MikroTik

Beelze

Please review my IP routing table below this post. The Mikrotik has two PPPoE clients, and both clients add a default route to the routing table. One with a higher distance value set than the other. On top of the PPPoE sessions, two BGP sessions are also established, both receiving a default route. ...

Beelze

Update: I got something working with NDRA from the BRAS / PPPoE server, but the requirements move more towards DHCPv6 IA_NA and DHCPv6 Prefix Delegation from the server.
Is there any basic configuration needed in order for this to work?

Beelze

Aside from IPv4, I'm working on getting IPv6 working on the Mikrotik's PPPoE client as well. I've tried searching for a solution, but that's mostly about DHCPv6 client. I work at an ISP and am in control of the BRAS and the AAA/RADIUS (FreeRADIUS) server. Maybe it's more a RADIUS than a Mikrotik que...

Beelze

Hi trace323, Remove that low quality RB3011. Need to piut a CCR-1009. What do you mean by low quality? I know that doing a Bandwidth Test on a RB3011, it will spike its CPU. But doing a speedtest (ookla for example) on a laptop behind the RB3011, it shouldn't be doing anything of that right? Marijn

Beelze

Hello all, We've been trying to get a customer get close to 1Gbps on a 1Gbps circuit when doing an Ookla speedtest. The customer has an RB3011 as its router which we as an ISP manage. The initial TCP resulted in download 477 Mbps and upload 921 Mbps, but later tests showed different results (like 40...

Beelze

Thanks a lot!
That did the trick. It was neighbor discovery all along.

It's strange that google can't find anything about IPv6HAXORS.

Beelze

Hello, Just a small question about something I see appearing in the logs: IPV6HAXORS input: in:bond1_vlan20 out:(none), proto UDP, [fe80::e68d:8cff:fe01:c9f4]:5678->[ff02::1]:5678, len 148 I see this appear in the logs every minute. I just disabled everything that does anything with IPv6 (except for...

Beelze

Hi Jarda, All the clients have a public IP address being PPPoE clients. Alle the IP addresses are excluded from NAT in the core Mikrotik firewall filter. So there is no NAT involved here. Also, the core Mikrotik does not have a masquerade rule, it should just passthrough all traffic. This should be ...

Beelze

Hello all, At a customer site we installed a Mikrotik CCR (core) serving internet to hAp Lites through PPPoE. A setup we use very often in buildings with multiple sub customers. The core Mikrotik is pingable and reachable through SNMP. However, all the other PPPoE client hAp Lites can be reached wit...

Beelze

Hello, I have set up two BGP sessions between a Juniper and a Mikrotik like this: Mikrotik <-- BGP session 1 --> Juniper <-- BGP session 2 --> Both sessions are established easily and the Juniper then has a route to the advertised mikrotik route via both ways. If I disable and then enable session 1 ...

Beelze

Hello, I'm trying to setup a BGP session between my Mikrotik assigned with a private ASN and our Juniper core router with a public ASN. Let's say I'm using 10.0.0.0/30 as the subnet between the two (directly connected) with .1 Juniper and .2 mikrotik. A traceroute on both devices to the other side s...

Beelze

Some debugging showed me this firewall action: 09:29:17 firewall,info srcnat: in:(none) out:ether1, proto UDP, 1.1.1.1:67->192.168.10.30:67, len 328 Shouldn't the WAN IP 1.1.1.1 be 192.168.1.1? That is the local LAN IP I set up on the DHCP relay. The IPSec policy is set on src-address=192.168.1.0 an...

Beelze

Hi all, I've been trying to relay DHCP requests from one LAN to remote LAN over IPSec. I'm trying to build the same network as a customer of ours currently has, but this time with Mikrotiks. This is the setup I have built: laptop <--> LOCAL_MIK <---> internet mikrotik <---> MAIN_MIK <--> dhcp-server...

Beelze

Hi everyone, For a customer of mine I have created a Mikrotik management network of 8 RB2011's. These Mikrotiks are monitored in LibreNMS. I've created a plugin that measures ping statistics, SFP tx/rx dBm and throughput and puts these in Round Robin Database (RRD) files. The data in these RRD files...

Beelze

Whoa, so much things to clear up... I'm so sorry for having to do this... Well, im not. Of course I have read the wiki, but things were still not very clear to me how things were supposed to set up. Perhaps I should have stated that I DID read the wiki. But I must thank you for your clear explanati...

Beelze

UPDATE: I finally got it working, I had to use the setArgument() method twice for this to work: $monitor = new RouterOS\Request('/interface/ethernet/monitor'); $monitor->setArgument('numbers', '10'); $monitor->setArgument('once'); $responses = $client->sendSync($monitor); echo '<pre>'; var_dump($res...

Beelze

Thanks @noib! The Net_Transmitter phar file did the job for me. However, I got one followup question though: I'm trying to monitor my SFP1 interface to get the sfp-tx-power and sfp-rx-power properties, but I'm getting no luck with the code. This is what I have: $monitor = new RouterOS\Request('/inte...

Beelze

I defined those constants myself:

define('TYPE_DATA', '!re');
define('TYPE_FINAL', '!done');
define('TYPE_ERROR', '!trap');
define('TYPE_FATAL', '!fatal');

Beelze

I changed $client = new Client('192.168.100.1', 'admin', 'password', 8728); to $client = new RouterOS\Client('192.168.100.1', 'admin', 'password', 8728); and the API now connects successfully, the next thing that happens is this: "Class Response could not be loaded from Response.php, file does ...

Beelze

I'm trying the recommended PHP API: <?php use PEAR2\Net\RouterOS; require_once 'PEAR2_Net_RouterOS-1.0.0b5.phar'; try { $client = new Client('192.168.100.1', 'admin', 'password', 8728); echo 'Connected!'; $responses = $client->sendSync(new RouterOS\Request('/ip/arp/print')); foreach ($responses as $...

Beelze

Hello all, I'm trying to create a script in RouterOS that does a bandwidth test (see below). The purpose of the script is to check if the bandwidth to another mikrotik router gets below a certain threshold (in my example I use 700 Mbps). If it does, the script has to raise an error. The $"tx-cu...

Beelze

Hey normis,

Nice post. I have checked the shelfs out, but that's not what we are looking for. We're now thinking of placing some sort of a U-formed rack ear between the 2 switches. We'll have to buy a 90 degree screw driver for that though

Beelze

Been a while since my last post, but I'm back with a short one :) I hope I posted this in the right category. My company bought 2 CRS212's and so far we have been very content with its performance. When attaching the rack mount ears to the sides of the switches we directly came to the conclusion tha...

Beelze

Oh and the routes show the correct interfaces and cost now: [admin@MikroTik] /routing ospf route> print # DST-ADDRESS STATE COST GATEWAY INTERFACE 0 10.10.10.0/30 intra-area 50 0.0.0.0 ether2 1 10.10.10.4/30 intra-area 100 0.0.0.0 ether3 2 127.0.0.30/32 intra-area 10 0.0.0.0 loopback /routing ospf n...

Beelze

[admin@MikroTik] /routing ospf network> print Flags: X - disabled, I - invalid # NETWORK AREA 0 10.10.10.0/30 backbone 1 10.10.10.4/30 backbone 2 127.0.0.30/32 backbone [admin@MikroTik] /routing ospf interface> print Flags: X - disabled, I - inactive, D - dynamic, P - passive # INTERFACE COST PRI N...

Beelze

Hello all, I've been playing with the dynamic routing protocol OSPF on RouterOS for a while and I noticed that my OSPF routes and interfaces are listed as "dynamic". Also I see that the interface used in these directories is "bridge-local". Why is this and how can I do something ...

Beelze

janisk, thanks a lot for replying to my posts. This will help me a lot in my project

Beelze

you can use wine to run netinstall tool.

I can use wine on the Linux server (ubuntu server 12.04 LTS)?

Beelze

Also, if router comes in new, usually it is set up to boot with flashfig enabled. That might help you a bit. Hmm, this could be something I can use. I see that you need a windows computer with Netinstall/Flashfig installed. I don't use anything that is windows based. My current setup is that I have...

Beelze

You really need to add a rule that specifically allows your API server to talk to the MT, not the whole world. Oh sure, I will do that then. Ideally I was looking for a way to configure the router with just the use of the dhcp client on ether1 and the API server without going into the CLI. But I gu...

Beelze

I have done the same thing, but then with the 2nd API you listed. Separately, both commands work perfectly. But after putting them together after each other, nothing works. //fetch configuration file from server $API->write('/tool/fetch', false); $API->write('=address=address', false); $API->write('...

Beelze

I have added this line of code: $API->write('/import config.rsc'); It seems like my code works fine as i get back this array: /import config.rsc >>> [3/3] bytes read. >>> [3, 20]!re >>> [18/18] bytes read. >>> [18, 1]=status=connecting >>> [3/3] bytes read. >>> [3, 18]!re >>> [16/16] bytes read. >>>...

Beelze

I got the PHP API working yesterday after changing 4 ;;; default configuration chain=input action=drop in-interface=ether1-gateway to 4 ;;; default configuration chain=input action=accept in-interface=ether1-gateway I was hoping I could load configuration files into the router with the API without h...

Beelze

Forgot to remove the last 'false' boolean, works perfectly now

Beelze

I have used this line of code so far: <?php require('routeros_api.class.php'); $API = new routeros_api(); $API->debug = true; if ($API->connect('address', 'admin', 'password!')) { $API->write('/tool/fetch', false); $API->write('=address=address', false); $API->write('=src-path=file.conf', false); $A...

Beelze

Hello all,

I've been trying out the RouterOS PHP API class to connect to my RB2011 router.

I have a ubuntu 12.04 LTS server that needs to connect to the router through this API. However, both the server and the router are on different networks.

How do I do this?

Beelze

What I want in the end is have the RB2011 router connect to a DHCP server and get the name and location of a configuration file.

This file needs to be executed on the RB2011 and ready for use.

Can this be done without ever touching the RB2011? I have seen it on other vendors.

Beelze

I've added the following lines in my /etc/dhcp/dhcpd.conf file: if exists dhcp-parameter-request-list { append dhcp-parameter-request-list 1,3,6,33,42,66,67,121; } The Parameter Request List in the DHCP Request from the RB2011 doesn't include option 66 and 67. The DHCP ACK actually does give the cor...

Beelze

I installed an isc-dhcp-server on ubuntu dekstop 12.04 to provide DHCP information to a RB2011. I want this dhcp server to provide the following information - IP-address; - tftp server name; - bootfile name; - hostname dhcp-server; My /etc/dhcp/dhcpd.conf file: subnet 192.168.1.0 netmask 255.255.255...

Beelze

My DHCP server should provide an IP-address and the name and location of the boot/configuration file for the RB2011.

How does RouterOS handle this, and if above statement is possible can anyone show me how this is done?

Beelze

I have got a RB2011 where the ether1 interface is a dhcp client. My question is: can my router with RouterOS work with the bootstrap protocol? I need it to retrieve all the necessary information such as an IP-address and name and location of a bootfile. My DHCP server is on a ubuntu server. It shoul...

Beelze

I think I found the problem. I defined the continue variable as :local instead of :global.

Beelze

It seems like the while loop is ignored and the statements in that scope aren't executed when I schedule the script at startup.

Beelze

Following script runs at startup. Everything works, except the part where i resolve www.google.nl and where it should run the next script. When i run it from the CLI, the whole script works. Any suggestions? #define global variables :global resolveThis "www.google.nl" :global test :global ...

Beelze

Resolved domain is stored in dns cache.

Right, but I if don't use netwatch, i want to check connectivity live. Using the dns cache is not exactly live.

Beelze

Yea, i need something like that. I still wonder why resolving a domain is not stored in the variable.

Beelze

Ahh, that is very clever, I will try that out, thx for your response!

Beelze

Thx, but it does the same thing. I've seen this somewhere else, but then with ping. Same result though.

Beelze

i want to do something like this:


:global test
:set test [resolve www.google.nl]
:put $test

nothing is stored in - test - ..

Beelze

I have a CPE with a script that runs when powered on. Ether1 is a DHCP client that gets an IP-address from a DHCP server. What I want to accomplish is that the script only continues when it can reach the internet on ether1. After being able to connect to the internet, the CPE needs to download a fil...

Beelze

Thanks for your reply!

Beelze

Hello,

Is it possible to let a DHCP server send all the necessary information to a router with RouterOS so that this router knows where to find its configuration file on a TFTP server? I've seen that this is possible with other brands without ever touching the CLI of RouterOS.

Beelze

I was playing around with exactly this idea last friday - and experienced that scripts named xxx.auto.rsc are NOT automatically executed when fetched by the receiving router.

It should be working according to other posts. I guess it's a bug or something, luckily there's a way around it.

Beelze

I have no experience with netwatch up-scripts. I'll look it up. However, with scheduling a script on startup I think I can achieve what I want. I don't want to do too much on the router because the idea is to place multiple routers at multiple customer premises and have them pull files from one serv...

Beelze

Thanks for your reply. I might have been unclear in my first post here, sorry about that :) That is one way to upload configuration files to a remote router. But as I can see in the Tools/Fetch manual you can also retrieve files with ftp from an FTP server that doesn't need to be a device with Route...

Beelze

Dear, I would like to know if there's a possibility to import configuration files into a router with RouterOS. What I would like to do is have the router automatically connect to a DHCP server and have this server push a configuration file back to the router. Is this possible or is there another way...

Beelze

Update: the Juniper CE1 can now see the 10.1.1.0/24 network which is imported from BGP into OSPF. The PE2 (RouterOS) can see the 10.8.8.0/24 network in its own routing table. This one is also shown in the /routing bgp vpnv4-route table: [admin@MikroTik] > /routing bgp vpnv4-route print Flags: L - la...

Beelze

I'm trying to setup a Layer 3 VPN between a Juniper PE and a Mikrotik PE Router. My current topology: CE1 (Juniper) -- PE1 (Juniper) -- P1 (RouterOS) -- P2 (RouterOS) -- PE2 (RouterOS) -- CE2 (RouterOS) I'm running > OSPF on CE1-PE1 and CE2-PE2. > OSPF between PE1 and PE2. > BGP between PE1 and PE2....

Beelze

I use notepad.

Right, I thought of using something like that.

Beelze

As i have just purchased a RB2011U series Mikrotik router, i got a bit into the scripting language of RouterOS. I was wondering if there is a better way of writing scripts than to write every line of the code in the CLI. What do you guys use for third party programs to write these scripts and then j...

Search found 60 matches