MikroTik

SoundGuyFYI

I am looking to load balance my routers NATing over multiple IP address. I have my own public subnet and am hoping to use a /29 or /28 to nat out to my provider. The goal I have to to nat a group of private subnets. Lets say 192.168.0.0/22 for example I want to nat out over 6 IP addresses *.*.*.1-*....

SoundGuyFYI

I wanted to see if anyone had compiled the affects of the winbox vulnerability found in versions 6.29 - 6.42. I am cleaning up some of the affects and am hoping that other have collected changes in there equipment so I can compare against what I am finding to see if I have found everything. I have j...

SoundGuyFYI

Distribute-connected will force OSPF recalculation whenever a pppoe interface goes down/up, you should probably have a different approach here. Do you need to advertise OSPF over all these pppoe interfaces? If not, you should set distribute-connected to no and add pppoe network to your OSPF network...

SoundGuyFYI

Okay so I believe I have found out that when I have an interface with the high number of networks disconnect it overload the routing process and causes it to reset. This appears to be an issue that has come up in the past (v4.X) when the process uses 100%CPU only this time its on a cloudcore with mu...

SoundGuyFYI

routing process crash fixed? which version introduced it? for me since 4.10. for some reason when a routerboard running ospf and ibgp shutdown or reboot, some routers on network crashed the routing process ( the cpu goes 100%) and only goes back with a reboot. everything related to routing goes dow...

SoundGuyFYI

So it was firmware version.

I was running 6.37.1.

Upgraded to 6.38 and it fixed the issue.

This may be good for people to know!

SoundGuyFYI

Is anyone else seeing the Connection state "Invalid" catching OSPF traffic? I enable this rule add action=drop chain=input connection-state=invalid log=yes Here is the log entries it is catching (that in my opinion it shouldn't) 11:37:43 firewall,info input: in:vlan600 out:(none), src-mac ...

SoundGuyFYI

My main thought is that OSPF has a limit as to how many route updates it sends some how.

SoundGuyFYI

Have you assigned an address to your loopback and set the router-id for OSPF to be this loopback address?

It's always best to assign OSPF to the lookback address as this "interface" never goes down.

Yes, router id has been set to loopback IP address

SoundGuyFYI

All, I have a weird issue. I have a CCR1036-12G-4S. It is running 6.37.1 and has had this issue with old firmwares as well. My problem is the when a physical interface goes down withs lots of PPPoE connections on it, my ospf for the whole router goes nuts. When I says lots, I'm talking 96. It report...

SoundGuyFYI

Yes, default is the same as 0.

Cool. Thanks.

SoundGuyFYI

How many times to allow own AS number in AS-PATH, before discarding a prefix. If it is set to 0 then prefix with its own AS will be discarded. I understand that. My question is more whether the default value is the same as 0. The default value is technically a blank field so I don't know what value...

SoundGuyFYI

Could any clarify whether the default value of the "allow-as-in" field prevents the peer from giving a route with your own as in the path (does it do the same thing as if it were set to 0)?

SoundGuyFYI

I get an error in my log under the topics "snmp, warning" the reads as follows timeout while waiting for program 20 At this time I lost my ability to monitor the device via SNMP monitoring software. Any ideas? This is a primary router so I want to make sure I have looked at everything befo...

SoundGuyFYI

Is there anyway to upload a custom default config?

For example, when you reset the router to defaults, it loads a custom configuration?

This may be a stupid question but I couldn't find an answer on the forums.

SoundGuyFYI

Do you see the LSA for the static route? How disruptive would it be to try a different version of RouterOS? I tested this on 6.29.1 without issues. Can you post a drawing of the topology? Sadly I have not had the opportunity to upgrade to that version yet. I am currently running 6.25. If I can veri...

SoundGuyFYI

So here is my situation: Router configured with BGP receiving DR from peer OSPF configured to redistribute DR as =if-installed-as-type1 Yet no LSA in OSPF for the default route. What could block that? Route List of router: /ip route> print Flags: X - disabled, A - active, D - dynamic, C - connect, S...

SoundGuyFYI

Would you be able to see those routes in the LSA tab even if the router has a static route with a better metric?

SoundGuyFYI

So in theory, there is no way to redistribute the default router from bgp to ospf?

That seams a little odd.

SoundGuyFYI

If I select to redistribute BGP will that include the default route?

SoundGuyFYI

All, I am setting up OSPF as my internal Routing protocol. I have three Fiber providers over a large geographic area. I am setting up fail over to the point that if one of the providers go down, the traffic normally routed through that provider will go through our internal network and out another pr...

SoundGuyFYI

Currently we are still adding Switching features for the CRS. Right now you get only basic Switch functionality, but the hardware allows for much more, and new features will be added with every software update. Please give us examples of the most important switch functions that you want us to make....

SoundGuyFYI

The customer has their own public AS number and they're handing routes to you with EBGP? Then they should be speaking to the same BGP instance as your primary, (Cisco doesn't even allow multiple bgp instances, by the way) and you should be using route filters to keep the customer from sending you a...

SoundGuyFYI

If it's needed, it's needed - but a network statement is the best-practice way to originate routes into BGP. (I just scanned my BGP table, and only 145 out of 525115 were originated with redistribution) ZeroByte, I hate to sound ignorant, but if they are someone elses Subnets that I'm advertising, ...

SoundGuyFYI

All true. It sounds, though, like OP just wants to make sure that he isn't kicked out of the router and unable to get back into it if the neighbor session doesn't come back alive / has some problem with the route exchanges.... If he uses the router's peering address on the actual eBGP interface to ...

SoundGuyFYI

For outbound traffic, probably. Do it at 2AM anyway. If you are advertising routes to your provider, (Why would you run BGP if you're not?), then the routes you are advertising will probably go away until the BGP session rebuilds. That will most likely make your static default route immaterial from...

SoundGuyFYI

I have a simple question (I think) I have a BGP session with one of my provider handing me the full routing table and default route. I need to make changes to that BGP session to where it would restart. If I added a static Default route to the same destination while I was making that changes, would ...

SoundGuyFYI

I am very interested in knowing if you have successfully setup a hotspot login using facebook.

SoundGuyFYI

Does anyone know what processes are multicore and which ones are still single core with the current version (6.25) or where I might be able to find this info?

This is mainly in reference to CCRs

SoundGuyFYI

So i have a pool of IPs that I use for PPPoE connections. Lets say 192.168.100.1-192.168.100.200 for example. Most of the IPs are in use from that pool. I was trying to setup a static connection (/30) and due to some out of date documentation, I tried to put that static subnet in the router within t...

SoundGuyFYI

This sounds more like a routing/firewall issue. Have you figured it out? If not then what are your routes? are you distributing routes using a EGP of any kind into the public network? If the internal IP addresses are in a seperate network then they are being routed to it. That means that something i...

SoundGuyFYI

So it turns out all radius attributes are coming accross as MT-****** This must be a sumerization the is made for the logs. This is very annoying.

Aside from that, shouldn't the MT-Group attribute work for ppp and choosing a profile?

SoundGuyFYI

I think the radius attribute is broken. I have now tried this same option with the mikrotik user manager and it is still sending MT-Group instead of Mikrotik-Group. Has anyone else had this issue? This is all with 6.23! I don't know if there is a way to change it or what but it is currently my only ...

SoundGuyFYI

I see two possible reasons for this: 1) your providers do not forward routes to you with your own AS number in the AS path 2) you have set the parameter allow-as-in=no for your BGP peers 1) I will check with my providers and confirm that information 2) I have this set to default on all my routers (...

SoundGuyFYI

I have the fiber providers in two GEO locations. I have different /24's that I advertise on each. They are both using the same AS number to peer with the providers.

If R1 is advertising 10.0.0.0/24 then shouldn't R2 receive it as long as there are no filter rules to block it?

SoundGuyFYI

Here is a mum presentation on how to do exactly what you are wanting to do.

http://mum.mikrotik.com/presentations/H ... ktech1.pdf

As funny as it sounds, I found that same post two days ago. It is a perfect example of how I need to work with this.

Thanks!!

SoundGuyFYI

Is there any easy way to duplicate certain aspects of a MikroTik to another autonomously? For my example, I have two routers side by side, for hardware redundancy. I would really only like to make changes to the active router but have the backup copying firewall rules, users etc. so I don't have to ...

SoundGuyFYI

I might try and verify I understand you correctly.

Does this mean that the Connection to this ISP is vrrp aswell and it would failover however the Routing protocol between the two will route the traffic from the "LAN" (Lets say) of R1 but then route through to the "WAN" of R2?

SoundGuyFYI

Does the default route from a BGP peer count as an installed route as needed for the "if-installed-as-type-1" in OSPF?

SoundGuyFYI

I have attached a very simple design of how I would like to configure 2 MikroTiks. The desire Is to have failover if a router fails. I read that VRRP is probably what I'm looking for but that would only work in a complete failure such as power failure. However if simply the cable came loose between ...

SoundGuyFYI

All, I have a complex one (for me). I have two MikroTik routers that are in two separate GEO locations to two separate fiber providers. Both have BGP peers to the provider receiving full routing tables and distributing a few /24 networks of my own back to provider for public IP's. The two MikroTik a...

SoundGuyFYI

Has anyone experienced slow responses from management of a mikrotik? For example when you connect to the mikrotik Via winbox and pull up a window to look at interfaces it is very slow to load the list and even once it load it appears that the through put field only update every ten seconds. My conne...

SoundGuyFYI

I have been setting up a syslog-ng server to record my logs from my mikrotik devices. Is there anyway to send the logs lines to different files in the syslog server base off the topics that the mikrotik generates? It appears that the 'topics" are not something that syslog-ng is familiar with bu...

SoundGuyFYI

Hi all, I have a weird one. I have two routers that have and OSPF partnership between the two and are connected via a liscenced 3Ghz backhaul. The other Night the OSPF link failed and I lost monitoring for a brief moment (to devices behind router2). Luckily I did not use that link for anything more ...

SoundGuyFYI

I have a dumb question. If you have traffic that is being NAT'ed or masqueraded, does the incoming traffic classify under forward or input in the firewall. I assume since its dst. address is an address on the router that it would be input but then it is actually being forwarded to another packet. So...

SoundGuyFYI

Has anyone had issues with the IP-Scan tool not running. I have tried running the tool in both winbox and CLI. Neither work. Any ideas? I figure a reboot will fix it but I can't really reboot the router for something as small as the IP scan not working. I have used the tool before, often in fact. He...

SoundGuyFYI

If I wanted to put a mikrotik at a customers house and they also had their router, if I put the public IP in my router (via PPPoE or some method) and then NATed all traffic to their router wan IP (static or whatever) both src-nat and dst-nat, If they put a port forward in there router, it would nat ...

SoundGuyFYI

I hate to pester everyone but is there anyway to change the attribute within the server? I am really confused as to why it sends it as MT-Group instead of mikrotik-group

SoundGuyFYI

Yes. When looking at the logs of the client mikrotik, the radius server is responding with the access-accept and then a classifier of;

MT-Group = "VPN"

I figured it was wrong.

Is there anyway to change that vendor-specific classifier in server 2008?

SoundGuyFYI

I have the same issue. I have seen it happen mostly with Windows 8 PC's. The user will get a DHCP lease and consequently he will be added to the ARP table but no matter what Attempt, I cannot get the user IP and MAC to show up in the hosts list. I have tried rebooting the router... turning off the h...

SoundGuyFYI

After attempting to setup a radius server (Microsoft Server 2008) and I am wanting to use the profiles in mikrotik using the Mikrotik-Group attribute This is going to be used for pptp connections. The issue I'm having is that the radius server appears to be sending a "MT-Group" instead of ...

SoundGuyFYI

What if I got the S-31DLC20D. What SFP for HP would work with that? I cant really find any that are single mode LC at 1310nm

SoundGuyFYI

I have an HP procurve PoE switch that I am using for a wireless array and I am using a fiber uplink. I purchased a singlemode Transceiver in hopes I could use it with both the CCR I have on the other end and the switch. The switch is reporting that the transceiver in unsupported. Has any experience ...

SoundGuyFYI

I need a secure tunnel between several offices and I am having trouble with MTU sizing and it is affecting serveral applications that we are using. We only have three location and MPLS seems a little extreme for our needs. I just want a secure yet low overhead connection that will not fragment packe...

SoundGuyFYI

Is there anyway to use SSL encryption with IPSEC? If so how?
I plan on using this with a corporate network that has three different locations.

SoundGuyFYI

Also does anyone know what process the VLAN falls under in the Tools\Profile?

SoundGuyFYI

How much do VLANs effect the overall CPU usage of a router? Is there anyway to know if a certain processor can handle a certain number of VLANs if it does affect it enough to note?

SoundGuyFYI

Is there anywhere that has stencils designed for a rack mount design? these are great for network layout diagrams but I am documenting rack organization and would love some stencils designed for that. Any suggestions?

SoundGuyFYI

Is the switching in the CRS similar to the switching tab in say the RB110AH?

SoundGuyFYI

What is the best way to dynamicly NAT out multiple IP addresses? To explain further; I would like any private address to NAT out of any set of, lets say, four IP's. But I would like this to simply be dynamic so it does not always use one but load balances across the four. This is mainly for prevent ...

SoundGuyFYI

Where does it say in wiki that LDP is not supported?

I apologize. I re-read the document, http://wiki.mikrotik.com/wiki/Manual:MPLS/Overview , to find that it was a sub heading of bullet point and when reading them on a piece of paper the bullet points did not appear.

Bad assumption on my part.

SoundGuyFYI

I am wanting to get confirmation as to the LDP feature within MPLS. The wiki (Last updated in March of 2006) says that the feature is not supported. Obviously there are even setup diagrams that include it in their design but with a cisco router involved so I was curious if I could get an official ye...

SoundGuyFYI

I can't seem to find any documentation on the Router ID properties. What does it affect within a OSPF link? what is its purposed? Does that IP get involved with the routing information? How is it different from the Address that the neighbor shows?

Any description would be helpful. Thanks!

SoundGuyFYI

I am having an issue where OSPF start to report things as infinity and inactive. Think router is reporting that the state of the neighbor is changing from Full to Down then it reports the issue as described and shown in the picture. I can't even find these term in any MikroTik info so I felt like it...

SoundGuyFYI

What are some good standard firewall practices that ISP's should use to filter theirs customers internet? Is it appropriate to filter it at all or give them full access to ports etc.?

If it is a good idea to filter forward traffic for customers then what are some good guildlines to use?

SoundGuyFYI

What is the best NetFlow collector to use with MikroTik?

I am looking for any price range (obviously cheaper is better) and I am looking for something that can analyze, build data point that can be exported and can run on Linux or windows.

Thanks in advance.

SoundGuyFYI

Friends, I have a network that I am designing for a camper park. I plan to use Unifi for the wireless connectivity (Fixed Security) then I would like them to by default be authenitcated with no login but have a queue applied to the device with a simple rate-limit at 2Mbps. Then I would like to offer...

SoundGuyFYI

I have a CCR1036 that I tried to replace a RB110AH with and it kept locking up. I have reset the config and am setting the config up from scratch for the second time now comparing setting to the rb1100ah. Last time I did not notice that the dns cache size starts out at 2048 and the udp packet size a...

SoundGuyFYI

Does anyone know how the lights on all the ether ports are supposed to work during bootup? Problem: I have a router (CCR1036-24G-4S) that periodical in increments of 2 minutes to 2 hours will just completely lock up and only a hard reboot will fix it. Symptom: When booting a random selection of ethe...

SoundGuyFYI

That is what I think I will be moving towards. Does anyone have any good suggestions as far as resources I can use to help me set it up weather that be literature or videos? I have read all that I can find on mikrotiks site but It does not seem to help in my specific situation.

SoundGuyFYI

I would like to have my network failover in the case of a wireless failure or a fiber failure. I have a MikroTik Router at the tree location and fiber at 1 and 3. I can announce all of my public IP's over both fibers. I would like to have router 2 route its traffic to router 1 and fail over to 2 in ...

SoundGuyFYI

Hi,
Yes, you can use same pool for DHCP. I think it will be no problem.

Thank you.

SoundGuyFYI

I am currently using PPPoE to authenticate clients to my router.

We are going to being using DHCP with Static only mac filtering.

Can I ad my server to the same port as the PPPoeE, Use the same pool in both and then change all the PPPoE clients to DHCP without any issues?

SoundGuyFYI

I would like to specify (using my freeradius server) what PPP Profile I would like each user to use from the router. I use PPP Profiles to set not only the IP Pool but also to rate limit in some cases. Is there a special command that will apply a Profile defined within the mikrotik or do I have to a...

Search found 74 matches