Thanks Spudrageous, Two reactions - (not criticisms!): 1. Most OSPF tutorials and most of the (lesser # of) deployments I've seen ignore redundancy! I.e., they have a single ABR between each area and Area 0. We are very focused on no single point of failure. For this, you can stick two ABRs between ...

What makes L4S superior to fq_codel and/or CAKE? A modified use of ECN supports congestion control algorithms that avoid queuing delays at the sender, thus eliminating the sawtooth variation in launching packets that you're likely familiar with. But it is a new architecture with the associated issu...

How does one add votes?

I am at least very interested.

I finally found the other thread. It's here: viewtopic.php?f=2&t=149062
And yes, our problem is similar to at least one thing reported there.

I'll go through that thread in more detail...
Thanks again!

Thanks. I don't think that's what's happening here. We have SNMP data every two minutes and we record CPU utilization for each core. For the most recent loss of access, the utilization values were 0, 1 or 2 % on each core, randomly distributed, right up to the moment when we stopped getting SNMP data.

We have a problem that we've seen only with RB4011s. The router becomes inaccessible meaning it no longer responds to Winbox, SSH or SNMP, however it continues to carry traffic and there appear to be no customer problems. Power cycling the router restores normal operation. Our network has ~800 Route...

I've used the Winbox filter function in many other places but when I use it to extract a subset of the active connections, it returns nothing despite there being a few thousand entries that should match. At the bottom of the window, Winbox does appear to be selecting a subset of the entries, but it ...

<...>, if your WISP grows enough you'll see that an OSPF structured design combined with BGP is a great advantage, I've seen so many networks that grows in many directions became really unstable (I used to work with IPArchitechs and I've seen networks in lots of countries at the world) EIGRP may be...

1. 276 routers and 2385 active routes 2. 202 routers and 1338 active routes 3. 142 routers and 846 active routes The current networks are stable, even when one or two routers are flapping (due for example to a marginal radio link). On the other hand, our current success may or may not be helped by ...

I'm also interested in other's experience with large single area OSPF networks. We have four independent OSPF area zero networks that were geographically isolated at one time but now overlap. One of these areas includes an acquired Siklu-radio-based network with extra capacity but few alternate path...

Yes we use BFD, with MikroTik default timers.

I'm assuming BFD is entirely local between two peers and doesn't relate to stability of the whole network. In any event, we've never had occasion to look at other than BFD defaults.

In a single ospf area must be not more than 100 routers I believe. I hope you using lsa type 3 between areas in order to save processors time to recalculate shortest path. With OSPF help you have to announce only tech nets. For large scale better use BGP. Well we have 600+ routers in our largest ne...

We're an urban WISP with a dense mesh of wireless links and a router per building. I am concerned that, without paying attention, we have grown to 600+ routers and ~2550 routes in one OSPF domain. This network has a diverse mix of routers from CCR1036s down to RB750UPs. We're not having any OSPF pro...

But that means marking based on pre-NAT source address.
It's the public IP address range that determines which default gateway to use, so marking based on pre-NAT source addresses was what I was trying to avoid.

Thanks Pe1chl, but as I read the packet flow diagrams, SRC-NAT is done in PostRouting and after Mangle Postrouting. There doesn't appear to be any way to do SRC-NAT and then do routing. Am I missing something?

We have a WISP network fronted by a CCR1036 that has two upstream connections - a 1 Gbps Ethernet link that was until recently our only upstream, and a 10 Gbps link that will be our only link once a transition is complete. We serve a mix of business customers who get public IP addresses and resident...

Thanks Greg. That lines up with my (limited) understanding of MD5 authentication. We'll redo everything with 16 character authentication keys over the weekend. We've also deployed an NTP server and are putting NTP clients on each router. Of course that means, if our problems go away, we won't be sur...

Using v4.11 on a small and, so far, rather simple network (2 RB1100s and 3 RB450Gs) we enabled OSPF with MD5 authentication. Everything seemed to operate normally for 4+ weeks. Yesterday, we started getting MD5 authentication errors on one of the links. The error was "wrong authentication type....