MikroTik

norpan

I have discovered the same thing recently. My conclusion is that since the vrf's in v7 are totally separated and the response from the DHCP-server (DHCPOFFER) will have a dst-address of an IP-address belonging to the main-table, the old workaround does not behave as in v6. The dst-address in DHCPOFF...

norpan

(!) enabled initial MPLS support (CLI only);

How initial is 'initial MPLS support'?
VRF seems to be implemented but I cannot successfully forward traffic over a L3VPN.

norpan

norpan, there will be new improved routing in v7.x, that will address and open new horizons for routing.

So a quite basic and thing in a router are not going to work in this major release at all?

And can you please tell me which product you would recommend me to use at this point?

norpan

sergejs, Kind of, I have contacted support regarding another issue:
[Ticket#2014121066000265] MPLS L3 VPN not adding labels
That issue is supposed to be fixed in v6 but I got the response to wait for v7 before I can expect Ticket#2013100966000755 to be resolved.

norpan

I think so too, and it haven't worked since 5.26

norpan

How about Ticket#2013100966000755? It's stopping us to upgrade to v6 and v5 is starting to get quite old... We have soon waited for 1 1/2 year for this. :shock: What is this issue? Perhaps some details so that us as users know to avoid the RC if we are using the same functionality. This issue is th...

norpan

How about Ticket#2013100966000755? It's stopping us to upgrade to v6 and v5 is starting to get quite old...

We have soon waited for 1 1/2 year for this.

norpan

I was able to do a workaround with one mangle and one nat rule to make this work. Make you sure you have a route for the DHCP server in the main table, default route is enough (or else the router will drop the packet) and create a mangle rule kind of like this: ip firewall mangle add chain=output ds...

norpan

I have got indications from support that it could be caused by to little free memory. How much free memory do you have when this happens?

norpan

Hi, Are there anyone besides me who have ran into problems with v6 and mpls-mtu=1500? Or is it just me who depend on fragmentation in my cloud? I do know it's not the best way to build a mpls-cloud but sometimes you just don't have a choice. It doesnt matter if I use clear-df or not so neither pmtu-...

norpan

Changing to PSK, and everything came right up. I must be screwing the key configuration up... Steps to set up IPSEC with RSA: Generate key on Router01 (r1_key) Export public key (r1_key.pub) Set Router01 IPSEC peer key=r1_key remote-key=r1_key.pub Generate key on Router02 (r2_key) Import Router01 p...

norpan

My guess is that is Rx/Tx buffer which gets full when you go from 1000Mbit -> 100Mbit which causes dropped packets, but no counters are increasing under '/interface' nor '/interface ethernet' so it's hard to tell. There are no issues when you do 100Mbit -> 100Mbit or 1000Mbit -> 1000Mbit, but there ...

norpan

I also have good results so far with 6.5rc1, but I'll give it some more time before I go and say that it's fixed.

norpan

I have not seen the problems with route leaking (I don't leak routes), but the biggest issue, is that once I put the vrf config to /ip route, the CPU goes to 100%. Then it not even possible to make a supout. If you se my old post's the routers goes crasy. It's really a pain in the ass, since its im...

norpan

Norpan I think your issue is different from my primary issue. The issue I have is stale routes within a VRF, e.g. a withdraw is received by the PE router but the route is never actually withdrawn from the FIB. This bug has been in RouterOS since at least 5.0rc's. In my lab I have 6.1 as a route ori...

norpan

What I can recall they have at least answered within 1 working day, haven't you got a response at all? If you still have the issues in your first post, can you try with 6.0rc13 to see if it works better? If you don't have it, here is a link to the torrent for all architectures: http://www.mikrotik.c...

norpan

Summary of todays testing, versions up to 6.0rc13 it is stable so far.
From v6.0rc14 and up the issue occurs and MT support has been able to reproduce it in their test.

Hoping for a patch to come out soon.

norpan

v6.0rc2 worked for over an hour, that have never happened for me with 6.0/6.1.
Unfortunately I have managed to kill one of the routers during my upgrade/downgrade so my testing is done for now.

norpan

Testing with 6.0beta2 now, definitely more stable than 6.1.

norpan

@nz_monkey: That's ok, I was not sure at first either but the more I look at it, and troubleshoot, the clearer it get's. At least that's what I'm telling myself. ;) I just hope that MT support can acknowledge the problem and figure it out, and get it patched really soon... I did another setup last n...

norpan

Hi All, When I apply the config to a new router straight from copy & paste, everything comes up as expected. OSPF exchanges Loopbacks, BGP comes up, label distribution is good, MPLS forwarding table is good. BGP Prefix to Label association is correct and the paths are working. The device on LAN...

norpan

I have sent a mail to support last night about this too. With v6.1 L3VPN stops working after a very short time, LDP is running, MPLS forwarding table is ok, BGP routes are still there. It seems, at least in my tests, that the vrf is "leaking". My setup: ether1 - MPLS interface ether2 - VRF...

norpan

Didn't know about that and gave it a try, but no difference. Downgraded to rc3, same issue Downgraded to rc2, same issue Downgraded to 5.22, now it works again! I wonder if i shall give rc4 another go, or maybe wait for rc5 and try again. Maybe it was something that went wrong at the upgrade to 6.0....

norpan

not for me i'm afraid... [admin@rb2011] /ip> .. -- go up to root accounting -- Traffic accounting address -- Address management arp -- ARP entries management dns -- DNS settings firewall -- Firewall management hotspot -- HotSpot servers management neighbor -- Neighbors packing -- Packet packing sett...

norpan

Where is my '/ip dhcp-*' menus in console with 6.0rc4, any ideas? [admin@rb2011] > ip accounting address arp dns firewall hotspot neighbor packing pool proxy route service settings smb socks tftp traffic-flow upnp export [admin@rb2011] > system package print Flags: X - disabled # NAME VERSION SCHEDU...

norpan

I've experienced this too, my guess is that the generated policy is not created with 'level=unique'...
Would be very nice if it worked though.

norpan

Upgraded to 5.17 and managed to add IP-address on MR guest, started a ping from a pc to MR guest: fping -l 192.168.100.22 192.168.100.22 : [0], 84 bytes, 5.89 ms (5.89 avg, 0% loss) 192.168.100.22 : [1], 84 bytes, 1.61 ms (3.75 avg, 0% loss) 192.168.100.22 : [2], 84 bytes, 1.42 ms (2.97 avg, 0% loss...

norpan

I'm trying to do a 'export compact' on guest but so far I haven't been able to login to the console to my freshly created, unconfigured metarouter. Well, after some time I were successful logging in and ran 'export compact' which resulted in a repeatedly broadcasted and logged message on the guest: ...

norpan

I have also tested MR on RB2011 with the same results as ropebih. At first I thought it was working as I didn't have any reboots, but when I started to ping the guest MR I discovered that the guest stopped answering to ping for about ~30-60sec, at least for a very long time. When the guest "cam...

norpan

Hi, I've tested a VPN setup with IPSec/L2TP which seems to work as expected, almost. It works nice for clients including NAT'ed as long as there is only one client, if there are a second client connecting which is behind the same NAT device the first tunnel is "replaced". I believe the pro...

norpan

After some time considering this, any plans to implement?
Would be nice to have.

norpan

Ok, thanks.

norpan

Hi all! I'm trying to setup a dhcp-relay which should relay requests through a L3 MPLS-VPN but can't get it to work. It seems like the relay request are sent via the main routing-table (default gw) and not the vrf. I'll try to illustrate: [DHCP server (192.168.88.1)] --vrf1-- [PE1] ---MPLS Cloud (ma...

norpan

You don't need to bother, I got it working.
Must have missed something the first times.

norpan

Hi,

Does anybody know if it's possible to do a src-nat to a VRRP-ip?
e.g: "action=src-nat to-addresses=1.2.3.4" when 1.2.3.4 is on a VRRP-interface.

dst-nat works fine, but I don't get src-nat to work.

Regards
Niclas

norpan

I got it working, it was the VRRP multicast packets that got stuck in firewall filter.
My mistake.

norpan

Hi! I've search the forum and found a few posts regarding VRRP with VLAN-interfaces (both success and non-success) but all of them seems to be rather old and none with v4.x. I've tried it with RB1000 and v4.3 and I get these results: * With only one VRRP node active I get response from the virtual a...

Search found 37 matches

Re: DHCP Relay in VRF

Re: v7.1beta5 [development] is released!

Re: v6.26 will be released on 6th week of 2015, check latest

Re: v6.26 almost ready for FULL RELEASE - please check lates

Re: v6.26 almost ready for FULL RELEASE - please check lates

Re: v6.26 almost ready for FULL RELEASE - please check lates

Re: v6.26 almost ready for FULL RELEASE - please check lates

Re: DHCP-relay in MPLS VRF

Re: Flash 90~100% CPU

MPLS and framentation on v6

Re: Anyone have a good example of IPSEC/L2TP with RSA keys?

Re: RB2011 UAS Gigabit to 100Mbit fragmentation bug

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: Problems with MPLS IPv4 VPN

Re: 6.0rc4 released!

Re: 6.0rc4 released!

Re: 6.0rc4 released!

Re: VPN connection issue

Re: RB2011 + Metarouter

Re: RB2011 + Metarouter

Re: RB2011 + Metarouter

IPSec/L2TP and NAT

Re: DHCP-relay in MPLS VRF

Re: DHCP-relay in MPLS VRF

DHCP-relay in MPLS VRF

Re: VRRP and src-nat

VRRP and src-nat

Re: VLAN and VRRP

VLAN and VRRP