MikroTik

xcom

Do you still need the old switch LOL. I am on the hunt for a sweet deal........

I'll sell it for cheap if I can find a new one.

xcom

Has anybody played around with the CRS328-24P-4S+RM?
Can you post a pic for size reference?
Is it loud?

TIA!

xcom

I currently have a MikroTik - CRS125-24G-1S-RM... Now I am want to upgrade to the new versions.... Layer 3 Routing (SwOS). No need for Router OS. Must have LACP.
PoE is not a must but would be nice.

What would you recommend me?

xcom

It s the Mikrotik. The Protocol is SIP/UDP Port 5060 The Source is inet addr:10.30.2.175 so I know is not grabbing the WAN IP. I suspect you have a NAT aware PBX system, it is a way the PBX companies are trying to workaround the NAT traversal problems, what it does (if I recall correctly) is it che...

xcom

It s the Mikrotik. The Protocol is SIP/UDP Port 5060 The Source is inet addr:10.30.2.175 so I know is not grabbing the WAN IP. I suspect you have a NAT aware PBX system, it is a way the PBX companies are trying to workaround the NAT traversal problems, what it does (if I recall correctly) is it che...

xcom

It s the Mikrotik. The Protocol is SIP/UDP Port 5060 The Source is inet addr:10.30.2.175 so I know is not grabbing the WAN IP. I suspect you have a NAT aware PBX system, it is a way the PBX companies are trying to workaround the NAT traversal problems, what it does (if I recall correctly) is it che...

xcom

It s the Mikrotik. The Protocol is SIP/UDP Port 5060
The Source is inet addr:10.30.2.175 so I know is not grabbing the WAN IP.

xcom

Here is what my config looks like. Nothings stands out to me on why is this happening... # mar/30/2018 22:07:06 by RouterOS 6.41 # software id = AXKP-SIF0 # # model = CRS125-24G-1S # serial number = /interface bridge add admin-mac= arp=proxy-arp auto-mac=no fast-forward=no \ mtu=1500 name=Bridge-pfS...

xcom

My WAN IP on my Mikrotik is leaking inside my network. Is there a way to stop this?
My pfSense is reporting:

Interface: LAN
Source: Mikrotik WAN IP
Destination: voip.ms

Instead of the WAN IP it should be my internal IP that should be coming from the device up to my pfSense.
Ideas?

Thanks!

xcom

I would assume its set correctly ie the mikrotik router for all outgoing connections to ISP1 has masquerate applied. Not sure how the 10.30.2.0 packets are getting confused in the mix though.......... I read something about preventing packets leaking out of the LAN but cannot remember where...........

xcom

Try narrowing down the mangle rule to 10.30.2.5
although its probably some other cockup in the rules maybe a srcnat situation ???

I did set the source to. 5
Its funny you say that the GW port of the mikrotik is set to NAT. Is it not suppose to?

xcom

Traffic from where is going out the mikrotik?? Are you sure the source is 10.30.2.5 Are you sure this is not lan traffic leaking out the mikrotik or is it traffic intended for the internet?? Yes. Its an asterisk server trying to qualify a registration server. This is .5. And is trying to go out of ...

xcom

Thanks, the seas have parted, I am going to cross the ocean bottom to the promised land to MT programming. I hope you can see where I was uncertain................. In your diagram you explicitly stated that 10.30.2.5 internet traffic had to go via the PFSENSE unit but there was no mention of the 1...

xcom

you didnt answer the question directly XCOM. What I needed to hear was a. all non-local traffic from the 10.30.2.0 network (regardless if from 10.30.2.4 or 10.30.2.5) ie needs to go to the internet shall get routed to the PFSENSE device (for eventual TX thru ISP2) b. no traffic from 10.30.2.0 netwo...

xcom

@Anav Hello All! I want to point my local network to my CRS125-24G-1S-RM as the gateway. In the CRS125-24G-1S-RM I want to tell it that for all networks with 10.XXX.XXX.XXX to go out through my pfsense, Else Go out through the CRS125-24G-1S-RM gateway. IE: 10.60.77.0/24 LAN.... non-routable address...

xcom

@ Anav /ip route add distance=1 gateway=10.30.2.1 routing-mark=pfsense This creates a route for 0.0.0.0/0 (which basically means anything not local) to go out gateway=10.30.2.1(which is the pfsence), but only if it has a routing-mark=pfsence. /ip firewall mangle add action=mark-routing chain=prerou...

xcom

Clue XCOM - Bridge settings my friend, in WINBOX

Ah.... I dont use Winbox, Linux here.
Ill spin up my VM and run it.

xcom

Set arp=proxy-arp and protocol-mode==none.
You want me to set those options?
Yes, try those settings on your bridge.

Can you tell me how to run the command? Cant seem to see it under /ip arp...

Thanks!

xcom

Set arp=proxy-arp and protocol-mode==none.

You want me to set those options?

xcom

What do have for: /interface bridge print Set arp=proxy-arp and protocol-mode==none. You can change Interface names with out any down time. Any rule you have pointing to that interface will change with out it breaking any thing. [admin@MikroTik] > /interface bridge print Flags: X - disabled, R - ru...

xcom

/me takes a deep breath... Ok.... Accounting for everything else and not local? I Only want to know what my vlans consume. Local is just me and I account for that in the pfsense. vlan 2 and 3 are Guest vlan and test vlan The dhcp pools the default one is disable. The rest are for the vlans. I also h...

xcom

BumP

xcom

No, I think it is something simple that is being overlooked somewhere. Either a setting on the Mikrotik or on pfsense. I just setup a test running pfsense on a virtual machine on my desktop with two virtual nics. My router is 192.168.88.1/24 on bridge1. pfsense LAN is Static to 192.168.88.5. I set ...

xcom

hide-sensitive really does not hide sensitive... /export filename=export and you can download the created export.rsc file and edit with your favorite text editor. Is there a reason to have the pfsense in the same IP Scope as your LAN? Could you change it to a different IP scope? I think that what I...

xcom

Why do you have to use OpenVPN? Are you connecting site to site?

1- This is not my decision. Its my job.
2- Yes.

xcom

And as always, a /export hide-sensitive is always appreciated!

hide-sensitive really does not hide sensitive...

xcom

Yes pfsense has one leg in the mikrotik switch and is part of my Lan all living under one subnet.... Than it has another leg carrying its own wan.

xcom

Thanks for letting me know!
Regards,

xcom

Working on it!

xcom

Use Tools>Traceroute with routing-table=pfsense and see if it shows you where the bottleneck is. Compare to routing-table=main.

And/Or

Connect a device directly to the pfsense and see if you get the same results.

Systems with gateway out through the pfsense have no issues.

xcom

I need to have OpenVPN and Proxy capabilities. About 60 Devices and 5 Users. This will be in a Home Office environment with link to work with openvpn.
There will be Two asterisk servers behind it.

Which should I go with:

CCR1009-7G-1C-1S+

or

RB1100AHx4 Dude Edition

xcom

No unfortunately, way above my pay grade LOL.

Bah!
LOL!

xcom

Hence my suggestion to only use the mikrotik and Punt the pfsense unit out the door, down the street and into a body of water of your choice............... (probably to join your old zyxel unit). I wish I could anav. LOL Work has me tide down to it. :( I would need some serious help to transition f...

xcom

So your options work and like the others is what I need.
But what I dont understand is... As soon as I make the changes... Internet out pfsense slows down... I actually thought it was DNS but is not. a simple curl to get an IP response over the internet takes over 5 seconds.

xcom

yes the very same xcom, I was wondering about your nick LOL. I recently bought a hEX to play with.

LOL!
Small world after all!
Does are very nice. I own one and love it!

xcom

/ip route add distance=1 gateway=10.30.2.1 routing-mark=pfsense /ip firewall mangle add action=mark-routing chain=prerouting dst-address=!10.30.2.0/24 new-routing-mark=pfsense passthrough=no src-address=10.30.2.0/24 It did the trick but is causing a huge performance degradation on going out to the ...

xcom

/ip route add distance=1 gateway=10.30.2.1 routing-mark=pfsence /ip firewall mangle add action=mark-routing chain=prerouting dst-address=!10.30.2.0/24 new-routing-mark=pfsence passthrough=no src-address=10.30.2.0/24 I think this is what I am looking for. Thanks for the help. All inputs/ideas/commen...

xcom

That the modem provides two public IP addresses??

That is right.

@anav, You dont happen to hang around the DSLReports Forum?

xcom

It still is not any clearer provide a network diagram so we can see the physical and IP relationships between the devices,.,.,.,.,.,.,.,.

Look at the attached diagram

xcom

lol I do... I just don't know how to say it the right way.

If my mikrotik is my gateway, how can I tell it to send non-routable addresses (meaning the internet) through my pfsense box? I know how to do this with a brocade but mikrotik is a whole different monster..

xcom

Also, If I can not choose a subnet, Can I do a host? If so how?

Thanks!

xcom

Hello All! I want to point my local network to my CRS125-24G-1S-RM as the gateway. In the CRS125-24G-1S-RM I want to tell it that for all networks with 10.XXX.XXX.XXX to go out through my pfsense, Else Go out through the CRS125-24G-1S-RM gateway. IE: 10.60.77.0/24 LAN.... non-routable addresses go t...

xcom

Fixed. Thanks!

xcom

Bump!

xcom

Team, I own a CRS125-24G-1S-RM, I am installing a new firewall and I wanted to segregate the internet away on its own ports. So I went to the GUI and under Switch -> VLAN: I created a vlan and add it 3 ports to it. ON this ports I connected my Firewalls and my WAN. The issue I see is that this ports...

xcom

Can somebody enlighten me on why MikroTik decides to use 10/100 Ethernet ports on most of their compact format AP's?
Does it make sense?
I mean am I wrong to think that this could be a bottle neck point?

Thanks for the help in advance.

xcom

Where can I download 6.28?

Thanks!
Copy the old URL and adjust it like -
http://download2.mikrotik.com/routeros/ ... e-6.28.npk

Thanks!

xcom

@Infused
I roll 6.28 release on 90% of our company routers and its by far most stable version, but to be honest, i didnt had problems with 6.27 either.

Where can I download 6.28?

Thanks!

xcom

This is smart. Thanks for answer. But doesn't it just prolonging the outage time? And what if not all devices went down correctly? Do you still recycle the power? Nut client could be useful in some cases, I agree. But I still would rather see mikrotik focusing on errors corrections then implementin...

xcom

How do you start remotely your mikrotik devices when the outage is gone if you shut down them before? It all depends how your ups is configured along with NUT. In my case. I have my system configured via nut to shutdown when the ups reaches critical stages. Once nut knows all of the systems are dow...

xcom

+1 @macgaiver: http://www.networkupstools.org/ I had put this in discussion some time time ago: http://forum.mikrotik.com/viewtopic.php?f=1&t=48762 But it seems that everyone understands to implement the NUT server, not the client. But you are right, nut may offer also snmp services through the...

xcom

Is it possible to have an apk for a nut client/server?
This could be very beneficial to the community.

Regards!

xcom

if you can add a UPS via IP instead of physical serial perhaps. Or you can try scripts and API. I dont have such a UPS or service so i dont have the chance to mess around with that area. Interesting... I have a nut server and all my systems connect to the server via the client option of nut. Would ...

xcom

xcom

Is it possible to have routeros connect to a apcupsd server?

Regards.

xcom

Thx, but My Windows Dude did not recognise my network.
Only router but I don't see any of devices connected to the network.

Same issue I have.

xcom

Give Observium a try.

xcom

worst freaking idea ever.

---------------------1

xcom

Where is that "birdge-local" comming from... I don't see it defined anywhere ? Also looking at the topic starter... I would think the config is correct but I've a similar one and it neither works ? The question is however simple... define a VLAN on the CRS, link a DHCP client or server to...

xcom

Is anyone doing a bit more with a CRS than what you would do with a managed switch ? I'm trying something very basic like putting a DHCP client on a VLAN and don't get it working because the CRS is not untagging traffic on the ports (which is just a simple concept of an access port). If someone is ...

xcom

ash shell.

xcom

If this will be the case for all firmwares going forward, I will take my switch off my network and set it on fire...
I am a linux user and having to install wine to run another buggy ass application... Hell no!... You can keep the spoon.

xcom

Very nice and clean!

xcom

I'm having an issue with NTP on upgrading. None of my boxes will grab time anymore. I'm not sure what to do. It is affecting some of my services. I have tried several ntp servers, i have disabled and enabled. It will convert the names to IP's but it will not update time. Any suggestions? I have the...

xcom

Team, I have the same switch. I went trough some issues but with help I was able to get it to work. Though my requirements where a bit different it might help or give others an idea... Here are my notes: Ok first create a vlan under the interfaces = add vlan and attach it to "bridge-local"...

xcom

Thanks for the update.
Keep up the good work!

xcom

michaelahess, The following Cloud Router Switch configuration should be applied for your setup: ... Thanks becs! I'll try this when I get home tonight. One thing I'm still worried about though, the master port of the switch group, is it best to not actually use that port for a real link since it ha...

xcom

Thanks Tony. So far all is well after a few head bangs against the wall.

xcom

Got it all taken care thanks to a user on the irc channel.

Again thanks!!!

xcom

michaelahess, The following Cloud Router Switch configuration should be applied for your setup: ... Thanks becs! I'll try this when I get home tonight. One thing I'm still worried about though, the master port of the switch group, is it best to not actually use that port for a real link since it ha...

xcom

xcom

You have to plugin a device to one of the ports.
At least the CSR is that way.

Now during boot up all of my lights do turn on.

xcom

any body?

xcom

Hello there... I am trying to look for information on the CSR and cant find much... Is it possible to have a vlan tagged and enable dhcp only for that tag? IE: Wireless comes in with a vlan tag of 10. I want that vlan to get a dhcp lease from my csr. All others un-tagged continue as is... Than those...

xcom

There is a lot I need to learn from this switch.
I setup my internet-gateway port as static and all worked well.

Now for reading.

this is obscure as it can get

xcom

ERROR: server is not responding

When I click on check for updates that what I get: ERROR: server is not responding

I just got a CRS125-24G-1S-RM
Firmware is 6.9

Any ideas?

Regards.

xcom

Depends on what you will use it for. It is a good affordable switch, with ability to use routing for some ports as well. That's a bit scary... :D Well I currently use vlan's (un-tagged and tagged) and QoS. Not much more. I might do some routing now that this is capable of L3. Is that ok or might go...

xcom

CRS are a good basic switch. Once you figure out the obscure configuration they go really well.

FYI x430-8p is fanless and has 802.3at PoE.

Thanks for your reply.

I have the 28pt and is not fanless nor is poe.
http://www.extremenetworks.com/product/ ... 30-series/

xcom

Does anybody have any hands on experience with the above particular model?

Can you share your thoughts?

Regards.

xcom

Hello there! Well I am here because I got tired of all the noise my Extreme x430 makes. On a search for a comfortable replacement I found: MikroTik - CRS125-24G-1S-RM I purchased one :) I am hoping that I made a good decision. Looking forward to hanging around as much as time permits. Should be here...

Search found 80 matches