MikroTik

sander123

The only problem i have sometimes is that when there are a lot of route changes (during BGP down or up for example) IPv6 stops working. The route loses the fe80 addresses and only have the static IPv6 adresses but no traffic is working any more, also OSPFv3 stops working. I can fix it without a rebo...

sander123

We are running on 7.11.2 but seeing the same thing happens on some peers (not all)

sander123

Hi, We have multiple routers in our network, but for specific choice i am looking for some advice. I have a CCR1072 which is doing edge (BGP) tasks and core tasks. I want to split this so 1 router for edge and a second for core task. On this specific router we have: - 4 Full Table BGP Sessions from ...

sander123

I have a fix, but i don't know what is going wrong..

i disabled ipv6 thorugh IPv6 -> settings -> Disable IPv6
i Re-enabled IPv6

It start working and also i see now a fe80 address on each interface..

I don't know what was going wrong but it looks like whole IPv6 stops working

sander123

Correction it looks like the whole IPv6 stops working, or anyway stops forwarding traffic.

Also OSPF on IPv6 is not working anymore.

sander123

Hello, We have a problem with VRRP and IPv6. We have a 2 VRRP interfaces between 2 routers, one for IPv4 and one for IPv6. IPv4 we don't have any problem, IPv6 we have a problem on 1 of the 2 routers. The interface stops working after x days and go in to a invalid state. Earlier it works again after...

sander123

Anyone with recommendations for our network design?

sander123

Will interruption be shorter when i add a core router which i use as gateway for clients?
And give this core route only IBGP to router1 and router2 so routing table is a lot smaller?

sander123

Hello, I don't know if it is normal, and cannot found allot of experience on this part of my problem from other Mikrotik Users. We have 4 CCR on this moment: - Router1: CCR1072 - Router2/3/4: CCR2116 Router 3 and 4 are used for PPPoE for customers, default route to router1 through OSPF and failover ...

sander123

If i see your filters correctly it looks like you only accept default route at the moment 0.0.0.0/0, load balancing is only possible with partial or full routes. Than you kan also do a peer-prepend on inbound. Even if I accept the whole bgp-in without any discard or deny rul, the only route I am ge...

sander123

As soon as I set the bgp-local-pref, I am no longer getting any route form that ISP connection. If i see your filters correctly it looks like you only accept default route at the moment 0.0.0.0/0, load balancing is only possible with partial or full routes. Than you kan also do a peer-prepend on in...

sander123

If i read you config correctly you need to set bgp-local-pref on the in filter.

For example 120 for primary ISP
and 100 for back-up ISP.

sander123

Found the problem.
I had exported/imported BGP templates from another router and forgot to change the local router-id

After changing al is working like expected.

sander123

I see it is using ECMP, but why dus it ignore the local-pref difference?
Is there another (better) option to prio specific paths through routing filters?

update:
Also it uses ECMP for some subnets while the AS path is longer, so way isn't it routing through the shortest path?

sander123

Hello, Maybe i have something wrong, but why are both routes active while the first one has a local pref of 120 and the second of 100 I get more routes from other BGP peers for this subnet but they are not active as correct. Running ROS 7.1.5 Ab + afi=ip4 contribution=active dst-address=185.xxx.xx.0...

sander123

OSPF on CCR2116-12G-4S+ with FW 7.2.1 not work! I have it working on two CCR2116's, along with BGP and handling 600+Mbps of traffic each. Both routers are talking to each other as well as routers running 6.47.10. What does your config look like? On this moment we have a VLAN where 4 CCR routers are...

sander123

Hello, I have a question for our network design. On this moment we have a VLAN where 4 CCR routers are connected router1, router2, router3 and router4. It is a /24 subnet and they have a OSPF network type broadcast, for example 10.1.1.0/24 router1 and router2 are also doing VRRP for servers/clients ...

sander123

OSPF on CCR2116-12G-4S+ with FW 7.2.1 not work! I have the same problem with 7.2.1 on a CCR1072 en a CCR2004. Both work perfectly on 7.1.5, but OSPF crashes on 7.2.1 If OSPF instances enabled on boot, it is not working at all. If i disable OSPF instances, reboot, enable instances it is working for ...

sander123

Little additional information.

We haven't experience this problem on our second BGP router for now, this is a CCR2004 also running v7.1.3

sander123

Hello, I experience a problem with RouterOS v7. We have multiple Full BGP Feeds and some peering. After high CPU load, for example this morning one of our full BGP transit having an outage, so the router become bussy to remove the routes from this transit, the default static route (which point to an...

sander123

Hello, Question, where i find not that many information about, also not in this forum. What is the recommend setting for the input.affinity and output.affinity If i read the following link correctly: https://help.mikrotik.com/docs/display/ROS/ROSv7+Basic+Routing+Examples I should say for a CCR1072 w...

sander123

i had exactly the same. Did you find an solution to revert this? I had exactly the same, after i noticed our subnet get not advertised i tried some options and accidentally did the same.. My router is unusable now, and also after a reboot the cpu is 100% and the settings are all empty also commandli...

sander123

No problem, happy with your help!

Oké but on my router1 and router2 i also have a static default route
so in theory i should be possible to give it through to other routers (router3 router4 etc) via a route filter? if i understand you correctly..

sander123

Oke, i don't really understand what you mean?

So i need to disable the originate-default option
Create a filte rule with: add chain=ospf-out-v2 rule="if (dst==0.0.0/0) {set ospf-ext-metric 20; accept;}"

And then i lose you, because if i do so no default route is given..

sander123

I dit using: Are you using 'originate-default=always'

I dit not check /routing/ospf/lsa/print
I have downgraded the router for now to v6 so i can not test it during work hours.

If it is the correct way, i will check again during evening or build a small test test set-up.

sander123

Hello, How can i set a metric for the default route via OSPF. We want router1 to be the primary default and router2 the back-up for all other routers in our network. In V6 you could do it under the Instance settings, see screenshot. In v7 there is no such option, i have tried it with a route filter ...

sander123

using RouterOS 7.1RC6 with EVE-NG, when we configure OSPFv3 when starting the routers, everything works perfectly when turning off the lab and turning on OSPV3 again stops working, and does not form a neighbor @mrz I see the same thing happening, this also happens when the link between routers disc...

sander123

I got it working, but without the option service-tag=yes.

sander123

Oke, so adding a bridge with VLAN Filtering on.

and then? do i need to add the outer vlan 1373 as a port to the bridge on both ports?

And setting the service tag on vlan 1373 (on each port? so port to service provider and the port to router2)?

sander123

Hello, We recieve VLAN 1373 tagged form our service provider. This VLAN is QinQ compatible. The situatie is: service provider <sfpplus12> router4 <sfpplus5> router2 I want to bridge VLAN 1373 (outer vlan) from router4 to router2 And from router2 i wan't to add the inner vlan's. But i cannot get it w...

sander123

FYI We have still no reboot after 39d 13h still running 7.1rc3 only thing we changed is the tcp established timeout. We also updates a second CCR2004 it is running 7.1rc4 for 6d 9h now. We dit not set the queue/pfifo setting. any reboot till now on both routers ? 7.1rc3 rebooted after 42 days. It w...

sander123

Hello,

Please help with the BGP filters in v7.

I want to reject 2 as numbers on a internet exchange.
I have the following but it isn't working

if (bgp-as-path 11111|22222) {reject} else {set bgp-local-pref 120; accept;}

For example AS 11111 and 22222 blocking and accept all else routes.

sander123

will you please tell us what all the changes you made ? I updated 7.1rc4 yesterday and got 3 reboots till now. tcp timeout is for 1hr I am still runing 7.1rc3 on this router and set tcp established timeout to 1hr That's all i changed.. currently 33d and 15hr uptime FYI We have still no reboot after...

sander123

FYI No reboot yet, running 31d 14h 51m will you please tell us what all the changes you made ? I updated 7.1rc4 yesterday and got 3 reboots till now. tcp timeout is for 1hr I am still runing 7.1rc3 on this router and set tcp established timeout to 1hr That's all i changed.. currently 33d and 15hr u...

sander123

any update on uptime on 7.1 ?
Still on 7.1rc3 and a uptime of 19 days. So certainly much more stable since changing TCP Timeout

FYI No reboot yet, running 31d 14h 51m

sander123

I have lower the tcp-established-timeout from 1 day (default) to 1 hour, i don't know if this has any effect, but i read about it on the forum. for now i have a uptime of 11d 15h 17m on v7.1rc3 it it anyway a record for me :) any update on uptime on 7.1 ? Still on 7.1rc3 and a uptime of 19 days. So...

sander123

will you please try 7.1rc3 ? I have now 6d 15h uptime on v7.1rc3. I have lower the tcp-established-timeout from 1 day (default) to 1 hour, i don't know if this has any effect, but i read about it on the forum. for now i have a uptime of 11d 15h 17m on v7.1rc3 it it anyway a record for me :)

sander123

Code: Select all
Another reboot of this router after 15 hours and yet another reboot after 5 hours..
So the reboot problem still exist..
will you please try 7.1rc3 ?

I have now 6d 15h uptime on v7.1rc3.

sander123

We wan't to create a central user manager router (in the datacenter for example). We have camping customers with multiple internet connections, because the size of the park not on a central location, and a mikrotik router per connection. so for example: Router1 > switch > 5 Wireless Access Points Ro...

sander123

Another reboot of this router after 15 hours and yet another reboot after 5 hours.. So the reboot problem still exist.. I don't understand. Is it so hard for MT to trace what causes reboots and fix it? Even it is happening so often... That's pathetic... Complete agree with you.. after more then a y...

sander123

No reboots yet.
Unfortunately reboot after 8 days and 8 hours.. v7.1rc2

Another reboot of this router after 15 hours and yet another reboot after 5 hours..
So the reboot problem still exist..

sander123

Still same from August 31 ? No reboots ?
No reboots yet.

Unfortunately reboot after 8 days and 8 hours.. v7.1rc2

sander123

No reboot, for now stable.
I hope it stays so!
Still same from August 31 ? No reboots ?

No reboots yet.

sander123

I just updated 1 of the 3 CCR2004 routers we have to 7.1rc2. After reconfiguring OSPF i have no problems so far, also PPPoE and L2TP server are working fine for know. I hope this resolves the reboot problems, i will share my experience. not reboot from upgrade till now ? No reboot, for now stable. ...

sander123

I think it's a bug in v7.

The extra subnet has the status of a VPN route.
I i change the route filter and do "redistribute static,connected,vpn" it works

sander123

Send a supout file to support.

Ticket SUP-59118

sander123

I have a small OSPF problem, I have the following route filter: if (dst in 185.x.x.0/22 && protocol static,connected) {set ospf-ext-type type1; set ospf-ext-metric 20; accept} When a PPPoE user/secret has also a routes object/rule, to route for example a /29 subnet to the customer, this is n...

sander123

We do have a small problem with PPPoE server.

In some cases we give the client also a subnet, in v6 we dit it with the "routes" in the PPP secret, but it looks like this is not working in v7..

sander123

Thank you, it works! I have a last question for BGP in v7. What is the best way to filter bogon networks? In v6 we have: We have a separate rule sets for every peer. first rule is a jump rule to Discard-IPv4-in then we have some discard rules in order to block for example 192.168.0.0/16 and 0.0.0.0/...

sander123

Thank you, the autofill doesn't give all the options back that are possible. Can you check if i understand it right? Is this the correct way to select both static and connected? (so using ||) if (dst-len>32 && dst in 2aaa:aaaa::/32 && protocol static || protocol connected ) {set ospf...

sander123

Oke, thanks.

Do you know the syntax for setting the cost and the type in the routing filter?

sander123

Hello, There is very little information about the routing filters, and i need some help with it. I have found this: https://help.mikrotik.com/docs/display/ROS/ROSv7+Basic+Routing+Examples#ROSv7BasicRoutingExamples-OSPFConfiguration But it is not much. First i need help with OSPF and later with my BG...

sander123

Now that v7.1rc is out, and next CCR2004 is shipping with RouterOS v7.0.4 or 5 from factory, might be a good time to try out your configuration with that v7. At least it will give you definite answer on HW or SW issue Has anyone the possibility to try if v7.1rc is more stable? I wan't to but on the...

sander123

6.x does not support /31 addresses either. If they release it, it will be a brand new feature in 7.x. You are correct. But in v6 you can do it as: IP-Adress=10.0.0.2 Network=10.0.0.3 And the other site/router the opposite. Do you know if it works in v7? If so i wan't to look if we can upgrade 2 of ...

sander123

On the routing status page it says that /31 adresses are not supported, but does anybody know if it works like v6? https://help.mikrotik.com/docs/display/ROS/v7+Routing+Protocol+Status So: IP-Adress: 10.0.0.2 Network: 10.0.0.3 And the other side exactly the opposit. Without setting a /31 behind the ...

sander123

Now that v7.1rc is out, and next CCR2004 is shipping with RouterOS v7.0.4 or 5 from factory, might be a good time to try out your configuration with that v7. At least it will give you definite answer on HW or SW issue Has anyone the possibility to try if v7.1rc is more stable? I wan't to but on the...

sander123

I am really curious to, because this is the most important function for us.

Maybe the routing status page can be updated?
https://help.mikrotik.com/docs/display/ ... col+Status

sander123

Does anybody know if routing functions are updated to?

In the link they only talk about v7.1beta7 not about 7.1rc1
https://help.mikrotik.com/docs/display/ ... col+Status

sander123

Can you try lowering your TCP connection time out to less than the standard 24 hours? Not sure if you have any tracking, but it made a huge difference to ours. Now we're stuck with ports randomly dropping and killing the router. On the first CCR2004 we have no connection tracking active. The 2 othe...

sander123

We have the samen problem with 3 CCR2004 routers. 1 we are using for OSPF / BGP (reboot around day 40/45) running v6.47.10 2 we are using with OSPF + PPPoE server (reboots around every 21 days) running v6.47.9 and v6.48.3 I created a support ticket: SUP-56952 There is one thing that caught my eye, w...

sander123

Hello, i have search on this forum but cannot find a affirmative answer.. A few day ago we experience a DDOS (Syn Flood), our router, CCR1072, was during this DDOS total unreachable for management, we experienced some 4/5 Gbps DDOS traffic. I already find we need to use Fastpath (or Fasttrack), with...

Search found 61 matches