MikroTik

acidsas

Did you find anything about "networking"? Which ROS did it run?

acidsas

There is something wrong with your config. First of all use simple queues to limit customers. Simple queues are faster than queue tree when run on multicore cpus. And you don't need any packet marking. Let's start with a screen shot of /tool profile. Run it during rush hour. I have few CCR1016 with ...

acidsas

I don't use any encryption at all. I've told already, that I DO NOT USE any encryption. IPSec is an encryption. I've also told above, if you don't use L2TP as BCP bridge interface, then FastPath for RX side actually works. Please read carefully before reply. Does L2TP support FP for both TX and RX?...

acidsas

May be you have missing any step, when you configure l2tp. I think you need a step by step guide like [REDACTED] Thanks, but I don't need any step by step guides :) You can replicate this issue yourself. Just add L2TP interface to a bridge (add bridge interface to ppp profile on both sides of the t...

acidsas

I messed some more time with this trouble and I figured out that if traffic originated from Mikrotik itself (attach IP to l2tp interface and ping anything from it) then I get FP for RX on L2TP. If traffic passes thru the bridge then no FP for L2TP. I want to remind that L2TP is a part of a bridge (B...

acidsas

Hey guys, I need your help! I have a RB4011 running long-term 6.45.8 and bridging (L2) two LANs. No IP forwarding, no firewalling at all. Ether1-gateway is a public ip. Ether1 (another physical interface with name Ether1) with attached VLAN (id 1510). L2TP BCP tunnel with activated FastPath to anoth...

acidsas

Strange enough,

how is it running under Linux, with same SFP+ transceivers that don't want to work under RouterOS?

Could you update on this issue? Did Mikrotik enable ixgbe allow_unsupported_sfp=1,1 in ROS?

acidsas

Here is my config for IPSec. Works with Mac OS & iOS. /ip ipsec mode-config add address-pool=ipsec name=ipsec split-include=192.168.1.0/24 /ip ipsec policy group add name=ipsec /ip ipsec proposal add enc-algorithms=aes-256-cbc,aes-128-cbc lifetime=8h name=ios pfs-group=none /ip ipsec peer add ad...

acidsas

You can use either Apple Configurator to create custom config with disabled EAP, or use settings shown in screenshots from our manual

Could you provide a link for a manual with screenshots?

acidsas

I was away for sometime. I'll post IPSec configure later today.

acidsas

It was added to 6.38.1.

I'm also interested in setup for Apple iOS & Mac OS. Currently running IPSec with xauth.

acidsas

Something strange is going on with ether5 on RB750GL. Port 5 is disconnected, but there is a lot of traffic according to counters. Up to 40Gbit per second

I'll mail support to support.

acidsas

Hello!

Current implementation of radius for dhcp server sends empty password as access-request.
It would be nice if we could choose to use mac as password or custom string like in hotspot.

acidsas

Currently 6.32.3 on all production CCRs and x86s.

acidsas

I can tell you even more... /ppp active print in console also triggers the issue.

As I've mentioned before, you can use ppp interfaces instead of active.

acidsas

CHR is currently limited to 1Mbit at each interface.

acidsas

SFP port is an independent port connected to internal gig switch. Look at block diagram — http://i.mt.lv/routerboard/files/Block-RB2011.pdf
BTW, 3011 got all gig ports.

acidsas

99% it's mtu issue. Try lowering your MTU and MRU. Also enable "Change TCP MSS" at General tab of ppp profile.

acidsas

We have the same experience since first versions of ROS v6 on x86 and different CCRs. Accessing active tab on PPP menu in Winbox sometimes crashes ppp (pptp/l2tp/pppoe/etc ppp) connections with radius auth. I've did numerous supouts, email support but didn't get a reply stating that it is a long tim...

acidsas

Hey! Today I've plugged ubnt's Rocket AC Lite into RB260GSP and it didn't power up. Looking at original PoE I've found that wires 4 & 5 are + and 3,6,7,8 are - (return). Is there any way to power Rocket AC Lite with RB260GSP? P.S. Mikrotik Gigabit PoE powers up rocket ac lite, but ethernet link ...

acidsas

shaoranrch thnx for your solution but I did it another way :) I've set Route Targets with filters on routes received from PEER 3 and matched these targets with filters for the hosts B & C. Diagram was a really simple example. I've got an extensive bgp configuration with 3 instances and 12 BGP p...

acidsas

shaoranrch thnx for your solution but I did it another way :) I've set Route Targets with filters on routes received from PEER 3 and matched these targets with filters for the hosts B & C. Diagram was a really simple example. I've got an extensive bgp configuration with 3 instances and 12 BGP p...

acidsas

eBGP I don't need to forward routes received from peer 1 & peer 2, only routes received from peer 3. I've tried to set a comment "123" on routes received from peer 3 with filters and set an outbound filter for host b to match only routes with comment 123 and accept them and discard eve...

acidsas

Please take a look at attached diagram. I have a 3 mikrotiks connected by GRE tunnel over private circuits (host a, host b & host c). There is a BGP session between host a & host b and host a & host c. Host A got 3 external BGP peers. Two of them are full table bgp peers (peer 1 & pe...

acidsas

Hello!

I'm running ROS 6.28 on CCR1016 and hotspot with mac cookies. It seems, that there is a limit on saved mac cookies. I can't get more than 136 mac cookies saved. Is there any way to increase the amount of cookies saved?

acidsas

VLAN is the cause. Here is what support told me: Hello, Currently VLANs doesn't have fast-path support. It is in our to do list, but currently the interest about this feature is low, so we are busy implementing other more demanded features. Your request is noted. Regards, Janis M. We can close the t...

acidsas

AFAIK, SMIPS is Simple MIPS from MIT, a subset of MIPS II This might explain why it is less performing at more MHz it is not performing "less", it is faster. test contains mistake that will be fixed. here, look at the values and compare, anything suspicious? 173,6kpps=88,9Mbps RB951-2nD 1...

acidsas

Make sure that you have wireless-fp (fastpath) package enabled.

It's an AC device, so only wireless-fp is available.
P.S. Didn't pay attention before... Could the vlan on the bridge be the cause of disabled fast path?
@normis, anyone?

acidsas

Here is my config.Pretty simple. /interface bridge add mtu=1500 name=bridge1 /interface wireless set [ find default-name=wlan1 ] band=5ghz-a/n/ac channel-width=20/40mhz-Ce disabled=no frequency=5xxx frequency-mode=superchannel guard-interval=long hw-retries=15 l2mtu=1600 mode=ap-bridge multicast-hel...

acidsas

notice that the hAP has 4 ports, but the 951 has 5 ports. this is why the hAP can only achieve 400Mbit.

also there is a mistake in the table, during conversion from packets to bits. we will fix it today

I was talking about 64byte packet performance. 951-2n got higher rates.

acidsas

Read the pdf. It is not very hard.

I did. But ros versions are different and my question was about real life results and not the synthetic test results. It's hardly believable that 650mhz is slower than 400mhz. Frequency is more than 50% higher.

acidsas

Is it really slower than 951-2n in terms of cpu power (nat & routing)? How much real throughput should be expected with regular soho usage?

acidsas

Whoops, I've replied to your original post

All the requirements are met for the fast path. I'll post config a little later.

acidsas

Obviously fast path not work on software bridge if you activate firewall or other settings than disable fast-path. Full config? Are you sure? Here is a quote from wiki: Bridge handler Bridge fast path is automatically used if following conditions are met: no bridge firewall rules (/interface bridge...

acidsas

Hello! I have a RB922UAGS as a plain wireless bridge. No firewall, nothing running on it. Just a plain WDS bridge. And I don't get why fast path isn't available on the bridge? [admin@MikroTik] > /interface print detail Flags: D - dynamic, X - disabled, R - running, S - slave 0 S name="ether1&qu...

acidsas

I know a lot of time have passed, but if you still interested ...

"Framed-IP-Address=172.24.54.15,Mikrotik-Rate-Limit='64k/64k 256k/256k 128k/128k 10/10'"

Works well!

acidsas

Hi!
I'm trying to overcome some issues with Apple CNA and hotspot and can't find anywhere info on the following options in firewall filter under hotspot:
hotspot (auth | from-client | http | local-dst | to-client;)

I'll really appreciate your reply!

acidsas

ROS 6.0. There is no Switch tab in Webfig, also there is no way to set master port for switching, port bandwidth thru web fig. All the fields and switch tab are present in Winbox. I've used Safari & Firefox to access webfig. Every field and switch tab are present in webfig on RB750, RB2011UAS wi...

acidsas

Thnx for your reply

acidsas

Just unpacked brand new rb951-2n, flashed ros 6.0 and I see 64Mb RAM. New revision? https://www.evernote.com/shard/s6/sh/d3bf67b0-32e3-4e95-94ab-d6a7bafbf92b/275f252b4f4939fe0cbb193c28127f81/deep/0/admin@D4:CA:6D:93:C2:B8%20(MikroTik)%20-%20WinBox%20v6.0%20on%20RB951-2n%20(mipsbe).png Click for larg...

acidsas

Hello! Please give me a hand with understanding firewall in depth. I need to mark incoming and outgoing packets based on source ip and interface to use them with queues. It could be done in two ways. Which one is better from performance side of view? chain=forward action=mark-connection new-connecti...

Search found 41 matches