CHR (Generate New ID), afterwards I logged into mikrotik.com and transfered the purchased license from the old System ID to the new one.

Edit: nope, still looks like a trial license

schadom

Currently in 6.39.2 BGP sessions are reconnecting when adding/changing the comment of a session.
This makes no sense to me. Maybe this behaviour could be removed in an upcoming release?

Thanks

schadom

This kinda sucks. Any hints from MT staff/devs?

Thanks

schadom

Hi,

currently in 6.39.2 BGP sessions are reconnecting when adding/changing the comment of a session.
This makes no sense to me. Maybe this behaviour could be removed in an upcoming release?

Thanks
Dominic

schadom

Any clues? Do I may just have to wait till 18.07. until the purchased license becomes active?

screenshot.png

schadom

Thanks for this vital information. I wish Mikrotik would create a separate manual for CHR installation in ESXi and include these vmkfstools instructions (they are REQUIRED!)

Or rely on industry standards such as OVF...

schadom

Hello, I've bought a P10-perpetual license for CHR. The license is visible and assigned to my CHR with the proper sytem-id xxxx within the license portal. It even updates the "Last Seen" value continuously, but the CHR still shows me the installed license as P1. I tried to perform a licens...

schadom

HI, i'm trying to blackhole a single IPv6 on my upstream (HE) via a filter rule attached to the BGP instance with out-filter . Unfortunately and no matter what I try, it seems I cant get this it to work. Maybe any hints? Attached my current config. Thanks in advance [rtradmin@core] /ipv6 address> pr...

schadom

Still not really fixed in 6.39.2 ... [rtradmin@core] > /ping ipv6.google.com invalid value for argument address: invalid value of mac-address, mac address required invalid value for argument ipv6-address failure: dns name exists, but no appropriate record Although /ping [:resolve ipv6.google.com] wo...

Search found 156 matches