MikroTik

jwcn

Is there a way to use PCQ to equally balance traffic regardless of IP address or total traffic limit (If I have to set a maximum limit I can deal) on a bridge interface? Looking for a simple queue I can place on wireless AP's to balance traffic equally among associations.

jwcn

I have a routerboard with two ports bridged together. Under the bridge I add a vlan. Running OSPF on the router. If I reboot the router I start getting this error: Discarding database description packet: too large MTU mine=1458 received=1500 If I check the MTU of the vlan it is set to 1500. As soon ...

jwcn

Yes, I have found that you get more with honey than vinegar and once I started acting reasonably the guys at towercoverage.com have been great to work with. I use this extensively as a daily tool. For those of us who don't have time to use radiomobile and need a simple, easy to use option for link a...

jwcn

I have a tower where I have installed 4 60 degree panels with 9HPN radios. The issue I am experiencing is if I turn on more than two, regardless of channel, the throughput drops to nothing on all the radios. It does this regardless of CPE signal strength (try to keep customers at -65 at worst) I am ...

jwcn

Ok so here is the export and neighbors on HutchSW001: [john@HutchSW001] /routing ospf> export # mar/20/2015 23:33:06 by RouterOS 6.27 # software id = 1K6R-VXKJ # /routing ospf instance set [ find default=yes ] router-id= 10.255.255.249 /routing ospf network add area=backbone network=10.0.0.0/8 add a...

jwcn

I am having an issue migrating to OSPF. I started with a bridged network, converted the network to routed hops but with all static routing. Now I am moving to OSPF and I have two routers where their neighbors can see them but they show zero neighbors.

Where do I start with troubleshooting?

jwcn

I should have clarified. My edge Cisco router is doing NAT. I have multiple paths within the private network on routed segments. I understand how to create the backup static routes for outbound but in the even the primary 0.0.0.0/0 route goes down and the box reverts to the backup route how does the...

jwcn

Is it possible to have auto-failover using static routes without utilizing NAT, BGP, or OSPF?

jwcn

This for the omni: http://www.lastmilegear.com/index.php?page=shop.product_details&flypage=flypage.tpl&product_id=373&category_id=1277&option=com_virtuemart&Itemid=29 This for the yagi: http://www.doubleradius.com/m2-antennas-17dbi-yagi-900-930mhz-with-n-connector-917-isp.html Th...

jwcn

So here is my non-lab analysis. I understand that there are plenty of variables here I can't prove to a scientific certainty but this is my experience. Test tower: 160' with HPOL Last Mile Gear Omni. Original config: Nanostation Loco M9 utilizing external antenna. Test customer - no useable signal. ...

jwcn

Great question. I just ordered four to replace a Canopy radio. I'll report back.

jwcn

Its been rebooted now so it doesn't show 100%. When it is at 100% I can't pull up anything but profiler shows management as the process.
Don't you have istalled dude package, do you?

No.

jwcn

[img]
Mikrotik%20Screenshot.jpg
[/img]
Where do you see 100 % cpu on your picture? How profiler looks like?

Its been rebooted now so it doesn't show 100%. When it is at 100% I can't pull up anything but profiler shows management as the process.

jwcn

[img]

Mikrotik%20Screenshot.jpg

[/img]

jwcn

Still having 100% CPU issues on RB2011's. SNMP disabled, no polling with the Dude. Ticket Ticket#2015020266000038 from three weeks ago still unanswered. Please help. Management process culprit for the CPU spike. Spike to 100% and stops passing data. RB2011 is doing nothing except acting as a switch....

jwcn

I just ordered a pair of Netbox 5s and mANT30's. How is real world performance and stability?

jwcn

jwcn

Any solution for this? I could really use the link speed charts but my the Dude locks up every time I pull one up.

4.0b3 running on a PC. Tried several computers. Makes no difference.

jwcn

I just installed the Dude package on 6.9 then upgraded to 6.10 and it bricked.

jwcn

ip firewall nat
add chain=dstnat src-address=192.168.1.1 dst-address=123.123.123.123 action=dst-nat to-addresses=123.123.123.111

jwcn

That would hold water if the CPU was spiking anywhere near the maximum but it isn't.

jwcn

You are on a Mikrotik forum not a Ubiquiti forum. If you want to purchase a Mikrotik AP go for it, then you can come here for help.

jwcn

Sounds like you have a problem with your WISP, they have disabled the Ethernet interface and now you are trying to circumvent then. Call your WISP and work out your problems with them, stop trying to do things you aren't supposed to be doing.

jwcn

I have several routers that seem to hit a brick wall around 30 megs of TCP traffic using the bandwidth test tool between routers to test. CPU utilization never peaks above 40%. It makes no difference what type of Interface queue is being used. NAT, connection tracking, enabled or disabled seems to m...

jwcn

Are you certain you are looking at disk and not CPU utilization?

jwcn

What hardware are you using for the client/ap side?

jwcn

1. Go under "files" and make sure nothing is there that shouldn't be.

2. Go under ip->services and make sure ftp is disabled so you don't have anyone uploading files.

3. Go under system->packages and uninstall any you aren't using.

jwcn

Do a search for Canopy. This has been discussed many many times and there is an excellent thread with pictures and everything.

jwcn

You don't want to do that. The correct solution is to disable passthrough on all the other rules.

jwcn

Tried this with no success. I have a few DHCP leases, no queues. Ran this and still no queues.

Thoughts?

jwcn

What purpose does the Actiontech router serve? Can you get rid of it?

jwcn

ip fire nat add chain=dstnat action=dst-nat to-ports=8100 protocol=tcp dst-address=192.168.1.232 to-addresses=10.10.2.61 dst-port=8100

That will work assuming the information you provided is correct and there is already a static NAT in place from the first non-mt box to the mt box.

jwcn

And I'm sure that after three years the question is still relevant. Aren't there enough recent threads for you? Geeze, don't resurrect dead threads.

jwcn

How many threads do you need to start? Geeze.

jwcn

I have four DSL Internet Connections. If I create a separate tunnel across each DSL connection to a Routerboard with a 45meg connection, can I use bonding as simply as adding the PPTP interfaces as slave interfaces?

jwcn

There is very little demand for support of Broadcom. Better to spend time on other things i.e. gps sync

jwcn

iirc Airmax is not really for ptp use.

Remember, you can always turn down the power of the radio cards in MT if your signal is too hot.

jwcn

You need to free up hard drive space to uninstall the packages. Try removing some firewall/mangle rules or layer 7 filters.

jwcn

Why would a simple AP need a dhcp-server?

jwcn

I would think so.

jwcn

Forget relay. Create a bridge between the AP and your Ethernet port, assign an IP to the bridge, and wada away you go.

jwcn

Short answer is no. You could use an external antenna splitter but I would really advise against it.

jwcn

Where are you located? Just want to make sure we're keeping things legal - there is no legal application for a 900mhz amp in North America.

jwcn

If you set to auto it needs to be auto on both sides. Otherwise you need to lock settings on both side. Auto MDIX has no relevance to your problem.

Can you post your configuration with it forced to 100/full? Also, how long a run is the Ethernet? Are you using shielded cable?

jwcn

jwcn

Geeze can you please start a new topic/thread this one is nearly TWO YEARS old.

jwcn

You need to use pseudo station.

jwcn

Bridge the wireless interface and the ethernet interface. Put an IP address on the bridge interface.

jwcn

Use separate subnets for the VPN connections i.e. 172.16.1.1/24 for the VPN and 172.16.2.1/24 for the LAN. Make sure the VPN connection is set to use the remote gateway for all address resolution and also make sure you have mangle enabled. Get away from the traditional 192.168.x.x subnets - Your pro...

jwcn

There is a 10db offset. Be careful when playing with the TX settings. That being said, why use any amp? They create far more problems then they solve.

jwcn

I stand corrected.

jwcn

jwcn · Re: Queue Issue on RouterOs 2.9.27 Start by upgrading to a legal ROS license.

Start by upgrading to a legal ROS license.

jwcn

Use static ACK settings and enable Nstream.

jwcn

What happens to the CCQ when you disable one of the links?

jwcn

So is there a way to effectively limit each IP address to say 100 tcp connections without a separate rule for EVERY individual IP address?

jwcn

So with a /24 does that limit each IP to 100 connections or the entire subnet to 100 connections?

jwcn

Well, with the 256/768 combo we are pushing 5megs/512k without any packet loss to clients on 5mhz channels.

It seems to work well for us, I haven't tried tweaking any further.

jwcn

Mike over at UBNT suggested the frag level of 768 - beyond that I have no idea.

I can tell you by default, the Alvarion VL line which uses a modified Alvarion chipset uses 10 for the HW retrans settings.

jwcn

Make sure you are running the newest Ubiquiti firmware on your clients

jwcn

Maybe I'm not understanding the question, but... wouldn't it be easier to make a simple rule redirecting all port 25 traffic to 2525?

jwcn

There are filters built in to the Moto software you can enable. Head over to www.dslreports.com/forum/wisp and post your problems. I can help, just not in this forum.

jwcn

Temp problem maybe?

jwcn

It would help if you post your config.

jwcn

It is always in the AP and enabled. The AP should always be set at the highest values and the CPE at the lower values. Think of it like this, for 90% of the MT users - you shouldn't screw with the TX power settings. Likewise, you shouldn't screw with RTS/CTS settings in the AP. Enable them in the CP...

jwcn

Incorrect. ROS has always support RTS/CTS in the AP. No need to upgrade, install wireless-test or anything else.

In fact, you don't want to change the AP settings for RTS/CTS - only enable and tweak in the CPE.

jwcn

RTS/CTS has ALWAYS been on the AP's. You don't want to change the settings on your AP's. Only enable on the Clients.

jwcn

Tier 1 ISP.

jwcn

Could be a bad NIC in that machine too...

jwcn

Which is **why** ISP's as we do, should always use a Tier 1 provider.

We do not limit TCP connection speeds.

jwcn

Route instead of NAT or do static NAT

jwcn

Actually there is useful information here. Just because you're too stupid to follow it doesn't make it worthless. That being said, this is a dead topic and should be left as such.

jwcn

Create a static route to your VPN endpoint, then set your gateway of last resort 0.0.0.0/0 to the other end of the VPN tunnel with a higher distance value, set gateway to check by ping. Then for fail-over do another 0.0.0.0/0 with an even higher distance value.

jwcn

So basically you want to establish a VPN connection and then route all traffic across it?

jwcn

Well known fact. Any reputable reseller posts this information under XR9/SR9 descriptions.

jwcn

I believe that the ideal network you let the wireless do the wireless and the routers do the routing. Combining a router and wireless into the same box seems like a good idea on the surface but the robustness and stability isn't there of a two part system.

jwcn

256 and 768.

You have to implement it in ALL the client radios otherwise it will only make things worse.

jwcn

That is NOT a Motorola Document. Nice try.

jwcn

Read the thread, implement RTS.

jwcn

Your suggestion is a bandaid fix which doesn't address the core issue.

jwcn

First, it is spelled Ubiquiti.

Second, what version of ROS are you using?

jwcn

This is a Mikrotik forum.

jwcn

Thats the point, you want the client to get the AP's attention. In a congested number you lower the number.

jwcn

What is your signal, antenna type, noise floor, etc.?

jwcn

typo it is, my bad.

jwcn

No, Nstream is proprietary Mikrotik.

You need to enable RTS and Fragmentation under the Advanced tab in the Ubiquiti radios. Try 256 for RTS and 768 for Frag.

You have to implement this in ALL the client radios.

jwcn

IMHO it is crazy to run anything later than 2.9.51 on legacy products like the 112, 133, 133c, etc.

jwcn

er well. There are NS2's and NS5's. They operate at either 2.4 (NS2) or 5ghz (NS5) The key with NS integration with Mikrotik is make sure you are using RTS on the Nanostations. Otherwise you will have problems. Speaking in general terms, if you live in an area that has perfect line of site to your A...

jwcn

support@mikrotik.com is your best bet.

jwcn

That is typical for all cable companies I know of. So no, nothing special

jwcn

Right, sure you are.

jwcn

Do you have winbox enabled under IP services?

jwcn

Basic, specific questions yes. Blanket give me step by step instructions, no.

Mikrotik is not now nor has ever been a novice product. That is what Linksys and the likes are for.

jwcn

Most cable modems lock to a single MAC address. Chances are you just need to:

1. Turn off DHCP client in the 'tik
2. power cycle your cable modem, wait for it to come completely back up and lock into the upstream/downstream
3. Turn DHCP client back on.

Wada.

jwcn

Apparently you don't know much about networking period. This is not a novice product. Read some books on basic networking, then read the Mikrotik manual, then read the Wiki, then come back and ask.

jwcn

You shouldn't activate it on the AP side, only the client side.

We use 256k for RTS and 768 for frag on our Ubiquiti radios and EWMA for the alogrithim

jwcn

Why are you resurrecting a dead post and now apparently talking to yourself???

jwcn

What does your CPU utilization look like?

jwcn

With that many clients, if you are not using Nstream and you aren't using RTS that is your problem. Search around for Hidden Node

jwcn

Set your RTS to 256 and fragmentation threshholds to 768

jwcn

Seems redundant to have both PPPoE and WPA...

At any rate, are you setting the RTS in the Ubiquiti's?

jwcn

Why are you trying to bridge?

jwcn

I think I'll pass. This is a forum for the exchange of information, not a place to peddle products. If you have the answer feel free to post it.

I love it. Can I copy/paste your quote every time Dennis spams up the forum? Thats so awesome.

jwcn

Use tools-torch.

Torch an interface and specify port 25. If you have a spammer it should be pretty easy to pick them out.

jwcn

i have v2.9.27

Yet another crook. Jeeze.

jwcn

There is a manual for a reason.

The only obvious problem with your diagram is that you need a public IP address on your Mikrotik.

jwcn

Why would you proxy port 25. I think what you are actually asking is not a proxy question but a NAT question. If you NAT all your customers out a single IP what happens if your IP is blacklisted. Typically you can do one of two things. We use the following rules: 1 ;;; Drop traffic from those on the...

jwcn

All works well except for the last part. I'm not following how to do that. I see the interfaces under the SNMP tab but if I copy and past your below values it does nothing.

jwcn

I stand corrected. The wireless test package needs to be loaded on the AP's not the CPE.

jwcn

Honestly, it sounds like anyone's guess why you have improvements. Everything you did is more or less backwards from the way it should be done so trying to figure out why it works better is darn near impossible.

jwcn

"Yes - prior to enabling RTS/CTS i had tried the wireless beta package (i'd much prefer to not have to upgrade all the clients as well)"

The wireless test package has little to no impact on the AP side. It needs to be loaded on the clients for the improvements.

jwcn

RTS/CTS has always been supported in the AP. Here is a quote from Normis: "OK, it's like this: Previously RouterOS AP always replied with CTS to those who asked RTS, but RouterOS client never asked for RTS. Ie. the support was not in the client. Then we introduced NStreme polling to solve the h...

jwcn

The OP stated he is using an RB133 which does not have an external drive.

jwcn

I already commented on the above referenced post but let me do so here again. If you are running Nstream with polling you don't need/want RTS. If you are not running Nstream than you need to use RTS. Set it ONLY on the CPE side. NOT on the AP side. You do not need to run 3.30 on the AP for it to sup...

jwcn

You'll need to put an IP address on the wlan interface of the mikrotik, an ip address on the lan interface of the mikrotik and add basic route/nat rules.

jwcn

I would run both links as bridges and have a Mikrotik on each side with separate interfaces to route/mark the traffic.

jwcn

Why don't you head over to a general wireless forum. This is hardly a Mikrotik related question.

That being said, I've had mixed results with Engenius products. I tend to stick to Ubiquiti.

jwcn

Sounds like it reset to default. Have you tried using Admin and no password?

jwcn

You don't want to run RTS on the AP. That is incorrect. RTS on the AP should be set to the highest level possible aka not at all.

You set RTS on the CPE only. Pick Nstream polling or RTS, not both.

jwcn

You've not provided enough information to be helped. Post your configuration.

jwcn

Make sure you are activating RTS on the client side only, not on the AP side. And geeze, get a decent AP or drop back to 2.9.51

jwcn

Replace the radio cards.

jwcn

IP-->services

jwcn

Normis,

My suggestion is to formulate something within Nstream to increase the latency but keep it consistant. I understand how Nstream works and why the latency spikes are evident. I would rather see consistantly higher pings then erratic ones.

jwcn

Personally I would like to see some modifications to modify N-stream to give a more consistent ping albeit higher. I'd rather see 10ms all the time then fluctuation in pings.

jwcn

Use the Ubiquiti in station mode.

jwcn

Once again Dennis is spamming the forum.

jwcn

Use Web Proxy.

jwcn

Look at the wiki, basically you need to drop any incoming packets on the WAN interface on the port your proxy is using.

jwcn

Use the 'tik to interface directly with the DSL modem/bridge to start.

jwcn

Are you possibly using proxy? Sounds like you have some type of security hole on the WAN side.

jwcn

Lock your speeds down to 24 megs.

jwcn

Interference or lack of signal. Post a screen shot of your associations.

jwcn

Thumbs up for that post. I learned something new today! Thanks.

jwcn

wiki.mikrotik.com

jwcn

Advice? Read a book on wireless networking.

jwcn

You have to use Netinstall

jwcn

You need to post your configuration. You have not provided enough information for anyone to help you.

jwcn

Sounds like your radio card is blown and you need to upgrade to a legal copy of ROS.

jwcn

You still haven't provided your configuration before and after. All you have proved is you have some type of configuration error.

jwcn

You proved nothing.

jwcn

support@mikrotik.com

jwcn

Hire a consultant?

jwcn

What channels are you using?

jwcn

How much load is on that link?

jwcn

These ping times are perfectly normal using Nstream.

jwcn · Re: help mikrotik 2.9.27 To start, upgrade to a legal license.

To start, upgrade to a legal license.

jwcn

There is an example of this in the Wiki.

jwcn

http://forum.mikrotik.com/viewtopic.php ... 2h+failure

jwcn

Can of worms.

jwcn

This is not a Tranzeo forum.

jwcn

It isn't in production yet and is probably illegal to use in most if not all countries at this point.

jwcn

There is a manual and there are consultants. If you don't know basics about networking and Linux you should really do some research and come back.

jwcn

Upload the package for Routerboard500 and reboot. If it doesn't upgrade download the X86 package. One or the other will work.

jwcn

I would try another radio card. Personally I wouldn't use the R52H - there have been many failure reports. Either use the R52 or if you need the power an XR2

jwcn

Have you tried changing from antenna a to b or vice versa?

jwcn

"changed tx power configuration"

Bad bad bad. Leave it at default, you probably blew the card.

jwcn

Yeah, I once had this dog and when I hooked an antenna up to him my problems all went away.

That is about the level of usefulness of your post. Without any information of what is going on you just make yourself look foolish spewing information.

jwcn · Re: forgot password RB450 RouterOS 2.9.35 I believe an RB450 has to run v3??

I believe an RB450 has to run v3??

jwcn

Default authentication should be no. Then only the MAC addresses in your ACL will be allowed to connect.

Also, upgrade to at least 2.9.51 or V3

jwcn

You can only dst nat by IP address. You can use proxy to redirect actual URL's.

jwcn

support@mikrotik.com or contact your dealer.

jwcn

You haven't provided enough information. Noise floor, polorization, signal range of all clients, CPE type, etc. etc. etc. Could be a RTS issue, could be lack of QoS, could be noise, could be a hundred things.

jwcn

The target is not home/consumer users but commercial/enterprise users. Even a power user can't open a Cisco router, plug it in, and expect it to work. IMHO having that type of setup will just clutter up the support resources and forum more than they already are.

jwcn

Why do you need to reinstall?

jwcn · Re: 532 board on 2.9.23 You get do a netinstall via IP...

You get do a netinstall via IP...

jwcn

Geeze, is it that hard to start a new topic. Resurrecting year old topics is just poor taste.

jwcn

Buy a Motorola 900SM, they can be had for sub $300

jwcn

Without spectrum analysis commenting on a cavity filter is a shot in the dark. I'm suspecting you are dealing with in-band interference.

For disable CSMA to work Nstream must be enabled.

jwcn

How about "disconnected - too many poll timeouts"

jwcn

Not by choice, I needed to disable CSMA and 2.9.51 doesn't work at that point. Been running for 8 hours now with no disconnects so hopefully I'm out of the woods.

jwcn

I have an old Routerboard 112 that I need to run Nstream and V3 on. It isn't practical to replace the board with a higher CPU/newer routerboard. What are the packages I need to have installed at a bare minimum? I don't need to route, simple bridge between the wlan and ether1. Most I am familiar with...

jwcn

You have to use Nstream to disable CSMA

jwcn

It's been a while. Someone had the solution which I tried and it did indeed work better. I can't remember the settings though, I pulled that AP a year ago and upgraded it to Canopy...

jwcn

Noise floors are hardly ever reported correctly. If for no other reason than looking at the spectrum I would by Canopy CPE's in the various frequency ranges 5.3 5.4 5.7 2.4 and 900mhz. They have a built in spectrum analyzer. Once you have that data you can provide a screen shot and I can probably he...

jwcn

So maybe it is 802.11 in general that doesn't mix well in high noise environments. I use Canopy in high noise environments without any problems.

jwcn

Are you using non-overlapping channels?

Did you increase or decrease the hardware retries?

jwcn

VPOL and 900mhz really don't work well together. You pick up loads more interference that way. How high is your AP?

jwcn

I don't believe V3 is compatible with Prism based radios. They are considered antiquated.

jwcn

I enabled it on my busiest AP which only has around 20 clients connected. I didn't see any negative effect so I'm assuming it is working correctly.

If you are using N stream the test package greatly improves performance.

jwcn

It really depends on their usage...

jwcn

I'm using it in 3.20 - it is a separate download. When you copy it to the RB and restart it automatically begins using it. The implementation of RTS/CTS is by command line only at this time.

jwcn

The post I was referring to was deleted and I honestly can't remember what it said so I can't comment :-/

jwcn

I stick to 2.9.51 on the older boards. I've never had much luck running v3 on them at all.

jwcn

You need to use netmap

jwcn

Dump the 8602's and use either a SR5/XR5/R5H - 5ghz has a much tighter (smaller) fresnal than 2.4 and you should have better luck. If you insist on using 2.4 try using the SR2 or XR2 - 8602's are junk.

jwcn

Read the manual and lose the attitude.

jwcn

Starting to see a pattern on XR3 radios...

jwcn

So I upgraded a couple routers tonight from 2.9.51 to 3.19 Immediately after, without making any changes the signal is -86 instead of -79. Tried changing antenna sides, etc. TX power settings are default. Did a system reset and put the most basic settings back in. Downgraded back to 2.9.51 yet the p...

jwcn

Actually the traditional P2P rules pick up less than 40% of P2P traffic (TCP) and pick up no UDP P2P traffic. Layer 7 is the only way to effectively control P2P.

jwcn

It is really unchartered waters. There is an article in the wiki about setting traffic priority in the wiki using layer 7. You can start there and see where it takes you.

jwcn · Nstream Test Package Will it work on 2.9.51???

Will it work on 2.9.51???

jwcn

You can do this using layer 7 to mark, mangle, then route.

jwcn

Get yourself some dipole antennas.

jwcn

THANK YOU. Finally an accurate post. This topic had my head spinning. Geeze.

jwcn

Are you really using those IP address???

jwcn

Call your ISP.

jwcn

No RTS/CTS in the past and polling was only used when Nstream was enabled.

jwcn

They are in the new wireless test package.

jwcn

If it is happening on the same subnet you can't block it at the router.

Search found 1495 matches