Hi All, On the router, I am seeing the bytes statistic for rules blowing out to 10 Exabytes being processed by the rule (yes that is 10,985,223,496GB, 10 BILLION GIGABYTES!). The packets processed are negative 16-digits long. https://i.imgur.com/wQJ9EzF.png Why would the router be doing this? The on...

Hi there, Given the current problems with IPv6 on Mikrotik, I would strongly suggest waiting before you deploy it. Want to know why? Read these links... https://forum.mikrotik.com/viewtopic.php?t=147076 https://forum.mikrotik.com/viewtopic.php?t=147048 https://indico.uknof.org.uk/event/46/contributi...

Hello All, I've followed the instructions from 1 to 8 on the GitHub page, however before $HAInstall gives me the info to bootstrap the second router, it reboots and kicks me out. How do I bootstrap the second router? Thanks, Christopher H. **EDIT: I worked it out - had to re-run the $HAInstall comma...

Hello, I would configure AS Path prepending (using the set-bgp-prepend directive) on the filters, instead of using weights. You want to set the prepend on the backup sessions, however this would require you to have multiple chains for your primary and secondary sessions (although I would suggest hav...

The best Mikrotik device i would recommend for your needs its called "Juniper MX104"

How is a "Juniper MX104" a Mikrotik router?

Hello All, I know the answer to this question (and I am sorry for asking), however another MT user does not believe me and I need to prove a point. Here is the example: I have two carriers, ISP 1 and ISP 2 to which I am announcing the same prefix, 192.0.2.0/24. I want to preference ISP 1, so that an...

Hi Glen,

Sorry, this forum doesn't have Private Messaging enabled. You can contact me via Skype instead, my Skype name is "christopher.hawker" (without quotes). More than happy to check over your configs.

Thanks,
Christopher H.

Hi there,

It is quite simple to achieve this - all you need to do is create an EoIP tunnel between the two routers, and place the interfaces on each side into a bridge. Ensure that you don't have DHCP enabled on both sides (only set it on one side) and you're done!

Thanks,
Christopher H.

Hello godzone, To begin with, I would test basic connectivity before I even thought about neighbor solicitation as the issue. Make sure both routers have the VRRP interface configured on the same network. Check that the VIP is configured on the VRRP interface. Configure an IP address that is in the ...

When you say that "BGP community attribute is limited to 4bytes in total by the standard", which standard are you referring to? Mikrotik's standard? IANA's standard? It is quite unclear. Support for 4-byte AS numbers should be considered a priority, as there are a fair few carriers, transi...

Hello All, With setting and configuring BGP Communities, the "bgp-communities", "set-bgp-community", and "append-bgp-communities" properties for Route Filters do not support 4-byte AS numbers (or any AS number over 65535, for that matter). As far as I can tell, this is ...

The manual isn't clear on why this would break in my situation. Can you explain why it caused the ipip tunnel to flap? I imagine it would be something similar to this. I had a similar issue with BGP over an EoIPv6 tunnel. You are establishing BGP over the tunnel, BGP installs routes and tries to ro...

And if the carrier is using ND for gateway assignment, I'd simply select the interface in place of adding the gateway? The tunnel still flaps, about once every 5 to 10 mins, not ping-pong like before. Any further ideas?

When you say "Add static route to tunnel remote end", (using Router 1 as the example,) what prefix am I creating the route for, and what would the gateway address be?

As a parent of a 2, 3, 5 and 8 year old speaking. Have you considered saying "No"? No scripting needed. The only "script" you'd possibly need is a CD set to loop saying no :lol: In any case, use ScreenTime. If they know the password, change it. Simple and no need to be jerking a...

Hello,

You could use something like this:
Regards,
Christopher H.

Hello All, I have 2 CHRs in different locations, with an EoIPv6 tunnel between them. Each router in each location has it's own upstream peer (different ASNs), and when I try to establish a BGP session between the two CHRs, the tunnel starts flapping like a fish out of water. I've tried filtering out...

Can You tell me some stats about this router? Like the memory usage and process load? Are You using filters on the full route ? Hi there, The CCR1009-7G-1C-1S+ has the below specs and features: 1 x 10G SFP+ cage 1 x 1G Combo SFP cage / Ethernet Port (caveat is that you can only use either the SFP o...

Hi there, The CCR1009-7G-1C-1S+ is (in my opinion) an excellent router to use for BGP. I have one in a Sydney AU datacentre and it loads a full BGP feed (about ~750,000 routes) in less than 2 minutes. They are quite flexible, however the only downside is the fact that it's only got 1 x 10Gb port (I'...

Another suggestion is to advertise smaller prefixes to the IX (so if you had a /22, advertise /22 to cogent but 2x /23's to IX) to ensure those listening on the IX prefer your IX routes more. This would have to be one of the worst ways to "force" carriers to prefer a certain route. There ...

you will loose only 2 IPs on a subnet that is running VRRP on IPv4.

How is it possible that I have it working with only using the one IP address? I have .254 configured on both routers as the IP on the VRRP interface, and the physical interface has no IPs configured.

For what it's worth, I'm not sure about this statement:

lose 3 IPs per subnet due to VRRP

I have the one floating IP running on a VRRP config between two CHRs and it works flawlessly for me.

I'm sorry, but the description of your problem and the network diagram doesn't makes sense. Correct me if I am wrong, this is how I deciphered it: The Problem The network 10.9.8.0/24 currently has content filtering in place, preventing access to YouTube. Network 10.9.7.0/24 does not have any content...

Hi Dave, I certainly hope you are intending to use the bittorrent protocol for seeding Linux ISOs, or other content which is permitted to be torrented and not any copyrighted material. A Google search for the phrase "configure port forward mikrotik" yielded this as the second result: http:...

Hi sentu,

How is the external internet connectivity routed? Is it via the local gateway at each site, or is all internet traffic routed back to the head office?

Regards,
Christopher H.

what size is the range you are advertising to your provider? if for example it's a /23 advertise the two /24's on R1 and advertise the /23 on router 2, this will force traffic coming in on router 1. This is not a good way of doing it as things have the potential to get messy, real quick. I've just ...

Hello BGDS, If I understand your question correctly, your router is routing all your traffic out via Cogent and not using the NetIX connection? Based on the Hurricane Electric BGP Lookup (https://bgp.he.net/AS209702), you currently have a BGP peering session with both NetIX and Cogent. There are a f...

Is there any particular requirement to use OSPF, instead of BGP? I find BGP is easier to configure, and the route filters work without troubles.

Hi All, Just looking for some input/feedback into a BGP and VRRP setup I have with my upstream provider. Let me explain: The Setup Two VMs are configured as BGP routers. Both have BGP sessions configured to the carrier's router using IP address 203.0.113.22 (via multihop) to the same carrier and ann...