MikroTik

infused

We resolved this. Routing loop by two subnets on VRRP

infused

Disabling ether2 stops the bgp flood, so something is happening there. Once BGP re-establishes across the link, spamming starts.

https://i.imgur.com/JRIzXq4.png

infused

I have this logged as support request SUP-26336 Config is as as follows CCR1 # aug/30/2020 15:00:55 by RouterOS 6.47.2 add fast-forward=no name=loopback1 /interface ethernet set [ find default-name=ether1 ] comment="switch link" speed=100Mbps set [ find default-name=ether2 ] comment="...

infused

bump, anyone? I've send a support request to Mikrotik as well

infused

I have two CCR's in an active/passive config. For about a year now, they are spamming BGP updates to my provider. Like 1-3 a second. See here https://i.imgur.com/4YNOpZ0.png My ISP has asked to sort this out, but I cannot see what's causing it. They have put a filter on it, hence the only acknowledg...

infused

bumping as we have the same issue on two CCRs

infused

Get some training in configuring and debugging a network? What else could we suggest given that you provide absolutely zero information? I've configured these for years, but not done a lot with bgp. the logs dont say anything useful. bgp wise I can just see updates being spammed for no reason. Ther...

infused

any ideas?

infused

Hi Guys.

My BGP sessions are sending a ton of updates (around 10 a second). Our ISP as advised we need to sort it out. I cannot see why this would be occurring.

Is anyone able to advise what I'd need to check to slow this down?

infused

Hi Guys.

Any recommendations on logging statistics on my core edge routers (CCR) to something where I can analyze IP addresses and such to build a few reports around traffic, where it's from etc? Some sort of open source solution or?

infused

I've noticed on latest stable firmware after a number of days that wlan1 goes unregistered. Disabling and enabling it again registers it and clients connect again. This is repeatable.

Any ideas?

infused

20/40/80 works for me, 20/40/80/160 doesn't.

infused

Finally set mine up today... connecting at 172mbps. Speed is crap (under 100mb).

nevermind, moved the channel widths and it's much better.

infused

There was a bug that allowed to find out passwords configured on the router. After that hacker can use them and log into router as a normal user. Then he can do whatever he wants. Upgrade will close this vulnerability, but if password is not changed, then hacker can still connect. Hacker connects t...

infused

This is *not* fixed in the latest release. This is a new bug. I am aware you removed this sentence. I just want to make sure - was it completely incorrect claim (ie new attack using old and fixed vulnerability) or is there even slight info suggesting, there might be another NEW vulnerability? @sjor...

infused

Had the same issue today. Half our customers were compromised.

infused

Anyone having issues registering their mikrotik's? I cannot get any CHR's registered, keep getting connection timeout. I can tracert and resolve the dns.

infused

Whats the IP meant to be for the licensing server? Can't register a bunch of licenses. Causing me a headache.

infused

There are so many threads on this. It's been touted for v7. So was Ikev2, but since Microsoft Azure makes Ikev2 mandatory, Mikrotik actually introduced it into v6.

You're going to be waiting for v7 for some time.

infused

Redundant psu no hot swap... its 2017... No, it's actually just $399 Look at the design of the Ubuquiti https://www.ubnt.com/edgemax/edgerouter-infinity/ See those back PSU modules? You had this on a couple of models, now you've gone back to joint modules? I'd be really happy to be wrong. I think t...

infused

Redundant psu no hot swap... its 2017... No, it's actually just $399 Look at the design of the Ubuquiti https://www.ubnt.com/edgemax/edgerouter-infinity/ See those back PSU modules? You had this on a couple of models, now you've gone back to joint modules? I'd be really happy to be wrong. I think t...

infused

Redundant psu no hot swap... its 2017...

infused

So I'm using multi ips on the same interface and same gateway.

How is it possible to make one the default route? Basically, the preferred source changes on what it feels like currently, which breaks IPsec.

Any recommendation on how you would configure this?

infused

Hi Guys.

Is there anyway to have each router endpoint in an ipsec wan able to talk to each other?

If we configure DNS on one of the ipsec routers to use DNS of a sever in another network, the traffic routes out the wan. even with nat src rules in place.

infused

Is there any image or planned image for azure?

infused

Seems to be traffic from the router cannot get to the other site. How can I fix that?

infused

I don't see this issue. make sure your firewall rules are correct. Without the proper rules it can sometimes work because dynamic rules are created on the outbound connection and the "established/related" rule then accepts the traffic in the other direction. However, this is not the prope...

infused

I got two sites, 192.168.10.x 192.168.11.x

I need to use the DNS server which is inside the 10.x network from the 11.x network. I can access everything from each side, but when I set on the Mikrotik to set the DNS forwarder to the other network, it doesn't work... am I missing something here?

infused

Any chance of the shortcuts coming back? I ask every release... every release I have further RSI

infused

Anyone having an issue where ipsec tunnels connect, but don't seem to be passing traffic? Have to kill them a couple of times before they connect properly?

infused

What's the process of using Mikrotik certs instead of the other places for the certs.

infused

Nevermind. Found the option

infused

Jesus christ batman. Upgraded an old router, now has capsman managing the wifi. How the hell can you remove it? So much config for just a basic AP

infused

legacy nic is not going to do you any favors.

infused

bugger all.

infused

Guys. Can you add thew shortcut keys back in? Specifically enable, disable, delete. I don't understand why this has been removed.

infused

Anyone got these, or got the Mikrotik plugin working? The cacti site is dead for me and all the information seems old.

Open to suggestions for something better.

infused

Do the function keys work now? disable/enable/comment etc? seriously not upgrading until those are there.

infused

Hi Guys. Been ages since I've done queue trees. So just to help me remember.. I have two bridges. bri-lan and bri-wifi. I want the lan to always have priority over wifi. So I would do the following: 1. Create a master queue with MAX Bandwidth set. In this case 150M (200M connection, full duplex). 2....

infused

It will not be cheaper. An inexpensive gigabit SFP costs 30 bucks. I am confused about that as well... Buying a device with 12-24 SFP ports and then plugging in many copper SFPs to use it with copper ethernet for sure will be more expensive than having a dedicated copper port device with a couple o...

infused

Hi Guys.

2xCCR's on 6.37.1 (can't change at the moment). I have an odd issue when rebooting virtual servers connected to these via a switch where it will try to route out the passive router. Disabling and re-enabling vrrp on them fixes the issue. Any ideas?

infused

It will not be cheaper. An inexpensive gigabit SFP costs 30 bucks. I am confused about that as well... Buying a device with 12-24 SFP ports and then plugging in many copper SFPs to use it with copper ethernet for sure will be more expensive than having a dedicated copper port device with a couple o...

infused

Fantastic news about the CRS SFP+ - any news about power for this device? Any chance of having dual power supplies?
Also great news about the CCR1009

Well done
As you can see, there are two power LEDs

Finally

infused

how many saved routers do you have in the loader?

about 30-40 on any one machine. Noticed this as well, but just ignored it.

infused

infused - You can click on some window or entry in Winbox with right mouse button and see available shortcuts (Ctrl+F=Find, Ctrl+E=Enable,...). Can you allow for the old style shortcuts? These are god aweful and are going to give me rsi and no time. It's such a slow down now. Biggest are: Comment, ...

infused

bring back the ova please.

infused

infused - Shortcuts are available in v3 of Winbox for a while already.

How do I find out what they are? Everyone knew the old shortcuts... why change then? Makes no sense.

infused

Hi Guys.

Link is gone. Can you please post this again? OVA is damm handy.

Thanks

infused

You've been around here long enough to know exactly which model you need. You're just boasting about your new 1Gb connection. Congrats & enjoy! :-) Sent from my Nexus 4 using Tapatalk haha. no quite. I plugged a rb3011 in to test, and hit full capacity @ %40 load. I was just checking if there w...

infused

Still preview the old version. Just feels better. Hard to explain.

How do I make the shortcut keys work? Like c for commend, d disable etc.

infused

So I have a RB2011UiAS-IN. Today I got gig connectivity installed. I have 10 firewall rules and max out at 250/250 @ 100% cpu. Can I squeeze anymore out of this? What you recommend for gig connections?

infused

Came across this as im hunting around for fixes. Waiting on v7 so a number of fixes. We use the CCR's in our datacenters. But now hitting issues with ipv6. Is there some sort of date for v7?

infused

Well crap.

Is this the same for tunneling l2tp back to a domain controller behind the router (nat). I've been having issues and now thinking this is it...

infused

Problem for us as a datacenter is Fortinet and Juniper have these sorts of features. So we are forced to run CHR's which use our infrastructures CPU etc. That's expensive compared to running multi routers on physical routers. The CCR's have so much power, it just seems a waste. Metarouter had so muc...

infused

infused

infused

codered1983 - What steps do you execute to receive this error? infused - This is not a global issue. Hotkeys, close, etc. works in general. It must be something specific. Please write to support@mikrotik.com and provide information about OS, RouterOS version, steps which you did execute, etc. I hav...

infused

chr - missing thedude6.37.1 cant upgrade

infused

So, on many routers at the end, I block everything on the forward chain. I've noticed a few issues though recently around printing in Remote Desktop using Easy Print. Apparently easyprint uses the RDP port which is tcp/udp 3389. However, when I have a forward block at the end, printing stops, or act...

infused

Just curious. I have many CHR's now running under vmware. Which is fine. However, encryption and what not begs for a hardware router. Are there any plans to bring metarouter to the CCR, to continue developing metarouter at all?

All my ccr's sit on 1-2% cpu which makes me sad

infused

I just went to the next version. I think the fix on the RB2011 took far too long. I was having that issue way back around 3 years ago (or whenever they came out). I kept moaning and sent a few support files but got nothing. Good to see it fixed now, but I literally threw away a ton of these once the...

infused

It really sucks, and crashes all the time.

crashes on close, on new window. hot keys for disabling, commenting etc dont work.

infused

Thanks. I kinda had this in mind. Do you have any example of the OSPF config I would need?

infused

Can someone give me an example on how to do this without linking me to some presentation? This is what I have: http://i.imgur.com/qlXtDvs.png I'm not sure what I need to be doing to get this to work. Mainly around what I need configured to make the two routers talk to each other, and the rest of the...

infused

Hi Guys, I have two CCR routers with separate connections to my ISP. BGP has been configured at the end. What sort of configuration do I need to do at my end to ensure that this all works? Only one switch is being used, so both routers are connected to this. It should be configured in an active/pass...

infused

Hi Guys. Just got a place currently with one wan connection. I have it on port1. I now have another wan which I have had on port6. Now, I suspect to get a dual wan going, as I need to split the same subnet, is to use mangle on routing mask and then do another default route using the routing mask. I'...

infused

maybe it will be easier, not yet decided if these will be made on regular basis The CHR OVA: http://www.mikrotik.com/download/share/RouterOS_CHR.ova sha256sum 1b336bc01847a14dddf7ce82a4c355dd5a9cad1011fcb6e120cf84dab866905a RouterOS_CHR.ova Quick bump - Can you *please* *please* *please* put out t...

infused

I have huge issues on RB2011's and don't use them anymore. I'm sure the second switch group has a firmware bug.

infused

Can anyone confirm this is fixed? Getting really sick of these port issues.

infused

Was this ever resolved, or did Mikrotik shove it in the too hard basket?

We have this on 2x RB2011-RM's. Both switch groups flapping.

Actually, read up and see it was a hardware fault. So how do I tell what version of the 2011 it is?

infused

Anyone? Easily reproducible.

infused

Hi Guys. Have my CCR with around 100 rules, quite a few subnets and routing. I had an established rule close to the top as I wanted to avoid processing the rules. However, now I need to constantly ensure the rules are all processed. So I disabled this rule. From here on, all new connections/existing...

infused

RB2011UAS ROS 6.32.4

PORT 6 WAN drops on first DHCP connection in the morning and renegotiates to 100mbit.

infused

Just bumping this as we are seeing this on a couple of RB2011UAS

Port 6 wan (1gbit) drops and reconnects @ 100mbit when new devices connect via DHCP in the morning. Blocking the first device's mac doesn't seem to fix it, indicating there is something else going on here...

infused

Is Mikrotik vunerable?

http://arstechnica.com/security/2016/02 ... vulnerable

infused

There's a little secret that not much people know... If a connection or packet does not get mark by a rule you created, it gets marked as "no mark". Unless I'm mistaken, you don't need that second mangle rule. Sent from my SM-G920I using Tapatalk Yep - I do know that. But don't think that...

infused

Hi Guys. Just a little confused on Mangle, and need some clarification on the queues that go along with it. Generally I build a Queue Tree with slightly less available bandwidth than the connection has, in order to make the limiting work. I have been marking packets as in my mind,it doesn't allow an...

infused

Just replying to let you know this works really well. Thanks

infused

More that routed traffic should not be considered by the firewall. It's coming through as natted, yet there is no nat rules apart from the one lan->wan masquerade rule. I have no dst nat rules to the DMZ port. Routing is working fine. I guess my question is, why am I seeing that traffic, or am I jus...

infused

Hi Guys. So, using a CCR, I have 3 ports. 1 - WAN 2 - LAN 3 - DMZ Public IP/Subnet addresses are assigned to port 1 and 3. Phone system is attached to port 3 using public address. I have a nat masquerade rule for LAN going out WAN The DMZ port seems to be working well, however, when locking down the...

infused

So far this new release system is working well.

Good job Mikrotik.

infused

Normis, Unfortunately version v6.32.RC3 still hangs or completely freezes devices RB751U-2HnD after using for a couple of hours. For several years all standard releases was never a danger to upgrade to, but with version v6.31 you guys just made it. If I were you, I might consider to call back versi...

infused

I mean inside of the Mikrotik OS, to spawn up virtual routers within RouterOS, like metarouter, which works on CCR etc. We have a couple of Fortinets to do this where we need it.
CCRs do not support Metarouter.

That's my point.

infused

I mean inside of the Mikrotik OS, to spawn up virtual routers within RouterOS, like metarouter, which works on CCR etc. We have a couple of Fortinets to do this where we need it.

infused

So out of interest, is virtual routers going to ever come back to Mikrotik in the form of multi core routers? I totally dig vmware images, but that'd be nice too.

infused

All depends on the pricing. Right now vedges are free to me as part of vmwares bundle. However, they are quite limited. Would be nice to replace them. I think you need to price on the vedge model where you can select to deploy: compact normal max compact is basically 1 core, 512mb memory normal 2 co...

infused

Virtual Support... oh hell yeah.

infused

Any reason why when upgrading it does not update the firmware automatically?

infused

Also, I think you guys should really just have a stable branch, and not stable... would be far easier and nicer for us as end users. The new system still does not address this. It's pretty much Russian roulette when upgrading, even if you lab it first.

infused

So any major issues with CCR?

infused

Excellent. Exactly what I was looking for.

ty.

Any idea where I can look this stuff up?

infused

Nevermind, just made a firewall rule with the no-mark attached to log. Must be a Monday.

infused

It does. But my monitoring software also detects vendors by mac strings. Was hoping to get Mikrotiks mac string so I can automatically assign them when detected on a network.

infused

Is there an easy way to capture 'no-mark' traffic to the log with mangle? I just want to see what's not being captured.

Thanks.

infused

Hi Guys.

is there a regex example of Mikrotik mac address ranges. I'd like to add auto Mikrotik discovery based on mac address in to our monitoring program.

infused

Thanks, that's what I thought. I believe I've encountered a bug on an older ros version.

infused

Is the queue tree bug fixed from 29? The one where if you make constant changes the queues stop working?

infused

Hi Guys. I have a 100/100 connection. I have a queue tree with the parent with a max limit of 70M I have 6 queues that each have a Limit At 5M (each) The Max Limit of each of the leaf queues differ. What I want to know is, when does the priority actually kick in? Is it after each queue hits and pass...

infused

Thanks for that.

infused

It's pretty light. CRS, more on queue management and most of all, real world examples.

infused

I know this is 6.29, but does 6.28 have any significant issues? Mainly around queues, gre tunnels? I need to upgrade a few tiks from 6.15 that I have issues on. 6.29.1 has a few issues i'd like to avoid.

infused

Is it possible to do this to redirect multipule websites?

infused

Is this possible?

infused

Is it possible to get a list of the main improvements coming to v7?

I understand multi core is going to be a priority...

infused

Would be nice to be able to add logos etc.

infused

Bump. Nothing special that needs to be added using a single connection?

infused

Is there a version of firmware in the 6.x line that seems to be "somewhat stable"? Currently we are using a mess of firmwares, and I just want everything to be the same. Is there one version that is semi-reliable? We do a lot of PPPoE, RADIUS, OSPF, BGP, IPSEC, L2TP, DHCP. No VLAN, no Wir...

infused

8x 10gbit switch please. Or more ports. Willing to sell my soul to get one.
That cracks me up I am also willing to sell my soul for one of these mega-throughput unicorns

Pretty sure Mikrotik can do it. They have the hardware now.

infused

Hi Guys.

At the most basic, what needs to be set to trunk between two CRS using SFP?

infused

8x 10gbit switch please. Or more ports. Willing to sell my soul to get one.

Also, add dual power supplies to 32 core ccr.

infused

Hi Guys.

Have a ton of drops on GRE tunnel. 1,000,000 of them infact. Nothing on RX. Connecting to a cisco router at the other end. No encryption or anything.

Suggestions on what to look at?

infused

Hi Guys. When running BGP, once my connection fails over, it never fails back. The behavior is quite weird. The main connection under bgp peers status says resent... then nothing. It stays in that state forever. The remote id, uptime etc are all black. A reboot of the router fixes it, and it goes ba...

infused

Is there a full sfp+ switch/router coming out soon?

infused

Very clever, but you really think that I didn't test new version before I upgrade a critical router? I have tested it on 3 other Routerboards... there is all ok, but on this very important router it ***** everything. So next time please try to think before post some stupidity ;) Why do you the upda...

infused

No sorry, but very curious to the answer.

infused

read the changelog - if you don't need a feature/fix, don't upgrade if your setup is working fine. If you do, well, report problems back in a non-whiny way with the data necessary for MT to actually fix your problem. make sure you have a backup of your Know-Good config BEFORE you attempt an upgrade...

infused

read the changelog - if you don't need a feature/fix, don't upgrade if your setup is working fine. If you do, well, report problems back in a non-whiny way with the data necessary for MT to actually fix your problem. make sure you have a backup of your Know-Good config BEFORE you attempt an upgrade...

infused

We normally wait 3-5 releases before upgrading. We have another unit on standby with the same config incase anything goes wrong. We also test it on another piece of identical hardware before upgrading. So, your advantage is to wait for others to find the failures of that specific versions. If every...

infused

Guys you need to check this stuff before throwing it in production. i don't like buggy releases either, but you are mad if you are putting this straight out to production/clients. We normally wait 3-5 releases before upgrading. We have another unit on standby with the same config incase anything goe...

infused

Just bumping this as I assume an active connection wouldn't have an issue once it's established? So setting to 1hr would be fine.

infused

Hi Guys.

Does anyone have a script for 6.x that can send an email when BGP links change?

Cheers.

infused

Just bumping this old request as the most likely cause is that you are having DNS attacks from outside your network since you have allow remote connections open. You need to firewall that up.

infused

Why did you make them look like smoke alarms? That's not a selling point. Look is half the reason we use the Unifi gear.

infused

Bump for goodness. Would like to see this also.

infused

I would, but you actually need 3...

then if I want to block youtube, it becomes 6...

Script seems better to go to future proof it.

infused

Hi Guys. Could someone give me an idea on where to start with a shell of a script? I need one that disables a rule at 10:30am, enables it again 11am, disables again at 12:30pm, enables again and 1pm never done a script and kind of been forced in to this. I've done a lot of coding/powershell, so lay ...

infused

Hi Guys.

Looking at the best way to block Facebook. I have a customer who wants to block access between certain times. It's pretty easy to do with a web proxy, however, what about ssl?

Looking for suggestions on the best way to manage this.

Thanks

infused

/me waits for people to upgrade their access point 100km away and have it fail then complain on the forums

infused

My CCR is on 6.3.... Could this finally be the release???

infused

do a export file=backup and paste it...

infused

Anyone running the latest RC on the CCR? How is the performance?

infused

Is there a good site for scripting in v6?

infused

Keen to hear some CCR feedback.

I'm still on 6.3

infused

I'm pretty critical of Mikrtotiks firmware and the CCR.

However.

I've been running my CCR in production since December 24th, 2012 on what was then v6RC6.

I'm still sitting on 6.3. It's pretty stable for us.

Not excusing Mikrotik, but you need to test your configurations.

infused

No one knows why this works?

infused

Hi Guys. I know the understanding of input chains and forward chains. What I am trying to work out, is if I am supplying DNS to my LAN, blocking everything on the input chain, except winbox (for example) stops DNS from resolving. This is expecting. Why does adding the rule on the input chain of esta...

infused

Not at all...

It would just be nice to know it's on the cards somewhere down the line. Mikrotik are getting in to Juniper and Cisco territory now with the CCR's. It seems only fitting.

infused

I disagree that enterprise support sucks. Support can make or break your business. I'm willing to bet that if you are this way inclined, your business is rather small. IMO Mikrotik need to offer some type of enterprise support. Otherwise it makes products like their 'carrier grade' products worthles...

infused

Should be nat.

For example, I have a src nat for masquerade. If I block input chan port 80 dst, the lan cannot access port 80. And viceversa when incoming traffic hits the router. I thought since there is masquerade, traffic flows through the router, so it would be a forward rule.

infused

Hi Guys. I've never really dealt with ppoe and single ip addresses in mikrotiks. I'm normally setting them up with subnets and such. So yesterday I configured a Mikrotik connected to a zyxel vdsl router in bridge mode using ppoe. It all works fine. However, the IP address obtained from the provider ...

infused

Just wondering if there is a performance hit by using address lists. If so, how much?

infused

Just read the new newsletter. Are dual power supplies planned for the 36 core router? If so, when is it due? I don't really want to down grade. But it's always bugged me the 'carrier' router never had dual PSU's. Very useful information about CCR is available here: http://mum.mikrotik.com/presentati...

infused

Very useful information about CCR is available here: http://mum.mikrotik.com/presentations/RU14/megis.pdf Thank you. This is fantastic stuff. Where can we find more of this sort of thing? I highly suggest this is more visible to people like us browsing the forums. It actually answered a lot of my q...

infused

RB2011UAS issues after upgrade to v6.12: - Dynamic routing protocols registered routes wrongly after first start. A simple reboot resolves this issue. - Ports are flapping. There is a very short outage every few minutes. SNMP monitoring agents on servers sends tons of alerts. There is no RX/TX erro...

infused

Any issues with CCR reported on 6.12?

infused

CRS test unit on 6.12 runs sweet as.
You did not have to reset the configuration ?

I hardly had any config. The config I had worked fine though.

infused

CRS test unit on 6.12 runs sweet as.

infused

Try 6.10, if that fails, use 6.7

infused

We gave up on ours... We use them, but without management vlan. Keen to hear if someone gets that going.

infused

Dual power supplies... thank god. I'd buy it just for that. Now we are getting to enterprise level (please no adapters).

Any idea on pricing for that beast? (CCR)

infused

Posted in the other thread, I am on 6.3, which is mostly stable. Am I right in saying 6.7 is the most stable now at the moment?

infused

What's the latest stable version for CCR? I need to move from 6.3 (pretty stable). It looks like 6.7 is the next stop?

infused

Good to see you delete my posts.

Pretty much confirms it all.

infused

What do you need to be able to direct console in to the crs?

infused

Nothing for CRS?

infused

CCR 6.3 Anything else, 6.6 (based on personal testing and deployment) Our main CCR which is the gateway for our entire network has now been in production for around 1.2 years. We used 6.0 RC6, RC11 and 6.3 only. All were stable. We have 6.7 on our backup CCR and haven't seen any issues with it... ho...

infused

Why not get a CCR?

infused

6.3 works fine on CCR. Haven't had any issues and I've been running it for quite a few months now.

infused

For the CRS, stay on 6.6

infused

Yes, I would do a circle... this is not possible?

infused

Hi Guys,

I need to install 5 CRS switches in to a rack. I will have to install these in series. What's the best config to run on these in that configuration? I'm looking at linking them via one port only.

infused

Not sure what that's meant to mean. CCR is meant to be enterprise, so naturally needs an enterprise switch to go with it. I wouldn't call the CRS in its current state, enterprise.

infused

Just wondering... 16 port SFP+, or 24 ports with 2 or 4 sfp+ ports, or 48 port switch?

infused

Anyone having drop outs on the CCR after a month or so of up time? We are... reboot fixes it instantly.

infused

I don't know, that's my ISPs router.

infused

All the routes I've shown are all the routes that are there. If you do a tracert, you will see the loop yourself. Since the default route is going to 101, I don't get how there would be a loop in the network. Tracing route to account.filecloud.co.nz [202.20.2.68] over a maximum of 30 hops: 1 * * * R...

infused

So, the main routing is what I posted above. Attached devices will then use a public address like 202.68.89.188 gw 202.68.89.177 (router)

infused

I have to add the addresses of those subnets in order for machines attached to use the public ip addresses directly. They are assigned to vlans which create the routes. If I disable them, the machines cannot use those addresses.

infused

Hi guys I have a tracert loop for 3 subnets... # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 A S ;;; core route 0.0.0.0/0 202.20.4.101 1 20 ADC 202.68.89.152/29 202.68.89.153 bri-vlan51 0 21 ADC 202.68.89.176/28 202.68.89.177 bri-vlan50 0 If you tracert to any of those subnet's ips you will get stuck in...

infused

bump... just need to confirm how to do this.

infused

Right, so in this case I don't need to statically route?

infused

So, my network skills are not that great... We have one router with a bunch of subnets hanging off it that we use to do routing for hosted customers. The issue we have come across is with VPN tunnels. We configure a tunnel up and say we need to route traffic to 192.168.120.0/24, from the customers h...

infused

6.3 is pretty solid on the CCR for us anyway. We have been using it in production since RC7, then RC13, then 6.3 (since December 30th 2012)

We only have one 100mbit uplink, about 20 queues, lots of firewall rules for about 10 different subnets.

infused

So when is the CRS (originally scheduled for May) going to be hitting the shelves

infused

I read half way through routeros by example then started playing. Best way imo.

infused

Just create two GRE tunnels. No idea why everyone is trying to make it so complicated. First Router: /interface gre add disabled=no dscp=0 l2mtu=65535 local-address=1.1.1.1 mtu=1476 name=\ tunnel1 remote-address=2.2.2.2 /ip address add address=172.22.1.1/32 disabled=no interface=tunnel1 network=172....

infused

Just bumping this because you can make this work, we just did.

You have your main cisco DMVPN router connect to the mikrotik using a simple GRE tunnel. Add the routes to the DMVPN and away you go. It's really not hard.

You just need to manually add the routes to the Mikrotik.

infused

Hi Guys, I have two queues on a rb2011. I am tagging sip traffic and rdp traffic to a remote provider (using address lists instead of ports), then using a queue tree to raise the priority. What I want to do is limit any non-tagged traffic to 2mb/s in both directions. Here's my code: /ip firewall man...

infused

For production gear, just don't upgrade.

I had a CCR and stayed on 6.0 RC13 until 6.3 had been released for awhile. It's stable for me, so I will now stay here until there are significant performance improvements that will make it worthwhile upgrading.

infused

Nearly everything utilizes the cores now. Just upgrade to v6.3 and check the "/tool profile" menu to see how load is distributed.

Thanks for that. Does that mean that say firewall will use the resources of all cores, or just a bunch of cores?

infused

As CCR SW is not paralellized I guess the 1100AHx2 is faster for the moment. actually some important parts are parallelized. You can get a lot more throughput that with RB1100AHx2 Can you expand on what is? Also curious to how the router, on 6.3, is now carrying load over the cores. Reason I ask is...

infused

So what gear and setup are people using where they need to give a signal to a whole office (maybe two stories) and use SIP wireless phones where the connection cannot break?

infused

Mikrotik: Is there a layout of what services/features use what cpus?
Tools / Profile

Doesn't show you what cpus each service is working across though.

infused

Actually winbox bug in 6.3 on ccr.

Use safe mode and turn it off. I go to exit winbox and it says im in safe mode, if I quit, changes will be undone.

infused

Finally upgraded my core CCR from RC13 to 6.3. Runs much smoother. Cpu seems to be better too.

I don't run BGP or IPSec, but use most other features.

Mikrotik: Is there a layout of what services/features use what cpus?

infused

bumping. Keen to know the outcome of this.

infused

Interesting. What hardware were you using? I'd be keen to replicate.

infused

Nothing wrong with them...

infused

Yeah, still have the same issue...

infused

Hi Guys,

I've used Mikrotik a lot now, but not really for wireless.

What would you recommend for putting in the ceiling for an office that's about 400-500sqm. We want to create a mesh so they can walk around the building without being disconnected.

Any help appreciated.

infused

Solved. Bad managed switch. Now in the bin and everything is working good.

infused

Mikrotik, are these new builds adding to the performance of the CCR, specifically around sharing load over cores?

infused

any issues on ccr yet?

infused

Hi Guys,

Two different mikrotiks, two different wireless APs. Everytime we plug the AP in to the mikrotik, everyone loses connection to the router.

Any ideas?

infused

Yep. Sounds like what I'm doing.

I'm just trying to sus out these queues.

infused

Can anyone chuck this in a nice, printable pdf?

infused

Your guide looks good, but it's a bit much for what I'm wanting to achieve. When would you mark connections over packet?

Also, If I create a default queue of 10m/10m at priority 8, then a sub queue with 2m/2m with priority 1 which has the marked sip traffic, would that work?

infused

Slow, congested connection for this customer. So I need it.

infused

RouterOS 6.3 Build Time Aug/30/2013 13:25:42 RB433UAH hours CPU 100% http://demo2.mt.lv/graphs/cpu/

in my RB433UAH build Aug/30/2013 08:26:33 processor without load (netwatch,scheduler works)

your router is open. I suggest setting a password.

infused

Press … and select the MAC Address directly, then connect. ROS 6.2 and CCR1036 same for me. I can't connect with winbox and mac, even mac server configuration correctly configured +1 I have 8x CCR 1036 I am unable to connect to with MAC-Winbox. Have tried 6.0rc5 (default) and 6.2 I know that Window...

Search found 313 matches