MikroTik

keefe007

We're going to be deploying WIFI in a large MDU, approx 300 units. We'll be doing WIFI with a separate VLAN per unit.

We'd like to do a CGNAT setup. What are some best practices to make this work as good as possible? We'll have one public IP for the building.

keefe007

What's the status on this Mikrotik?

keefe007

What are the symptoms of this issue?

keefe007

I have issues on the CRS328 connecting to a Siklu.

keefe007

I'm still seeing lockups on 6.44.1

keefe007

What's the stats of the fix?

keefe007

3550 - 3700 (CBRS) works great for people in the USA.

https://www.fcc.gov/wireless/bureau-div ... band-radio

Eventually you'd need a software feature for the radios to talk to the SAS (spectrum access database).

keefe007

Or band 42/43 would work. You already have a CPE for it. https://mikrotik.com/product/lhg_4g_kit

keefe007

TDD ban 48 at 1W watt, correct.

Both options would be great. Single channel and dual channel (CA).

For 2.4 ghz the frequency range is 2400 - 2500. ISM band.

keefe007

Output power can be 1 W. Most of us are using https://baicells.zendesk.com/hc/en-us/a ... Data-Sheet right now.

keefe007

We need band 48 TDD 3500 CBRS (US) 3550 – 3700 for the US.

What about unlicensed 2.4 ghz in LTE?

keefe007

What are the new Mikrotik Intercel LTE access points? Will you have them in CBRS (3 ghz)?

keefe007

It is at a remote site so it is not likely I'll be able to get a supout when it is locked up.

keefe007

Six days later I got another lockup.

keefe007

Has anyone else experienced CRS328 lockups? I had my second one tonight. The first time this switch just lost all MGMT connectivity but still passed traffic. Tonight it locked up 100%. No management and no data passed. Winbox neighbors showed nothing.

keefe007

I also noticed a significant decrease in port flapping on the latest firmware but I'm still getting flaps every hour or so. Now it is 10-20 a day and before it was hundreds.

keefe007

Do any of the CRS328 fixes have anything to do with the SFP+ link up down issue?

keefe007

Is anyone else seeing port flapping on SFP+ ports on CRS328 switches?

keefe007

What's the fix Mikrotik?

keefe007

Did you find a fix yet?

keefe007

I am also seeing some link downs on CRS328 switches but the firmware update made them significantly less for me.

keefe007

Try 6.43.7 and make sure routerboot is also updated.

keefe007

The chipset has been discontinued, linux dropped support for it, and the new RB4011 pulls down full BGP feeds faster than a CCR1072. It's time for something new in the 1036/1072 range.

keefe007

When will we see a new high end router like the CCR1072?

keefe007

Is the CCR1072 EOLd? I have one that was DOA and the disty is telling me they are out of stock and no ETA on a replacement.

keefe007

I'd like something new in the CCR1036 - CCR1072 range.

keefe007

Why can't you just give us a roadmap and/or release date?

keefe007

Will Mikrotik be releasing and new CCRs or higher end router hardware soon?

keefe007

days, weeks, months?

keefe007

What's the status on these new router models?

keefe007

When will we see a CRS with more than 2 10 GB ports?

It'd be nice to see either a all SFP+ switch or a switch with some SFP+ and some 10gig-base-T.

keefe007

When will you guys be making some 48 port switches?

keefe007

I'd like to see this as well!

keefe007

[admin@ehq-sw1] > /interface ethernet print detail where name~"sfp" Flags: X - disabled, R - running, S - slave 0 S name="sfpplus1" default-name="sfp-sfpplus1" mtu=1500 l2mtu=1588 mac-address=4C:5E:0C:9B:C4:DE orig-mac-address=4C:5E:0C:9B:C4:DE arp=enabled auto-negotia...

keefe007

Which 40km SFP+ modules are supported by the CRS series?

keefe007

I have tested and discovered that SFP-10G-LR SFP+ modules don't work with the CRS226 series switches.

Keefe

keefe007

I'd like to see the BGP4 MIB too!

keefe007

I'd like to know this as well.

keefe007

So i'm trying to configure a CRS for basic VLAN access ports and one trunk port like this sample config: Choose a master port and enslave the ports you need to be in the same switch group. /interface ethernet set ether6 master-port=ether2 set ether7 master-port=ether2 set ether8 master-port=ether2 A...

keefe007

I like to see a CRS with more than 2 SFP+ ports.

keefe007

I guess not

keefe007

You would tell Mr Customer that if they want no-export to 174 then they need to add 12345:6000 to the routes they dont want exported. That community would pass through to your other two transit providers but they wouldn't know what to do with it. You could setup a filter rule to remove that communit...

keefe007

You're close... First, you'd want to make your own community and use your ASN. Lets say your ASN is 12345. So on your network 12345:6000 will not send routes to 174. /routing filter add action=discard bgp-communities=12345:6000 chain=Cogent-out disabled=no invert-match=no set-bgp-prepend-path="...

keefe007

You're close... First, you'd want to make your own community and use your ASN. Lets say your ASN is 12345. So on your network 12345:6000 will not send routes to 174. /routing filter add action=discard bgp-communities=12345:6000 chain=Cogent-out disabled=no invert-match=no set-bgp-prepend-path="...

keefe007

Sounds good! We allow some, but not all, downstream customers send us communities. It depends on what our relationship is with them. Here's what we do: :2001 = routes learned from transit provider 1 :2002 = routes learned from transit provider 2 :3000 = routes learned from peering partners :4000 = r...

keefe007

We pass through some communities from downstream customers to our upstream peers and we also add some communities from upstreams to depref certain routes with certain carriers. We also use the blackhole communities when needed.

keefe007

We do!

We set different communities for routes learned from transit providers, local peers, and downstream customers.

keefe007

Hello, I have a CCR1036-8G-2s+ and I recently installed a Mikrotik SFP+ 10 gbps adapter into it. It is connected to a Cisco Metro Ethernet switch w/ 10 gbps port. What i'm wondering is how can i tell what speed it is linked up at? I can't see anything in the ethernet port properties showing 10 gbps....

keefe007

When will BGP4-MIB support be added?

keefe007

Are you guys working on shortest path bridging?

keefe007

Can you please add g.8032 to the cloud router switches? We need something better than xSTP.

keefe007

What are your plans to add Shortest Path Bridging (SPB)?

I would really love this feature!

keefe007

I started having a weird issue lately with our network I wanted to run it by you guys to see if anyone can provide a solution. First, I have an x86 based mikrotik router running 5.25 and it has been working fine for years. I runs eBGP with multiple upstream carriers and recently we configured iBGP a...

keefe007

when will BGP have multicore support on CCR?

keefe007

Any plans for a full 10gig switch?

keefe007

Right now I have two upstream BGP peers for internet transit and 5 other bgp peers for local peering with other carriers. Soon we are turning up our first downstream BGP customer and I need a bit of assistance. I've added them as a BGP peer and I've setup an inbound filter to accept their prefixes. ...

keefe007

MPLS Fast Reroute - For high speed redundancy of network

keefe007

I'm seeing RX drops on a number of my interfaces as well. I'm running a dual-core system with version 3.30.

Keefe

keefe007

Is there a way to assign local pref based on BGP AS Path?

How would prepending incoming routes cause an iBGP loop?

Thanks,

Keefe

keefe007

I have to prepend the routes i receive from one of my upstream carriers otherwise all my outbound traffic flows over this ISP. When I prepend one of the upstream carriers I get a more even balance. Prepending is for both incoming and outgoing routes.

keefe007

I need to send full routes to a peer and I currently have some of my full routes prepended. If I setup an out filter and set-bgp-prepend=0 will it remove all of the prepends that I put in with my inbound filters? If not, what is the correct way to un-prepend routes before sending them out? Thanks, K...

keefe007

HP SmartArray
3Ware
Areca

keefe007

Can you paste your ebgp and ibgp setup?

On the ebgp side, how are you defining the primary bgp session? Are you prepending, using MED, or something else?

Thanks!

Keefe

keefe007

I currently have one router and two upstream ISPs. All of my end users are on public IP space. There is no NAT on our network. I run BGP with both upstream providers and receive full routes. I'd like to add a second router for redundancy. What's the best way to configure this? Does anyone have any c...

keefe007

metric is not the best way to influence incoming traffic (in fact there's no best way at all to do this) - it depends if upstream ISP accepts MED (some don't - they just reset MED to 0 for any external peering and they're allowed to do that - it's their AS and they don't really have to trust other ...

keefe007

A redundant power supply would be great.

Keefe

keefe007

What is the MT equivalent of Cisco's l2protocol-tunnel?

And yes, I'm referring to L2PT, not L2TP.

L2PT: Layer 2 protocol tunneling allows Layer 2 protocol data units (PDUs) (CDP, STP, and VTP) to be tunneled through a network.

Keefe

keefe007

I have the following router filter on my router:

chain=asprepend_in prefix=122.0.0.0 prefix-length=8-32 invert-match=no action=passthrough set-bgp-local-pref=110

Why does this match 122.0.0.0/24 but not 122.197.127.0/17? How can I match anything falling inside 122.0.0.0/8?

Thanks,

Keefe

keefe007

You can...if you want it to work.

I'm not sure on the filtering part yet because I haven't had to chance to test this.

keefe007

I also asked MT support that same question, but in my case its a /21 cut into multiple /24s.

Hello,

Yes you can add
/ip route add dst-address=XX.XX.XX.XX/21 type=unreachable

and then filter out in bgp filters all /24 routes.

Regards,
Maris

keefe007

Here's was mikrotik support told me: Hello, We have changed behavior a bit. BGP Networks are not advertised if route for this network is not present in routing table. Easiest way how to get back old behavior (if you need it) is to add static unreachable route which matches BGP network. Regards, Maris

keefe007

What is the default behavior for handling situations where one is using both a BGP instance out-filter and a BGP peer out-filter. This used to work fine on 3.23 but now that I've upgraded to 3.28 I'm seeing some issues. It appears that the instance filter is not applied and I'm not able to tell if t...

keefe007

After some more testing it looks like the problem is that my main route/subnet is not being advertised via BGP when I use routing test. I'm advertising three /24s and one /21. The three /24s get advertised but not the /21. Why would that be? All three /24s and the /21 are listed in the BGP networks ...

keefe007

Here's a little bit about my setup: X86 Based Router WAN1 - ISP #1 WAN2 - ISP #2 LAN - All devices on LAN side of router have public IP addresses. I run BGP will full routes from both ISPs. I was running 3.23 with routing-test and I attempted to upgrade to 3.28 with routing-test. I just tried upgrad...

keefe007

What is the exact name of the chipset/chip needed? Or, what is the exact technology these chips must have to support this?

I would like to find out if there are and pci or pcie based network cards that have this chipset or support this echnology.

keefe007

What specific chipset is required to make this happen? Are there and pci cards available with this chipset?

keefe007

You don't think a dual/quad core x86 box or a dual processor multi-core x86 box wouldn't be able to handle that? I have low end 8 port HP managed switches that can do port mirroring.

Keefe

keefe007

This is supported on some RouterBOARDs that have appropriate switch chips that support port mirroring. For example RB450G and RB750

Would it be possible for you to extend this feature to any kind of network interfaces using software instead of the hardware chips?

Keefe

keefe007

That doesn't seem to work:

/interface ethernet mirror> set mirror-port=ether5 source-port=LAN
bad argument name mirror-port (line 1 column 5)

keefe007

Currently I have one Mikrotik router connected to two ISPs via BGP. Ideally I'd like to have two routers in an active-active state. All of the devices on the LAN side of my current router have public IP addresses. There is no NAT. Is there a way to implement an active-active setup with the LAN devic...

keefe007

Is it possible to do port mirroring on a Mikrotik for monitoring purposes? I see there's a interface ethernet mirror command but I can't figure out how to use it.

Keefe

keefe007

I'm running ROS 3.20 and recently I noticed something different. I have two upstream BGP peers and previously I would see a prefix count of ~280,000 or so for each of these peers. When looking at the routing table I would see two full sets of routes (one from each peer) and some were marked active a...

keefe007

With Routeros 3.22 what are the differences between routing and routing-test?

When will routing-test be merged with routing?

keefe007

I'm running 3.20 with the standard routing package on an x86 network appliance. We have 2 BGP peers with full routes and everything seems to be running fine. We do about 800 GB per day of traffic on this router and the CPU load is around 10%.

keefe007

Mainly adding new queues for new customers.

keefe007

I have an x86 router running 3.16 and I'm having an issue whereby the router reboots randomly when I'm changing queue settings. Sometimes I can add many queue's without issues but other times simply changing one queue setting will reboot the router. This is what the log shows: simple queue changed b...

keefe007

Can EoIP be used between two routers on the open internet? All of the documentation I have seen shows EoIP over PPTP and not by itself. Does EOIP provide any encryption?

Keefe

keefe007

Well I dont want to do that because I utilize dual-core...otherwise BGP convergence takes 100% CPU.

keefe007

The CPU frequency and CPU count is correct.

And I do have multi-cpu=yes.

keefe007

I know the real traffic amount based on the interface statistics on the devices on either side of my router. I don't have an concrete proof that the CPU is wrong, however, I find it highly unlikely that I'm using 0% ;) Torch is also showing the wrong stats...at least at the bottom where it adds up t...

keefe007

I recently upgraded one of my routers from version 3.3 to version 3.16. Now with 3.16 I noticed that the Tx and RX rates for interfaces are not displaying correctly in Winbox. For example, Winbox is showing 10.5 Mbps TX on my LAN interface but I know that there's really about 30 Mbps on that interfa...

keefe007

Yes the BGP is very stable. I've been using it on 3.x for a long time.

keefe007

Nobody? I know there are a couple other people on here using this hardware platform.

keefe007

What is the proper routing filter to prepend 1 AS path on one of my BGP peers? I want this to effect both incoming and outgoing traffic.

Keefe

keefe007

Or which exact canopy template has this?

keefe007

Does anyone here know how to get an LCD on an Axiomtek hardware appliance to work with RouterOS?

Keefe

keefe007

Someone forgot to mention there's a new obscure setting under the advanced tab in the BGP peer for Address family. By default nothing is selected...and at least IP needs to be selected.

To Mikrotik: Why on earth wouldn't you have IP checked by default?

Keefe

keefe007

Why dont you give them a static DHCP mapping?

keefe007

I got my BGP setup today with ISP #1 and I currently have a session established. For some reason I'm not receiving any of their routes and they aren't receiving mine. When I look in the routeros BGP log I can see the routes coming from them but they aren't being added to my route table. What could b...

keefe007

Right now I'm using a switch with port mirroring enabled to monitor all of the traffic that goes in and out of my network. I have NTOP setup on a box connected to the 'monitoring' switch and it works great. Here's how I currently have it setup: ISP-CPE | | Switch----->NTOP | | MT Router | | | | WLAN...

keefe007

Thanks for the response. The second question I asked was in regards to outbound traffic engineering. I'm wondering what's available to route outbound traffic based on congestion and number of hops (not just ASNs). I'm aware of the basic list of what's needed for a BGP implementation. I have items a ...

keefe007

Yes it's a learning process. I did pick up O'Reilly's BGP book.

What's the best technology on the mikrotiks to route outbound traffic to the shortest path on the open internet?

keefe007

If I run BGP on my main router and announce my IP space over two ISPs, what determines which ISP the traffic will come in on?

keefe007

I was connecting via mac and you called it exactly. Once I switched to IP it started working fine. The weird thing is that I was able to connect to other routers via MAC with no problems.

keefe007

I just setup a new x86 based system for use as a Mikrotik router and I'm having major issues with it. I'm using an intel board, 1 GB of DDR, and a intel core duo 2.2 E4500 processor. I also have a crucial 1 GB CF card. I used netinstall on my win xp machine to install routeros onto the CF card. I th...

keefe007

Is there a way to graph packets per second using SNMP?

keefe007

We looked at those as well as an OEM unit that looks almost identical. It looks like a very nice piece for many applications. In our case, space is not a big issue as we have plenty of rack space where we are deploying them. In a NEMA box or a cramped rack at a POP they'd be an ideal choice. At our...

keefe007

Who's hardware is used in the powerouter?

keefe007

That powerrouter does seem nifty. Does anyone here have one?

keefe007

Me thrice!

keefe007

I have a Routerboard 532A running version 2.9.49. Lately I’ve been experiencing a lot of router “lockups.” When this problem occurs it starts out by having huge packet loss on all interfaces, like 50-80% packet loss. I’ll get disconnected from Winbox and I won’t be able to access the router. If I re...

keefe007

Its suppose to be 0, maybe 0 isn't an option.

keefe007

What did they give your dates on the rb1000 and rb600?

keefe007

I have a RB532 with 64 Mb of ram running 2.9.46.

I have a fiber WAN connection right now at 20/20 mbps.

The CPU load on the Mikrotik is averaging at 55% and peaks to 87% (according to Cacti polling once a minute).

At what CPU load should I upgrade to faster hardware?

keefe007

How about RB1000?

What are the RB600 specs?

keefe007

When the slowness occurs it can be seen on both the WLAN and LAN interfaces. The WAN is physically connected to a Linksys SRW224G4 used solely for port mirroring for ntop and snort. Both ports used on that switch are forced to 100 FD. The WAN interfaced is configured like so: MTU: 1500 ARP: enabled ...

keefe007

Hello, I'm using a Routerboard 532 with 64 MB of ram for my core router. I'm running software version 2.9.46. I have the three interfaces called WAN, LAN, and WLAN. WAN is connected to a 20/20 Mbps fiber internet connection (through a Cisco 3350) LAN is connected to our colocation customers and inte...

keefe007

Right now I have my router setup like so: WAN - Fiber connection to internet - X.X.167.114/30 LAN - servers and colocation (public IP addresses) - X.X.49.1/24 and X.X.59.1/24 WLAN - WISP network (public ip addresses) - X.X.196.1/24 I have DHCP running on the WLAN interface with only allowed MAC addr...

keefe007

The x.x.196.1/24 addresses are public IPs used by the end users equipment (router). The 10.1.1.0/24 address are only for the management of the equipment and it never contacts anything in the x.x.196.1/24 range. I added 10.1.1.1/24 as an IP address on the WLAN interface and the devices are using this...

keefe007

Hello- I'm running a routerboard 532 with three interfaces right now. The interfaces are setup like so: WAN - Fiber connection to internet - X.X.167.114/30 LAN - servers and colocation (public IP addresses) - X.X.49.1/24 and X.X.59.1/24 WLAN - WISP network (public ip addresses) - X.X.196.1/24 ARP is...

keefe007

Alright, I think i was missing the "add route" step before, it's working now.

Here's the problem though. Is there any way to make this work without enabling proxy-arp on the LAN interface? I have it setup right now for reply-only and I have a static ARP stable for security.

keefe007

any ideas?

keefe007

I have a MT router setup at a remote wireless POP site. Right now the router is doing routing, NAT, DHCP, and a few other things. I'm running DHCP on the LAN interface for customers connecting to our network. The DHCP server hands out 192.168.0.0/24 addresses. On that interface I have ARP set to rep...

keefe007

Hello, I'm going to be switching a Motorola Canopy network from a Cisco router to a Mikrotik router. I'd like to be able to deny users access to the network (from the LAN side) if their MAC address isn't registered somewhere. I don't plan on running NAT because each end-user will have their own publ...

keefe007

What's the best way to do bonded T1's on MT?

I hear that MLPPP is the best way to go, but I don't think its supported. Right now I'm using a Cisco router and CEF.

Best Regards,

Keefe

Search found 125 matches