Does this mean all traffic would go through the CPU rather than using the hardware offloading then? Yes. But if I get your use case right, most of the traffic will be routed anyway, so even if the tagging and untagging was done in hardware, the limiting factor would be the router's CPU throughput. ...
Hi. When using the DHCPv6 relay, I can see that the MikroTik is adding an option 18. but I am not sure what the value relates to: Capture.PNG 000000e = 14 as a decimal. Interface 14? I dont have an interface 14. No option 37 is added - which should be remote circuit ID, similar to DHCPv4 Option 82 -...
what I am trying to do is only have 1 DHCP server and 1 IP for all VLANs. Basically I want to treat the VLANs as a cable into a switch. That's not the way how VLANs are normally used, but if you insist, you can use the following: /interface vlan add name=ether5.10 vlan-id=10 interface=ether5 add na...
interface bridge port add bridge=HomeBridge ingress-filtering=yes interface=eth5 /interface bridge vlan add bridge=HomeBridge tagged=HomeBridge,eth5 vlan-ids=\ 2,3,4,400 Obviously on the router you have to define each vlan -vlan's interface is the bridge. -IP pool for each vlan -dchp-server for eac...
The bridge is completely missing in your drawing, but I guess I've got the point. Like any other port of the virtual switch called "bridge", its virtual port named "bridge" can have a single "native" VLAN configured - in another words, it may act as an access port to a...
All your requirements are bogusly stated as configuration items (and thus you put yourself in a box). Instead state your requirements in terms of use cases....... what it is you would like your users to be able or not to be able to do. Draw a network diagram showing the basic connectivity planned. ...
Is it possible to untag on to the bridge using VLAN filtering. I can set the config, but doesn't seem to work. i.e Ether 5 has VLAN 1000 on, I want to untag VLAN 1000 on to the bridge and add an IP address and DHCP server to the bridge. The only way I can get this to work is adding an interface vlan...
DHCPv6 is not sending the same attributes to RADIUS as DHVPv4. DHCP snooping Option 82 is enabled on the bridge All of the following are missing: ADSL-Agent-Remote-Id agent-circuit-id agent-remote-id Means there is no way to actually ID the user to give them the right prefix. Every corner I turn thi...
Testing the new Delegated-IPv6-Prefix via PPPoE software version 6.48 First PPPoE authentication is successful - prefix is assigned from RADIUS When a second user dials up. There is an error: could not add dhcpv6 server with pool : server with such name already exists (7) This seems to stem from the...
I use pppoe, one server per each Vlan, not bridging them. 600 users at the moment with CCR 1036. No connection tracking. Simple queues in radius profile. Works like a charm. Less than 10% CPU usage. Enviado desde mi Mi A2 mediante Tapatalk Thats really useful to know thank you. How do you find the ...
A wholesale provider is handing over traffic using QinQ - with S-VLAN and C-VLAN IDs I am looking for the best way to terminate these connections using RouterOS. Is the only way to attach a PPPoE server, or DHCP server to each VLAN individually? How does this scale performance wise with several hund...
Testing the new Delegated-IPv6-Prefix via PPPoE software version 6.48 First PPPoE authentication is successful - prefix is assigned from RADIUS When a second user dials up. There is an error: could not add dhcpv6 server with pool : server with such name already exists (7) This seems to stem from the...
Hi, I have an RB1100x4, which I am trying to use as a VPN server. I am using IPsec SHA1 AES-256-CBC connecting with Windows 10 clients. The connections are establishing fine and everything is working. However when downloading via SMB3 from the server I am only achieving around 40-80mpbs of a 250mbps...
The default route is set to Gigaclear. I then have a script running that checks connectivity to this ISP and if it has failed marks this route higher that the 2nd ISP. What is the best way for checking for a CPU spike - a graph? You can enable graphics to the CPU, on the router itself. tools -> gra...
With regards to dhcp renew, does the ip actually change? If not it means that a process will request extension, and process response, a pattern like so many running over the router. That in itself will not result in increased latency. No the addresses provided from each ISP never change - they are ...
The default route is set to Gigaclear. I then have a script running that checks connectivity to this ISP and if it has failed marks this route higher that the 2nd ISP. There is other stuff connected to ports 3,4,5 so I think moving the Gigaclear connection over to port 13 is definitely worth trying....
I do have around 30 firewall rules, plus NAT's to differnt PUBLIC IP addresses' for different subnets, and also connection tracking. Do you think all this could cause the problem? CPU usage is only showing 1 - 2 percent when I have inspected it
Thanks for the help guys, The 1st ISP Gigaclear is connected to port 1 and the Second ISP AAISP / BT is connected to port 2. However both connections are not used at the same time, the second connection is only a backup so it's only used if the primary fails so I don't think its a switching chip pro...
Hi there, I have two completely independent internet connections fed into my RB1100AHx4. One is a 250mbps up down "gigaclear", the other is a 40mbps download 5mbps upload "BT" connection. In everyday use only the gigaclear connection is in use, the other is an on standby backup 2...
Hi everyone, I have configured the new MS Always on VPN technology that uses RADIUS, Active Directory Certificate Services and Windows RRAS: https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-overview Apparently it is possible to use an...