MikroTik

crosswind

Let's talk about the issues the comes with the actual methodology of hardware offload. For example, if the packets are in hardware offload, no IPFIX/Netflow, and no firewall rules(even raw) are possible. ROS supports two different "methodologies" of hardware offload. if you use basic L3HW...

crosswind

rumour has it 7.17beta5 includes support for managed address configuration (IA_NA) in DHCPv6 server - very exciting!

crosswind

i asked LinITX (UK MikroTik distributor) about this, and they are willing to check stock before sending it if you ask.

(i have no affiliation with LinITX other than buying most of my MikroTik gear from there.)

crosswind

how is it possible for someone to get a "Forum Guru" tag while being so confidently and completely wrong about something like this? the issue i reported was that RouterOS does not include the "cxgbe4vf" driver. that means you could pass through a T540 VF on Linux, or Windows, or ...

crosswind

if you really pulled off getting MikroTik to add SR-IOV for the T540 in CHR [...] in such a short time in the past i have often complained, loudly and at length, about my issues with MikroTik support. but this case, i opened the ticket on Saturday, and they provided the new build at 10:30 on Monday...

crosswind

today MikroTik support sent me a development release (7.17_ab236) which adds support for the T540 VF! so hopefully this will be in 7.17.0. i did notice a strange bug where the router can see itself in /ip/neighbor/print: [admin@lab1.i.lfns.org.uk] > /ip/neighbor/print Columns: INTERFACE, ADDRESS, MA...

crosswind

RouterOS as a bare metal x86_64 installation might possibly have drivers for the Chelsio T540 it does not have drivers for the T540 VF, as you could discover by reading the very first post in this thread where i said: however, while the "Virtio" devices are detected correctly, the Chelsio...

crosswind

i would really like to know if hEX refresh include a hEX S refresh! hEX i am not interested in but i would definitely like some faster hEX S.

crosswind

It is quite sad, that we are happy, that Mikrotik published AX device. Competition released many WIFI 7 devices - Ubiquity, TP-link, Zyxel..... Maybe Mikrotik is only one, that is releasing AX device. same thought, really. maybe .11be is not fully standardised yet, but radio hardware is available a...

crosswind

CHR runs fine on FreeBSD no, it doesn't, because the CHR image is not compatible with bhyve -- you need to use the third-party image that jaclaz posted earlier. the stock CHR image won't boot on bhyve and is explicitly documented in the CHR documentation as not supporting bhyve. (i believe MT shoul...

crosswind

after poking around "routeros-7.16.1.npk", the problem is apparently that ROS ships the driver for "cxgb4" (the PF device) but not "cxgb4vf" (the VF device). hopefully, this means it's fairly simply for MT to enable the VF driver -- but we'll see what support says.

crosswind

let me provide an example from a non-RouterOS Linux system, which is a VM with a T540 VF PCI passthrough device. we can see the device in lspci: 1? 3!media ~% lspci -v 00:00.0 Host bridge: Network Appliance Corporation Device 1275 Flags: bus master, fast devsel, latency 0 Capabilities: <access denie...

crosswind

This is where you might be misunderstanding things. It’s all about the virtual machine support at the host OS level, not the guest OS. no, it's not. the entire point of PCI passthrough is that the PCI device is directly accessible in the virtual machine, and the VM's kernel is responsible for ident...

crosswind

Yep, it’s also up to the host OS drivers to enable SR-IOV support. correct. host OS has SR-IOV enabled, this is working in all virtual machines on this host except for RouterOS VM. The virtual machine can check if SR-IOV is available, but if you try to turn it on without driver support, you’ll just...

crosswind

No, virtual machines support only a limited set of virtual drivers required for the virtual guest to function properly. The host OS drivers are responsible for managing this support.

before i write a longer response, can i please ask, do you know what SR-IOV is?

crosswind

When using CHR, the NIC drivers must be compatible with and managed by the virtual machine host operating system (ie FreeBSD). sorry, but this is not correct in the situation i have described here. when passing a PCI device through to a virtual machine, it's up to the virtual machine kernel (e.g., ...

crosswind

in the mean time i filed feature request SUP-169557 to add the driver, but if anyone has any other suggestions, i'm all ears.

crosswind

Is there a real reason to use passthrough instead of virtio driver on FreeBSD host, at least, using virtio in the guest with bridge(4) on the host prevents the host from using LRO/TSO which reduces TCP performance. or maybe try to use SR-IOV? i am using SR-IOV - that's what creates the PCI device i...

crosswind

thanks jaclaz, this works a lot better than the x86 image (if only for improved licensing :-) unfortunately though, it still does not seem to include the driver for the T540 VF: [admin@lab1.i.lfns.org.uk] > /system/resource/print uptime: 4m7s version: 7.16.1 (stable) build-time: 2024-10-10 14:03:32 ...

crosswind

A quick google search I've found there's a way to boot on bhyve guide thanks, i did see that but it seems it involves a lot of low-level work on the CHR image and i'm worried it's going to break when updating. so i might try it, but it would help to know if CHR includes the driver for this card, th...

crosswind

hello, i have RouterOS x86 running in a virtual machine (bhyve on FreeBSD 15.0). the virtual machine has four Ethernet PCI network devices: 2 device="00:05.0" name="Virtio network device (rev: 0)" vendor="Red Hat, Inc." category="Ethernet controller" vendor-id...

crosswind

SUP-168334 also not fixed: [admin@lab2.i.lfns.org.uk] > /ipv6/route print where dst-address=64:ff9b::/96 Flags: D - DYNAMIC; A - ACTIVE Columns: DST-ADDRESS, GATEWAY, DISTANCE DST-ADDRESS GATEWAY DISTANCE DA 64:ff9b::/96 fe80::400:ff:fe00:509%ether1 115 [admin@lab2.i.lfns.org.uk] > /routing/route/pr...

crosswind

PIM-SM is still broken: [admin@lab2.i.lfns.org.uk] > routing/pimsm/static-rp/add instance=lan-v6 address=2001:8b0:aab5:3::b action timed out - try again, if error continues contact MikroTik support and send a supout file (13) [admin@lab2.i.lfns.org.uk] > put [/system/resource/get version] 7.17beta4 ...

crosswind

*) wifi - added extra info to CAPsMAN about message;

could you please elaborate? i cannot discern any meaning at all from this entry.

nice that the vxlan/vteps bug was fixed, ty.

crosswind

so other than this /ipv6/route/print bug, i've run into two more serious issues while testing IS-IS here. the first is that sometimes, a particular route seems not to be installed in the L3HW FIB correctly, which creates a routing loop even though /ipv6/route/print on both peers shows the correct ne...

crosswind

Are you sure IPv6 adjacency is up? Because it seems that the routes are locally-connected routes yes, i had a discussion with support and this is a bug that will be fixed in a later release (not sure when, it's still present in 7.17beta2). the 'i' flag does appear in /routing/route/print so the rou...

crosswind

noticed IPv6 routes coming from IS-IS have no 'i' flag in /ipv6/route/print: [lexi@a2.i.lfns.org.uk] /routing/isis> /ipv6/route/print Flags: D - DYNAMIC; A - ACTIVE; c - CONNECT Columns: DST-ADDRESS, GATEWAY, DISTANCE DST-ADDRESS GATEWAY DISTANCE DA ::/0 fe80::400:ff:fe00:a01%ether5-c2.i 115 DAc ::1...

crosswind

is vlan assignment for "slave configurations" working on wifi-qcom-ac in your setup? you (edit: meant to refer to OP here, but it's probably the same problem in both cases) are using "datapath.vlan-id" in your wifi configuration on CAPsMAN, but this is not supported with CAPs ru...

crosswind

i have a CRS312 and i don't really understand what could be "updated" to improve it.

yes, the fans can be a bit loud, i replaced them with Noctua fans for home use and that works fine.

what else would you want to change?

crosswind

Updated device FW as well to 7.16 ? Already 2 users with POE issues which were solved after performing FW upgrade as well. yes. i don't usually upgrade firmware but i noticed some firmware-related PoE issues with 7.16, so i upgraded firmware on both hAP ac2 and RB4011 to current 7.16. the problem s...

crosswind

well, it was perfectly stable under 7.15.3, the only change i made recently was upgrading it to 7.16. but as i say i'll do some more testing later today (when users went to sleep) and we'll see. i was able to reproduce the problem with iperf3: under wireless load (~500Mbps) the device would reboot ...

crosswind

Maybe device needs more power on load which 4011 can't provide?

well, it was perfectly stable under 7.15.3, the only change i made recently was upgrading it to 7.16. but as i say i'll do some more testing later today (when users went to sleep) and we'll see.

crosswind

powered by power supply or Poe?

PoE from a 4011.

crosswind

Experiencing lots of reboots (up to every 2-30 minutes) on a HAP AC2 working as a wireless trunk between two segments of the network, upgraded to v7.16, on logs I only get the " possible power outage " message. i'm also seeing this on a hAP ac2 acting as CAP (wifi-qcom-ac, 5GHz only, Ceee...

crosswind

MVRP seems to work much better (7.15.3 had some problems with certains ports not joining vlans properly)

i spoke too soon, MVRP still does not correctly distribute vlan ids from a port's pvid. opened SUP-166289 for this.

crosswind

upgraded CRS309, CRS305, CRS312, hEX S, cAP ax, some hAP ac2, and RB4011, no (new) problems reported so far. MVRP seems to work much better (7.15.3 had some problems with certains ports not joining vlans properly) and the new comments added to dynamic /interface/bridge/vlan entries are nice. i notic...

crosswind

update #2: after restarting BGP again, the CRS309 is again not receiving any routes. nothing in the config has changed other than adding a new local IP address.

crosswind

update: after disabling and re-enabling the BGP session on the MikroTik side, it magically started working. apparently restart on the BIRD side was not sufficient.

crosswind

hello, i'm trying to set up IBGP between RouterOS 7.15.3 on a CRS309 and BIRD 2.15.1 on FreeBSD 15.0. the BIRD system is directly connected to the CRS309 and they communicate via a VLAN interface. the BIRD config looks like this: protocol bgp csw1_v4 { local 10.1.2.2 as 64524; neighbor 10.1.2.1 inte...

crosswind

The both ingress and egress interfaces are L3HW active? yes, all interfaces have L3HW enabled: /interface/ethernet/switch> port/print Columns: NAME, SWITCH, L3-HW-OFFLOADING, STORM-RATE # NAME SWITCH L3-HW-OFFLOADING STORM-RATE 0 te0 switch1 yes 100 1 te1 switch1 yes 100 2 te2 switch1 yes 100 3 te3...

crosswind

has anyone succesfully deployed PIM-SM for IPv6 (or dual-stack) on ROS v7 on CRS3xx devices (particularly CRS309 and CRS312) with L3HW enabled, and ended up with a functional unicast and multicast network? if so, could you please show a sample configuration? i have been having a lot of issues with t...

crosswind

hello, i'm wondering about methods to route IPv4 traffic over an IPv6-only core in RouterOS. RFC5549 would allow BGP to advertise IPv4 routes with IPv6 next-hops, but this apparently isn't supported yet (https://help.mikrotik.com/docs/display/ROS/Routing+Protocol+Overview). i've heard it said that s...

crosswind

hello, i did open a support ticket for this problem (SUP-127514) but i thought i'd ask here too in case i'm doing something wrong... so i have a CRS309 running OSPF, with this routing table: > /ipv6/route/print Flags: D - DYNAMIC; I - INACTIVE, A - ACTIVE; c - CONNECT, o - OSPF; H - HW-OFFLOADED Col...

crosswind

answering my own question (thanks to someone on the MikroTik Discord server) this is apparently caused by having IGMP snooping enabled on the CRS309. some more discussion in this thread.

for now, disabling IGMP snooping fixed the problem.

crosswind

hello, i'm having an issue trying to configure OSPFv3 between RB4011 and CRS309. the two routers are directed connected by a 10G fibre. the RB4011 is switching and routing, and for now the CRS309 is only doing switching, across multiple VLANs, and that is all working fine. i've configured OSPFv2 and...

crosswind

my suggestion is, don't use QuickSet. it might be okay for simple setups, but i think it's better to learn how to configure the device normally so you understand what's going on. especially if the QuickSet configuration isn't doing what you want :-) also, i noticed in your screenshot that you're usi...

crosswind

Is it a simple as setting up one unit to simply be an AP and the other as both AP and router? if you run an Ethernet cable between the two devices, then yes, that will work fine. as long as the wireless configuration matches (same SSID, WPA key, etc., although frequency can be different) then clien...

crosswind

another question - stupid maybe: I see that the device has 3 wireless adapters - wlan1..3 I believe Wlan3 is used for mesh (CAPsMAN only), however the other 2 need to be members of the bridge? In CAPsMAN I have 2 different interfaces and I cannot validate if these 2 are actually mapping the wlan1 a...

crosswind

don't add VLAN interfaces to a bridge. and don't create VLAN interfaces on Ethernet interfaces at all if you intend for the traffic to be bridged (rather than routed). instead, add the Ethernet interfaces to the bridge and configure VLANs using "Bridge VLAN filtering" which is described he...

crosswind

"add" will add a new bridge, which isn't what you want since your bridge already exists.

to change the configuration on an existing item, use "set":

/interface/bridge
set 0 vlan-filtering=yes

replace 0 with the appropriate item number, which you can see in "print".

crosswind

Use Winbox - Enter into bridges, create 3 bridges: vlanserver, vlanworkstation, vlanmanagement. you only want one bridge, and all VLANs will be created on that bridge. that's important when you want to trunk to another switch with .1q, but it's also the best way to configure things in nearly all ca...

crosswind

But I know I will lost some features: 1. Capsman you can use CAPsMAN on the 4011 to manage its built-in wireless interfaces. just configure the manager normally, then tell the client to connect to 127.0.0.1 (with appropriate firewall rule). 2. 2,4GHz when wave2 is enabled (worst thing) can hAP ac2 ...

crosswind

i opened SUP-79815 for this and the response was: We do not have any plans to add such a feature at the moment, but if more users will request it, we will see how this can be implemented. so, i hope other people interested in NAT64 will also request it. (i also mentioned 464XLAT in my request, so i ...

crosswind

hello, i'm having a problem using packet marks in bridge filter, and i can't tell if this is a bug or if i'm misunderstanding something. this is on v7.2 on a hAP ac2. first, i configured some mangle rules in /ip/firewall/mangle to set packet-marks: /ip firewall mangle add action=set-priority chain=p...

crosswind

What I am trying to understand is there any benefit of implementing VLANs for this purpose? it sounds like you're using CAPsMAN with local-forwarding off, so CAPsMAN is sending all your wireless traffic to a single router, and you control the traffic by having each SSID go to a different bridge on ...

crosswind

i understand that work on ROS v7 takes priority right now, which is completely reasonable, but even so i'd like to add a vote for hardware IPv6 offloading. i'm considering using some of the L3HW-capable CRSs to upgrade our office network from 1G to 10GE, but all of our internal inter-VLAN traffic (a...

crosswind

i'm also having this problem (raised as SUP-72949) with fq_codel as a simple queue - when the queue is enabled, new IPv6 conntrack rules are not added. has anyone found a workaround?

crosswind

hello, i've got four hAP ac2 and one RB4011 (non-wireless model), which i'm using to provide both wired and wireless Internet access in a site that has no Ethernet cabling installed. the RB4011 is connected to a VDSL2 modem to provide Internet access. i've set up the hAPs in a single WDS/HWMP+ mesh ...

crosswind

hello, i'm following this guide to configure ROS 6.46.4 as an IKEv2 responder for road warrior clients: https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_using_IKEv2_with_RSA_authentication but i can't find a way to assign an IPv6 address pool for the initiator addresses: [admin@cr1....

crosswind

hello, on a router (RB2011, ROS 6.46.3) which has IPv6 Internet access but not IPv4, /system package update check-for-updates fails: [admin@ap-3.lan] /system package update> check-for-updates channel: stable installed-version: 6.46.3 status: ERROR: no internet connection the router does have working...

Search found 60 matches