MikroTik

netrat

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer I have 2 mikrotiks with hurricane 6to4 tunnel and v5.8 and are working correctly. I went back to v5.6 and the same router with the same config started to work again. Obviously, there is some ...

netrat

Did you try enabling the advanced rate selection? Please post your wireless config...

/interface wireless export

netrat

While we are on the topic does anyone offer a 900MHz MIMO card yet?

netrat

client-to-client-reflection should only be used on the route reflector(s). In addition all of the peers on the route reflector(s) should have route-reflect=yes.

http://wiki.mikrotik.com/wiki/Manual:Routing/BGP

netrat

Post your config, specifically

/interface bridge export
/interface vlan export

netrat

Assign the IP addresses to the bridge interfaces and not the VLAN.

netrat

Add VLAN 66, 3, and 5 to the WDS interface. Bridge the ethernet VLANs with the WDS VLANs.

Post up your configure and it'll be easier to help you... What WDS interface is for OCB and STW?

netrat

350m isn't that bad. I'd probably give 900MHz a try and just use one access point.

netrat

I submitted a trouble ticket on 9/13, [Ticket#2011091366000468], and still haven't heard anything back. I know that they sometimes fall through the cracks and you have to send a friendly reminder. How long do you guys normally wait?

netrat

If you want a detailed setup then hire a Mikrotik consultant.
http://www.mikrotik.com/consultants.html

netrat

I've also had problems with cpu usage pegging to 100% in 5.6 and 5.7, but mine has always been the routing package. I submitted a trouble ticket #2011091366000468 with a supout, but no word back yet. Keeping my fingers crossed!

netrat

No I don't believe that's possible with RouterOS. That is a feature on higher end switches, not routers.

netrat

I'm assuming you are talking about securing the wireless link? Between the SXTs use 802.11n with NV2 and use a security key. Then use VPLS to provide layer 2 bridging. This setup will provide the least overhead.

http://wiki.mikrotik.com/wiki/Manual:Nv ... v2_network

netrat

I tried to use WDS between access points with NV2 but it does not work. As access points are not synchronized, i suppose that it is not possible to use NV2 with WDS ? In the end, i suppose that it is not possible to use more than one NV2 enabled access point on the same channel, or it will conflict...

netrat

Yes I noticed that I cannot use NV2, didnt knew why... I guess its about update now... I will try to update them. What about other opinions? About MCS, or about using WDS? I don't think WDS and NV2 are compatible, but I'm not 100% on that. Why are you using WDS? Can you not setup the network to be ...

netrat

In the terminal, telnet, or ssh you need to do /interface eoip export, /interface bridge port export, etc and post the results. We need to see the actual config on the router.

netrat

Please post your config for /ip address, /interface eoip, /interface bridge, and /interface bridge port from both routers.

netrat

add action=drop chain=input comment="default configuration" disabled=no in-interface=ether1-gateway add action=accept chain=input disabled=no dst-port=1723 protocol=tcp add action=accept chain=input disabled=no protocol=gre You need to put the two allow rules for GRE and tcp port 1723 bef...

netrat

I'm hoping 5.7 will be released today! Interested to test out the increased performance.

netrat

I'm gonna give this one bump then forward my question to support.

netrat

http://gregsowell.com/?p=1290

netrat

Your best bet would be to setup two VPLS tunnels, one over the 70mbit link and the other over the 50mbit, and then use interface bonding. I don't believe mikrotik's implentation of TE tunnels supports load balancing.

netrat

I've just recently starting experimenting with MLPPP over single link PPTP connections. I've noticed that large packets do not fragment properly and I'm wondering if it's a problem with my config. If I setup a regular PPTP connection with MRRU disabled and a 1460 byte MTU packets fragment properly. ...

netrat

yes, is the bug fixed in 1.46.
tx

Thanks for the awesome program!

netrat

Correct the bg: in some cases, if parameter "name" is at the beginning of line, it can be ignored.

thanks

If the name is left off of an ip pool entry and it is referenced by /ip dhcp-server it is not going to work.

netrat

Your program leaves out the name entry in /ip pool. Actually it leaves the name entry off /interface pppoe-server as well and probably others. I'm using RouterOS 5.6, could this be a problem?

netrat

Does mikrotik support MPLS/VPLS over GRE? I setup a GRE tunnel between two routers and added the tunnels to LDP and MPLS interfaces. The VPLS tunnels show up as running on both routers with remote and local labels assigned, but I cannot get any traffic to pass over the VPLS tunnels. If I do the same...

netrat

No we do not. Each client connects to an AP with a wireless unit at their location, there is no need to install a separate mikrotik unit at each house as that adds more to overhead and more headaches. We hand out non-routable IP's via a centralized DHCP server and everything is bridged which makes ...

netrat

Why don't you just put them on seperate networks? Then you don't have to worry about broadcast traffic and you can use firewalling to (dis)allow clients to talk to one another. I don't believe you should be bridging in this situation.

netrat

In addition to what sup5 said you can disable ARP on the PPPoE interface(s). There is no need to disable ARP on the PPPoE Interfaces of the access concentrator, because you don't want to setup IP adresses here. That's exactly the reasoning for disabling arp on the pppoe interface, is because there ...

netrat

As long as you have a full mesh the clients should be able to communicate with each other. Split horizon is just used to prevent bridging loops. If you do not have a full mesh then you will need to disable split horizon and use STP or RSTP. Are you using VPLS or BGP signaled VPLS?

netrat

http://forum.mikrotik.com/viewtopic.php?f=2&t=32350

netrat

In addition to what sup5 said you can disable ARP on the PPPoE interface(s).

netrat

Ok, thanks, how would this OSPF setup be, do you have an example?

http://wiki.mikrotik.com/wiki/OSPF_and_Area_summaries
http://wiki.mikrotik.com/wiki/Category:Routing

netrat

Thanks, but L2 broadcasts will travel all the way to the core PPPoE concentrator? As with regular routing it will stop at the sites local router... If I use the RB1200s as PPPoE servers, authenticating users via a central Usermanager, do I still have to route public subnets to each site, or will th...

netrat

Has anyone tried this kind of setup before? I have something like that on 2.4G using a R52n on G mode only. Chain 0 is tied to a 90° sector antenna, 16dBi horizontal, tilted down (20º) to cover a specific area, down hill. Aprox 30 CPEs there. Chain 1 is tied to a 25dBi grid, 25dBi horizontal, beami...

netrat

Bump?

netrat

Yes, it is possible.

How is it possible without WDS?

netrat

You should have posted this in the wireless forum. You have alot of homework you need to do, but yes a 70km is possible. Two big 5ghz antennas with xr5's and a couple of mikrotik boards.

http://www.mikrotik.com/test_link.php

netrat

Where is the nv2 package for 4.13?

netrat

Use different frequencies

netrat

1K are you sure your talking in the right degrees here? You'd need LN2 full time to maintain 1 Kelvin. Anyway at some point the electronics will fail and/or you'll have condensation problems. Maybe just try fan cooling to try and keep the temp's at room temp LN2 boils at 77K, liquid helium is 4K. Y...

netrat

Anyone tested on a 900mhz (xr9) setup .... had to back out as nothing would register on the AP (411AH) I have tried it a few times with really bad results. I have two 411A XR9 AP's on one tower running in 5mhz channels with regular nstreme enabled and 411's as clients. When I install 5.0 beta, thro...

netrat

I'm seeing the same with ROS v4.11. I tried using v5.0rc1, but the router locks up with a kernel failure when doing IPv6 advertisements. Once the IPv6 stuff is turned off no more lockups.

netrat

You need to setup a store for the webproxy to use.

netrat

GRE tunnels! Thank you mikrotik!

netrat

I'd use OSPF to load balance the two links. Much better setup IMHO.

http://wiki.mikrotik.com/wiki/Setup_Dua ... _with_OSPF

netrat

If you have a number of core and provider edge routers with multiple customers at each PE is it possible to specify which TE tunnel for an individual VPLS tunnel to traverse over? I'll attach a graphic to better explain my question... Take for example R1 and R6, each router serves two customers, A a...

netrat

http://www.mikrotikrouter.com/

netrat

If it's 2.4GHz then use channels 1, 6, and 11. They are the only three non-overlapping channels for most countries. Then set the max station limit to 9 or so per wireless card.

netrat

No you'll need a serial over IP solution.

http://www.perle.com/products/Terminal-Server.shtml

netrat

If you want to bridge with redundancy then use MPLS on top of the OSPF setup.

http://wiki.mikrotik.com/wiki/Transpare ... using_MPLS

netrat

http://wiki.mikrotik.com/wiki/Dual_Setup_with_OSPF

This would probably be a better configuration than dual n-streme.

netrat

For 11n bridging VPLS is the best/fastest solution.

netrat

RTS/CTS setting is client side, so it will depend on the CPE.

http://wiki.mikrotik.com/wiki/Wireless# ... S.2FCTS.29

netrat

Well you can't use the polling function unless nstreme is enabled. You are probably experiencing the hidden node problem. Search around the board for information on RTS/CTS.

netrat

What are your wireless settings? Are you using Nstreme? Polling? RTS/CTS?

netrat

It was 3.2 now its 3.30. Do i Need 4.x??

Yes

netrat

^^ OK then why do they put Super-Channel on there if it is illegal to test with them? Does anyone know how much/if possible a license on those channels would be? Before you purchase a superchannel license you are required to prove that you can legally use those frequencies. An example would be havi...

netrat

It is illegal to test at those frequencies... If you want to see if interference is the problem then get a spectrum analyzer.

netrat

Same here, broken packages.... Seriously starting to wonder about Mikrotik. Do they do any quality testing?? This is second time I can remember this happening.

netrat

I haven't had much luck with the on-board switch chip. I've had two different RB450G stop "switching" after a power failure, but the configuration was correct. I changed back to bridging and haven't had any problems since.

netrat

I'm assuming the 200 PCs are part of windows domain? If so you can use the domain controller to set group policies and disable messenger system wide.

http://support.microsoft.com/kb/302089

netrat

It might be harder than I originally thought. Google bought Youtube and they use the same IP address pool.

netrat

Put all youtube IP addresses in address-list. Mark routing for said address-list under firewall mangle.

netrat

I post this link a few times every week.

http://wiki.mikrotik.com/wiki/OSPF_to_s ... redundancy

netrat

http://www.squid-cache.org/

netrat

http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a0080093f27.shtml http://www.debugall.co.uk/2009/02/11/bgp-remove-private-as/ From the cisco website Private autonomous system (AS) numbers which range from 64512 to 65535 are used to conserve globally unique AS numbers. Globally uniqu...

netrat

Yes multi-core processors are supported with the latest versions of RouterOS.

netrat

/ip route add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=ether1 \ scope=30 target-scope=10 Change the gateway to an actual IP address, not the interface. That only works for PTP connections. I'm guessing it should be add comment="" disabled=no distance=1 dst...

netrat

I can help with a few of your questions... You should be able to get 20mbps full duplex if you use 40MHz wide channels and there isn't too much noise. 802.11n would be a better solution, but you'll need MIMO PTP antennas. I haven't used 11n in a production environment, but some people say it's not s...

netrat

http://wiki.mikrotik.com/wiki/Hotspot

Under, /ip hotspot user profile, look at session-timeout.

netrat

Sweet, I just added it to the wiki.

http://wiki.mikrotik.com/wiki/Supported_Hardware

netrat

I mean a comparison in performance,overhead,reliability etc between EOIP and OpenVPN EoIP will perform faster. For one EoIP is just using a plain GRE tunnel with a few Mikrotik added extensions and OpenVPN is an encrypted tunnel. Obviously EoIP will be faster. Currently reliability would be greater...

netrat

Post the following output from both routers

/ip route export

/ip address export

/ip firewall filter export

Both devices need a default route. I see you mentioned that for your core router, but not the other.

netrat

Ummm OSPF, BGP, interface bonding, etc etc

netrat

IMHO the best setup for "bonding" wireless links is using OSPF. You dedicate one radio to transmitting and the other to receiving and you get the added benefit of failover with OSPF. http://wiki.mikrotik.com/wiki/Dual_Setup_with_OSPF http://wiki.mikrotik.com/wiki/OSPF_to_simulate_full_dupl...

netrat

You aren't providing enough information. What are you trying to do? Is this a wireless connection? How are you trying to access the "other system"? RDP, vnc??? What are your firewall settings? Have you tried doing a ARP ping?

netrat

Then if your using The Dude to manage your mikrotik gear you can see all the connected MACs of wireless clients for all your APs. There is no need for a special script or program.

netrat

If you want to sniff wireless traffic then use kismet. Do you have the mac address of the stolen laptop(s)?

netrat

I've tried testing with the 10MHz channel widths on 907, 912, 917, and 922MHz. All perform worse than the 5MHz width.... Signal strength and noise floor is about the same at ~-75 and -90 respectively, but CCQ is way down.

netrat

Any link I have that has any interference or weak signal, I've had to go back to 3.30. Several customers are 100% stable, better than 70% ccq, 3ms pings, 36mb connection, upgrade to 4.x and I can barely even get into the radio to check signal strength. A couple have signal levels in the mid 70's. R...

netrat

Best bet, get a filter. Streakwave has some for around $50.

Have you used any of the $50 filters? The commercial grade filters usually run around $250-300 and have 8 poles.

netrat

Thanks for the reply. I'll try the suggestions above with B-mode and the 10MHz wide channel. I've tried using Nstreme with the 5MHz width and it seriously degrades link quality. This is RouterOS 4.5 and I don't think Nstreme is stable, I've tried upping the hw-retries to 15 and still no luck.

netrat

The code is "closed" for one reason. (in my opinion as well as conversations with MANY) STABILITY. Is the underlying linux kernel that is the core of RouterOS stable? I'm not bashing (no pun intended) on RouterOS. I just wish there was a little more openness. Getting linux to run on the n...

netrat

signal strength

netrat

I have a ~1.7 mile NLOS 907MHz, 5MHz wide PTP link. I'm using a rb532a at one site and a rb411 at the other, XR9 cards and a 13db pacwireless yagi. The signal is all over the place and at times the noise floor will hit -80dbm or higher. I'm looking at getting a rflinx bandpass filter. Has anyone had...

netrat

Yes, but both ends of the cable should be 232, i mean db9.. and is it correct that new board have OS already installed?

Yes all routerboards come with RouterOS preinstalled.

netrat

Umm you need a RS-232 DB9 null modem cable. The config on the serial port is 115200 baud, 8N1.

http://wiki.mikrotik.com/wiki/First_time_startup

Here is the netinstall page on the wiki

http://wiki.mikrotik.com/wiki/Netinstall

netrat

but he will be kicked out even if the signal is good initially. there is a timeout delay, you have to wait a few seconds.

http://wiki.mikrotik.com/wiki/Wireless#Access_lists

Ahh I guess I'm too hasty in my testing. Thanks!

netrat

Janisk that's what I'm using, but it only prevents the initial association. If signal level drops after client association they will stay connected.

Also I've seen decent signal levels, -70 to -60, and horrible CCQ, 10-20%.

netrat

Post your logs

netrat

Get new/supported NICs.

netrat

I was under the same impression. If you are using polling why the need for CSMA?

netrat

Post your config...

netrat

Are you using any queue or firewall mangle rules?

netrat

You will setup the ip pool in the ppp profile. Use the same profile for the pppoe server on the interfaces.

netrat

I don't understand your question.

netrat

Udp i faster than tcp , but more dificult to bound than tcp

What?

netrat

Mark routing on outgoing packets to port 80 to your squid proxy. Then use iptables to redirect traffic on the linux box to port 8080. Make sure it's setup for transparent redirect. Where 192.168.1.2 is the squid server... /ip firewall mangle add action=mark-routing chain=prerouting comment="&qu...

netrat

Did you send the supout to Mikrotik support?

netrat

I'd try upping the voltage to 24v. 12v is the lower limit...

netrat

You guys won't get any help until you upgrade to the latest RouterOS release.

netrat

netrat

You don't need IDS/IPS.

netrat

You can either use The Dude or setup munin on a linux box.
http://wiki.mikrotik.com/wiki/Munin_Monitoring

netrat

Yup I see the same thing.

netrat

And another question, should I go for RB450G or for RB750G?
Do I need the extra RAM?
Do I need to hold the full internet route table?

Personally I'd go with the RB450G. What do you mean by holding the full internet route table? Are you doing BGP?

netrat

I only wish mine worked half that good... I'm using 1 RB600 and 1 RB133. I've tried 2 GHz and 5 GHz and the performance is roughly the same. 5 GHz is a little better, I assume because of a cleaner channel, but not by much. Max I ever got UDP was 34 Mbps with both chains. The CPU usage only got up t...

netrat

I think you should terminate the VPLS tunnels to the AP and not the CPE. You could terminate the VPLS tunnel for certain clients maybe needing IPv6 or VPN connectivity as you mentioned, but I wouldn't do it for all the clients.

netrat

I'm using the following snippet to drop wireless client with a signal strength lower than -87. This works except for a one issue, if the client connects at signal strength greater than -88 they successfully connect, but they do not get dropped if their signal strength dips below -87. Basically it is...

netrat

I'm using Win7 64bit Ultimate edition with winbox and have seen zero issues. I've used winbox for connecting both local and routers over VPN connections.

netrat

Check out this crazy link. It's a 1.7 mile link, serious NLOS, XR9, 13db Yagi, 5MHz wide channel. Signal strength is all over the place.

netrat

Provider does not matter, just the modem.

http://wiki.mikrotik.com/wiki/Supported ... e#3G_cards

netrat

What do you need help with? From what I'm gathering from your post The Dude can do all of the described functions. You just have to setup the proper dependencies for the various services within The Dude.

netrat

Yes you can do the above. You'll need to add routing marks and implement policy routing. Check out the wiki.

http://wiki.mikrotik.com/wiki/Firewall/Mangle
http://wiki.mikrotik.com/wiki/Routing

netrat

http://routerboard.com/pdf/RouterBOARD_ ... arison.pdf

RB450G might struggle with that many TCP connections if you're doing any firewall/mangle stuff. I'd suggest the RB800 or 1000 to be safe.

netrat

Two 5GHz 40MHz wide 802.11n links with OSPF load-balancing/failover would be much better than nstreme-dual link IMHO

Edit: Looking at their documentation I don't believe they can do 100Mbps full-duplex at 30km.

netrat

Does anyone know if this ever happened? I tried using IPv6 to connect to winbox and ssh with RouterOS 4.5.. Both failed.

netrat

So you just want to bridge ether4 with your WAN port? In this case you don't need any VLANs.... Make sure you change all the IP address and DHCP or PPPoE config to the bridge interface. Create a new bridge... /interface bridge add name=WAN-bridge Add the ports to the bridge /interface bridge add bri...

netrat

Mail me . i can help

Why do you want everyone to mail you? If you can help, then help. The purpose of the forum is to keep everything in the public domain so if someone has a similar problem they can get answers from here.

netrat

Looking at an analyzer, 1dB to 5dB is huge. That's 5 times the power! 1dB to 2dB is same, that's 2x the power, directly on top of each other.

I'll do some tests more in depth tests if people want.

1dB to 2dB is 1.23x the power. 1 to 5dB is 2.46x the power. Decibel is logarithmic.

netrat

I'd use one of the dual pol dish antennas, something like this http://ubnt.com/products/dish.php

You can do 2x2 MIMO on PtP using a single dish.

But even if you don't do MIMO 802.11n still has advantages over plan .11g/a
http://www.dslreports.com/forum/r233398 ... -for-wisps

netrat

Our clients have mostly RB411s, there's some 133c out there still, but we are replacing them since they arent working good with crowded radios. They work fine until the user starts downloading from emule/torrent. The 133c wont handle both Natting and polling with small packets.. The ROS Version var...

netrat

Mark and apply queues to all your traffic and assign VoIP a higher priority. This should be a good start.
http://wiki.mikrotik.com/wiki/Traffic_P ... lemetation

netrat

Did you change both the station and the ap to turbo?

netrat

Read the wiki!

http://wiki.mikrotik.com/wiki/Limit_Dif ... _and_Night
http://wiki.mikrotik.com/wiki/Different ... s_of_users

netrat

RB750s don't have serial ports.

Good point!

netrat

Are you using winbox? Connect using the mac address or use a serial cable.

netrat

You'll assign it to the PPPoE interface. Yes traffic will still be forwarded through the links, now do some reading!

http://wiki.mikrotik.com/wiki/Category:Firewall
http://wiki.mikrotik.com/wiki/Firewall

netrat

Check the wiki, but here's a quick rundown. /ip firewall filter add action=accept chain=input comment="" connection-state=established \ disabled=no in-interface=WAN add action=accept chain=input comment="" connection-state=related disabled=no \ in-interface=WAN add action=drop ch...

netrat

Care to provide some information? Signal strengths, channel width, CCQs, distance of the link, frequency, etc etc...

netrat

Are they rate limiting just your OpenVPN connections? Who is your ISP if you don't mind me asking.. Sounds like some shady practices. I'm not too familiar with SSTP, but Kerio uses udp for transport and tcp for the control channel. I'm anxious to see a udp bandwidth test. You can use Mikrotik's band...

netrat

MMCX mikrotik radio!

netrat

Which VPN solutions use tcp for traffic transport? I can't really think of any off the top of my head. PPTP uses TCP for setting up the connection, but GRE is used for transport. Did you try a udp bandwidth through the openvpn tunnel? The problem is definitely global, that's why you don't use tcp ov...

netrat

@Dawam,Thanks, Do I need to set IP on lan interface after the bridge and internet interface

You set the IP address on the bridge interface.

netrat

The wlan interface on the bridge has to be the AP unless you are using WDS or MPLS.

/interface bridge add name=bridge disabled=no
/interface bridge port add interface=wlan0 disabled=no
/interface bridge port add interface=ether1 disabled=no

netrat

First you need to make an effort to figure things out on your own. I guess you are looking for someone to paste a configuration for you.... This should work, but I haven't tested it. Also make sure you have the proper NAT rules in place. /ip route add disabled=no distance=1 dst-address=0.0.0.0/0 gat...

netrat

Policy routing
http://wiki.mikrotik.com/wiki/Policy_Ro ... uterOS_3.x

netrat

Update. Now this is interesting finding. OpenVPN relations connected over internet are SLOW as desribed. But OpenVPN relations connected from the very same WAN port directly inhouse are FAST! Knowing these it points on a kind of packet shaping at my local ISP that hampers OpenVPN traffic specifical...

netrat

So your internet connection is over PPPoE? You are probably having a MTU related issue. Try setting your MSS to -40 of your MTU setting. http://wiki.mikrotik.com/wiki/MikroTik_RouterOS_Frequently_Asked_Questions_-_FAQ / ip firewall mangle add chain=forward protocol=tcp tcp-flags=syn action=change-ms...

netrat

Bump... Can we please get an update on UDP support for OpenVPN? TCP over TCP simply does not work. Normis or Uldis an update please?

netrat

RouterOS currently doesn't support 5 and 10MHz channel width due to some technical difficulties and restrictions. Maybe this will be overcome in the future. I can only assume you mean in relation to n...... Yes as RouterOS already supports 5/10/20/40mhz channels with 802.11g/a. Read the topic title...

netrat

Is this two mikrotik routers? What is your network/ospf setup? Is this over wireless? NBMA neighbor??

netrat

OSPF would probably be the best plan of action. You can load balance between the Frame and MPLS link and failover should be fairly fast if you use BFD.

OSPF
http://wiki.mikrotik.com/wiki/OSPF

netrat

Yes we do!

RFC2472
http://www.faqs.org/rfcs/rfc2472.html

Linux PPPv6
http://ipv6int.net/systems/linux-ipv6.html#pppv6

netrat

Do you have a global IP address? Do you have any firewall filters in place?

Read the Manual:
http://wiki.mikrotik.com/wiki/Category:Manual

netrat

Are these TCP connections over the VPN? OpenVPN in RouterOS is utterly useless as it uses TCP. The effects are more pronouced over the WAN connection probably due to increased latency and the TCP retransmission algorithm coming into play. OpenVPN's preferred protocol is UDP, which RouterOS for some ...

netrat

Also make sure you're using the T-568A or T-568B standard. You can run into interference problems on cables much shorter than 100m if you aren't using the proper pairs.

netrat

It's called connection tracking.

/ip firewall connection print

netrat

Do you want static vpls or bgp-signaled? Here is a good starting point. http://wiki.mikrotik.com/wiki/MPLS

Setup a test lab and come back if you run into any problems.

netrat

If they can't ping the router or each other then I think you need to check the configuration on your switch.

netrat

How do the clients terminate into your network? Are you using PPPoE? Do any of your clients have global IP addresses? You should be able to do QoS at the edge routers. Is there no way to filter broadcast traffic at the APs? Do you have any bandwidth limitations now?

netrat

You'll need to use pcq to load balance amongst the users.

netrat

http://forum.mikrotik.com/viewtopic.php?f=7&t=5383

netrat

Can the other VLANs ping the router?

netrat

Make sure you set the max clients on each wireless interface. You don't want everyone connecting to one radio.

netrat

You can't make plain gre tunnels with RouterOS.

You can make a PPTP tunnel or IPsec though.

netrat

negge would you mind doing an export of your ip mangle and queue settings? I'd like to easily import them on a router and give your setup a try.

netrat

Read the wiki article concerning multicast and wireless. It has some useful configuration information. Multicast packets are sent using the lowest basic rate.

http://wiki.mikrotik.com/wiki/Multicast ... d_Wireless

netrat

DannyZ I've noticed your ongoing trend to belittle fellow forum users asking "dumb" questions when you yourself make no attempt to learn or figure anything out on your own. With that said as Chupaka suggested you need to enforce policy based routing, which consists of marking packets with ...

netrat

Grescho I'm not following you exactly. If you want to prioritize your SIP packets then you'll need to apply a different packet mark and add a new queue for those packets. What do you mean when you say the packet doesn't get routed? Are you using a different routing table? Post up your firewall mangl...

netrat

I need to make a 2.6km link with tall trees in between. The main tower has 30mts and the repeater only 12mts. 900Mhz doesn't work due interference. Any idea to make a stable-no latency backhaul link? How many tall trees? The only way is trial and error if you can't use 900MHz. I'd try 2.4GHz with h...

netrat

MPLS should be faster as it's not as CPU intensive and has less protocol overhead.

netrat

ezanolin don't let the forum trolls get to you. Some people feel better when they're jackasses, besides I don't even know what "To you know meaning of nonoverlapping independent channels?" means.... So anyone know anything about 5MHz channel widths with 802.11n?

netrat

Has the CSPF problem been fixed? Confirmed by me and mplsguy?

http://forum.mikrotik.com/viewtopic.php?f=14&t=37501

netrat

/interface bridge filter
add action=drop chain=forward comment="" disabled=no mac-protocol=pppoe
add action=drop chain=forward comment="" disabled=no mac-protocol=pppoe-discovery

You can add the wds interface(s) to in/out-interface in the above rules.

netrat

Is there any plans to implement the dynamic vlan assignment over wireless networks? Cisco currently has this functionality. I've been waiting for RouterOS to support this feature for awhile. I believe this could be extremely useful. http://www.cisco.com/en/US/tech/tk722/tk809/technologies_configurat...

netrat

Have you read the wiki article?

http://wiki.mikrotik.com/wiki/PCC

netrat

Remove the bridges.

netrat

You might want to upgrade RouterOS... What you need to do is mark packets for the particular user you want to limit and apply a queue to those packets only.

netrat

Thanks for reply We are unable to identify NAT packets, because in case of routers, TTL is change & brand specific and also unable to check if there is any ICS on windows machine. ICS is also a NAT So please help me Thanks Satish If Windows ICS forwards a packet the TTL should still be reduced ...

netrat

Assuming that you know how to properly setup your switch, here is the config for the mikrotik... /interface vlan add arp=enabled comment="" disabled=no interface=ether2 mtu=1500 name=vlan-101 use-service-tag=no vlan-id=101 add arp=enabled comment="" disabled=no interface=ether2 m...

netrat

compatible with what ?

Each other.

netrat

You have to use The Dude client on a windows machine or a linux box with wine installed. For the server type in the IP address of your RB500. I believe the default username is admin and the password is blank.

netrat

Another question... I'm not seeing that option in the bgp-signaled vpls interface.

netrat

I must have looked right over that. Thanks!

netrat

What is the latency of the computer you are testing to the bandwidth server? Maybe it's a TCP congestion algorithm problem.

netrat

If you just want to route the other clients through the secondary gateway then you need to use policy routing. This should get you started http://wiki.mikrotik.com/wiki/Policy_Ro ... uterOS_3.x

netrat

Nevermind. Found out this is a problem in microsoft's implementation of ipv6.

netrat

netrat

Well UDP is a connectionless protocol, just fire and forget so it will always be faster than TCP. You need to test the bandwidth THROUGH the routers, not from router A to router B....

computer A <-----> router A <-----> router B <-----> computer B

netrat

I'm having a problem with IPv6 over wireless. I'm using Hurricane Electric as my tunnelbroker and I have a /48 assigned. I have that broken down into a few /64 subnets for use on different interfaces. I've configured the IPv6 neighborhood discovery protocol as follows /ipv6 nd add advertise-dns=yes ...

netrat

Is there a way to change the L2MTU on a vpls interface from 1500 to something greater?

netrat

[admin@R3] > /ip route print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0.0.0/0 10.250.1.1 0 1 ADC 10.250.1.0/24 10.250.1.148 ether4 0 2 ADo ...

netrat

bump?

netrat

Bump on this. Any plans to add UDP support to RouterOS' implementation of OpenVPN?

netrat

I'm looking for some documentation on the bridge nat feature and can't find anything. Can somebody write a wiki page or give me a quick run-down? Thanks

netrat

Bofh,

Thanks for the reply. I was almost certain that was the correct way.

netrat

I'm having issues as well. I've noticed a significant signal drop, I'm using XR9 cards.

netrat

I've setup a test lab very similar to the MPLSVPLS example on the wiki page. My problem is with TE tunnels and it not choosing the shortest path when using CSPF and some confusing route paths. When I create a TE tunnel from R1 to R5 the path used is R1,R2,R3,R4,R5. When I create a TE tunnel from R5 ...

netrat

Greetings... I've followed the BGP based VPLS example on the mikrotik wiki and have everything working wonderfully. My experience with BGP is a bit limited. In the example, http://wiki.mikrotik.com/wiki/BGP_based_VPLS, I'd like to setup R3 as an additional/backup route reflector. Could someone point...

netrat

Get rid of the amplifier.

netrat

Pings will be more stable once you start flowing data across the link.

netrat

Routing or pseudobridge is the only other way... Routing being the first choice.

netrat

No, but the CPEs have to be RouterOS with nstreme enabled.

netrat

Well you can run the /export command from the terminal. To reset to the default config run

/system reset-configuration

netrat

Mess with all the WDS stuff? I don't think a "large" WISP should have trouble configuring WDS, it's easy to configure and if you want a true wireless bridge it's the only way to go. You can do a pseudobridge which might be sufficient for your needs. Or like dingsingo said you can use EoIP,...

netrat

http://wiki.mikrotik.com/wiki/Limit_Dif ... _and_Night

netrat

Or if you want them to show as running when not connected to AP disable the running check...

/interface wireless wlan? disable-running-check=yes

Search found 402 matches