MikroTik

christian178

Hello, i have an NAT Router Routerboard. eth1 is Interface to extern DSL Modem. PPPoE is on this Interface (untagged). All intern Interfaces in a bridge via NAT to extern. Internet works. Now i become via Vlan200 from extern on eth1 multicast. How can i bring multicast to the internal interfaces unt...

christian178

Thing is, that you should never use multiple bridge interfaces to separate traffic... and because it's not working as you imagine it should, you think that it's broken... Sorry but your procedure is wrong... You're right. For VLAN Users. But no for VPLS XVLAN, EoIP and other Users... @infabo i writ...

christian178

Hello, I tried to set the settings as best as I could. Nevertheless, the new CapsMan is a little poor or, to say the least, immature. 1. Why not a new CapsMan (even if wifi) that can also operate the old wireless interfaces? Why 2 CapsMan? In the not too distant future there will be a lot more qcom ...

christian178

After many tests i think the new WiFi CapsMan forwarding ala https://help.mikrotik.com/docs/pages/viewpage.action?pageId=1409149#APController(CAPsMAN)-ManagerForwardingMode is not working or not implement... What you think? I can not set There are the following datapath settings: local-forwarding --...

christian178

It's a test: CapsMan: /interface bridge add name=bridge1-int protocol-mode=none add name=bridge2-ext protocol-mode=none /interface wifi channel add band=2ghz-g disabled=no name=channel1-2ghz-g-20mhz width=20mhz add band=5ghz-a disabled=no name=channel2-5ghz-a-20-mhz width=20mhz add band=2ghz-ax disa...

christian178

Hello, /interface wifi channel add band=2ghz-g disabled=no name=channel1-2ghz width=20mhz add band=5ghz-a disabled=no name=channel2-5ghz-a width=20mhz /interface wifi datapath add bridge=bridge2-ext bridge-horizon=1 client-isolation=yes disabled=no name=datapath1 /interface wifi security add authent...

christian178

Hello, is it possible, to filter with an IP Filter only wanted/unwanted IP Multicast-Traffic in Bridge-Filter or on Switch-Rule? Bridge-MDB shows currently many MDB Entrys from Clients, that my Streamers not have. I Think I'ts better to block these Multicast-Requests. Another Question: Can i block (...

christian178

Hi, I will bring multicast SPTS IPTV from multicast Sender via vlan10 over CRS324 to an Router. On this Router i will bring vlan10 in vlan20 (on a bridge). Then Back again over the same CRS324 but to customers via vlan20. Is this possible? little pic: CUSTOMER--vlan20----sfp0(with forwarding-overrid...

christian178

Hi there, i try to set up an vxlan to my HotSpot-Capsman. My install: CapsMan---eth----terminator with VXLAN and VTEP to Cap Antenna--------OSPF------CAP Antenna with Vxlan and VTEP to termiantor. On Terminator VXlan Interface and Eth Interface to Capsman in an Bridge. In This Bridge i see and can p...

christian178

Hi there, i have read the MPLS LDP help Pages https://help.mikrotik.com/docs/display/ROS/LDP?src=contextnavpagetreemode but i don't understand it exactly. :-) MPLS and LDP is clear, but advertised and accept-Filter not currently. There are: Let's consider that we have already existing four routers s...

christian178

Hi,

on my CRS there is no space-Limit.
What can be the source of the Problem?
I need graphing...but no 100% CPU Usage of this after a time...
and rebott every night is no option.

Christian

christian178

Hi there, my Config is: set [ find default-name=qsfpplus1-1 ] l2mtu=1592 set [ find default-name=qsfpplus1-2 ] l2mtu=1592 set [ find default-name=qsfpplus1-3 ] l2mtu=1592 set [ find default-name=qsfpplus1-4 ] l2mtu=1592 set [ find default-name=qsfpplus2-1 ] l2mtu=1592 set [ find default-name=qsfpplu...

christian178

Hi there,

is the a way to allow only specific multicast Groups in IGMP on Bridge to forward in ROS to an specific Port?
Bridge-Filter? Switch-Rule?

Christian

christian178

MT? nothing known about it?

christian178

Hi There, does the switch rule " set new dst ports " override the setting "f orwarding-override " (or vice versa) in the port settings of the switch on a CRS3? I can do that. maybe direct all other traffic from sfp2 only to sfp1 and vlan100 from sfp2 only to sfp3? Of course, sfp3...

christian178

Hello,

is it possible to only allow certain multicast groups in the bridge on a CRS3? By switch rule. As?

christian178

Hi, I have on CRS326-24S+2Q+ on may ports set /interface ethernet switch port set 1 egress-rate=100.0Mbps ingress-rate=20.0Mbps limit-unknown-multicasts=yes limit-unknown-unicasts=yes storm-rate=1 set 2 egress-rate=100.0Mbps ingress-rate=20.0Mbps limit-unknown-multicasts=yes limit-unknown-unicasts=y...

christian178

In other words:

Pvid11 on Port sfp-sfpplus2 i will add cvid2…

Christian

christian178

Hello,

I will tagged QinQ Vlan from untagged Customer Ports.
On CRS3 i have Customer on sfp-sfpplus2. This port is untagged.
The Port should be communicate with sfp-sfpplus1 vlan2 in vlan11 (QinQ).
Is this on Hardware-Level Bridge-VLAN possible? How?

thanks
Christian

christian178

Hi there, i have vlan 30 in bridge. vlan filter is on. ingress be filtered out, only tagged ollowed on all ports. Ports sfp1,sfp2,sfp3,sfp4 sfp2, sfp3,sfp4 should only be communicate with sfp1 (port-forwarding) - ok, this works. Now i came with vlan11 on sfp2 and sfp3. vlan11 should be communicate w...

christian178

Hi there, I have a CRS326. Uplink Port is sfp-sfpplus1. Egress-Port to customer is sfp-sfpplus2. Bridge is IGMP Snooping on. On Uplink-Port (where multicast Streamers are) broadcast, unknown multicast and unknown unicast flood ar on. On Egress-Port nothing. See attachment. When i request an multicas...

christian178

Hi,

no other way to stop graphing in working CRS?
Is there a way to close the process of graphing without booting the CRS?

Christian

christian178

Hi There, i have the same Problem. What can fix this? Disable Graphing? Is there a way to get out of 95% CPU Usage for graphing without reboot the CRS? All Ports are Hardware-Offloaded. only 3 Ports are connected. /tool profile shows 96% CPU for graphing....but the Switch works. Only the graphings a...

christian178

Hi there, how can i limit the maximum number of multicast streams on an edge port on a crs in the Switch in the acl? I don't want the port to be able to receive all possible multicast streams at the same time and also no querier on this Port. that would be a risk given the number of available stream...

christian178

Hi,

no. is the same Vlan. Vlan is transparent from Multicast-Querier till Router. Set-Top-Box is another (privat) Lan. But the CPE makes multicast-Proxy.

christian178

Hi, I have now continued the test. It works with a set-top box directly on the port of the switch. However, if I plug in a DSLAM and behind it an AVM FritzBox, it only works if I set "unknown broadcast-flood=yes" and "unknown multicast-flood=yes" in the bridge at the ingress and ...

christian178

Do these "other switches" have multicast snooping enabled on them as well, or do they flood multicast? No. No flood. snooping is enabled on this bridges. Are you trying to set up multiple queriers, which may then get out of sync with each other? only one Querier. In Top of the Net. Ideall...

christian178

Hi, OK. Thanks. In my first post above, it's a querier. But there are still switches between this and the client. Of course I don't want to send the multicast traffic to every client port there. i.e. on the bridges of the switches IGMP-Snooping=yes and multicast-flood=no. Does this bridge on the swi...

christian178

Hi,

The STB has a fixed IP. But does the bridge on the MT switch need to have an IP in front of it to handle IGMP snooping properly?

regards

christian178

Hi, i will set up an Multicast-Bridge. Streamer on sfp-sfpplus5,sfp-sfpplus6,sfp-sfpplus7,sfp-sfpplus8 clients (SetTop-Boxes) are on vlan161 /interface bridge add admin-mac=A6:C0:B5:7A:94:1F auto-mac=no igmp-snooping=yes igmp-version=3 multicast-querier=yes name=bridge2-mc protocol-mode=none /interf...

christian178

So you need to add ether4 to bridge, configure ether1, ether2 and ether3 with pvid, add an appropriate entry under /interface bridge vlan and enable vlan-filtering on bridge. Optionally (but I strongly suggest to do it) also configure security properties: frame-types and ingress-filtering on bridge...

christian178

Hi , ich have ether1, ether2, ether3 in1 Bridge on an CRS. Works fine. No VLAN, no tagged traffic. No filter. every port can communicte with the other. Ports in switch all dynamically vlan1 untagged. Now i will put Traffic vlan201 on ether4 to this bridge (traffic). only devices behind the vlan201 o...

christian178

Hi,

you can't split.
i think it's not multicast with one IP

It can't work with one IP and many Ports for different streams.

christian

christian178

Hi,

uses MT in SSH Client no "diffie-hellman-group14-sha1"?

15:58:43 ssh,debug cl: diffie-hellman-group-exchange-sha256
15:58:43 ssh,debug sl: diffie-hellman-group14-sha1,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521

only dhg-sha256?

Christian

christian178

Hi, i have same error to ssh to junos in fips-mode: 15:58:41 system,info log rule added by admin 15:58:43 ssh,debug transport state: 0 --> 1 15:58:43 ssh,debug transport state: 1 --> 2 15:58:43 ssh,debug,packet sending string 15:58:43 ssh,debug,packet SSH-2.0-ROSSSH\r 15:58:43 ssh,debug,packet 15:58...

christian178

1.jpg

On PC3 is only VLAN201 possible (no untagged). PC3 should communicate with PC1,PC2 and Router

christian178

Hi, O.k. It's an CRS326 I will no vlan routing. tagged vlan201 on ether4 should only work with complete untagged on bridge. /interface bridge vlan add bridge=bridge1 tagged=ether4 vlan-ids=201 untagged=bridge1 possible? i have tested, but also not working... When i make an Interface "Vlan201&qu...

christian178

Hello, my CRS317 becomes Traffic on ether1. on ether2, ether3 should outgoing the Traffic untagged. on ether4 should outgoing/incomming the traffic of/to untagged (no vlan) ether1 in tagged vlan 201. nothing else. the ports ether2, ether3, and vlan on ether4 and all from ether1 shoud see each other....

christian178

Hello, o.k. now it work's. PPPoE untagged on the customer port. nothing else. good. /interface ethernet switch rule add dst-mac-address=00:00:00:00:00:00/00:00:00:00:00:00 mac-protocol=pppoe-discovery ports=\ "sfp-sfpplus1-uplink,sfp-sfpplus2-205162,sfp-sfpplus3-202669 src-mac-address=\ 00:00:0...

christian178

Hello,

try to link and 40G DAC Cable between Vengeance 3 and CRS 326 24s+ 2Q+
No way. 40G Links coms not up, not with auto-discovery and not firm in 40G Full-Duplex.

ROS on CRS is 6.48.3.
I have tested with DAC Cable an with 2 QSFP+ LWL Modules.
What's the problem?

thanks
Christian

christian178

Hi, i have sfp1 (with sub-interfaces vlan-id's 100,200,3000) and sfp2 (with vlan-id's 200,5000,1000) an sfp3 (with vlan-id's 250). So i need bridge traffic between VLan100 (on sfp1) and VLan200 on sfp2. Same time but not same traffic Vlan200 (sfp1) and vlan250 (sfp3) ... i refer to this: https://wik...

christian178

Hello, is it possible, that i translate more vlan to one port? Example: sfp1 with vlan100 translate to sfp2 vlan200 an on same time sfp3 with vlan250 to sfp2 vlan10 ? in wiki there is Note: Bidirectional communication is limited only between two switch ports. Translating VLAN ID between more ports c...

christian178

Hello vgdorneles, An improved version of the rules I posted above would be: /interface ethernet switch rule add switch=switch1 ports=S+1,S+2 mac-protocol=pppoe-discovery add switch=switch1 ports=S+1 mac-protocol=pppoe dst-mac-address=XX:XX:XX:XX:XX:XX/FF:FF:FF:FF:FF:FF add switch=switch1 ports=S+2 m...

christian178

Hello, I have an Script: /system routerboard settings set boot-device=nand-if-fail-then-ethernet /interface wireless set [ find default-name=wlan1 ] adaptive-noise-immunity=ap-and-client-mode antenna-gain=0 band=5ghz-a/n/ac\ channel-width=20/40/80mhz-XXXX country=no_country_set disable-running-check...

christian178

Hello,

Must i set the PPPoE-Server MAC and the User Mac, to enable only PPPoE in Switch-rule?

christian178

An improved version of the rules I posted above would be: /interface ethernet switch rule add switch=switch1 ports=S+1,S+2 mac-protocol=pppoe-discovery add switch=switch1 ports=S+1 mac-protocol=pppoe dst-mac-address=XX:XX:XX:XX:XX:XX/FF:FF:FF:FF:FF:FF add switch=switch1 ports=S+2 mac-protocol=pppoe...

christian178

Hello, i only will allow PPPoE from ports on CRS317 to uplink-port. no access to switch from customer-ports, nothing. only PPPoE... I have set these rules: /interface ethernet switch rule add disabled=yes mac-protocol=pppoe-discovery new-dst-ports=sfp-sfpplus1-uplink ports=sfp-sfpplus2-205162,sfp-sf...

christian178

Hello, My IPTVbox 192.168.1.2 (gateway 192.168.1.1) is on an RBhex (ether3). Router 192.168.1.1 (without iptv) is on ether1 of the hex. An IPTV streamer is on ether2 on hex. Streamer has another IP than my router (172.16.0.190/16) .. ether3 and ether1 are on bridge in the hex. IPTV box recived an ip...

Search found 48 matches