Allowing DNS Remote Requests was using 80-85% of my cpu with total CPU utilization at 100%.

Which most certainly means you have your firewall filter misconfigured.

hahahaa... was just coming back up update my post and saw your response... yes, i forgot a firewall rule.

I have similiar issues with my CRS125 running the latest stable firmware. I was noticing a bottleneck going out to my WAN.

Allowing DNS Remote Requests was using 80-85% of my cpu with total CPU utilization at 100%. Disabling this brought my overall CPU usage down to a respectable level.

Use fast track of you dont, and turn off the LCD display, it can eat up 10-20% cpu.

That helped, thanks.


Sent from my iPhone using Tapatalk

I have a CRS125 used in my residence. A few of you a few weeks ago may have assisted me in the set up. It is a fairly basic setup; WAN port is setup as DHCP with about 75% of the other 23 ports setup and active on my LAN. I also have a separate POE switch plugged into one of the ports powering an ac...

Change IP Address, DHCP Gateway, or both?

Both, and see my edit in prev post! Sorry, my mistake

Up and running now Irico. Thank you and everyone else for your assistance.

/ip address add address=192.168.2.0/24 interface=ether1-LAN network=192.168.2.0 /ip dhcp-server network add address=192.168.2.0/24 dns-server=8.8.8.8,8.8.4.4 gateway=192.168.2.0 "ip address" and " dhcp gateway" (192.168.2.0) are network address. Please change it for 192.168.2.1 ...

I am truly confused by this. I hooked the CRS125 up to my ISP.. Router obtained an IP, gateway, etc. I could access the internet via the terminal temporarily for approximately 2 minutes. Not sure why access was cut off but i could still access the internet via the terminal. I am beginning to think t...

The 0.0.0.0/0 tells the LAN where to direct external traffic: [admin@MikroTik] /ip route> print Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit # DST-ADDRESS PREF-SRC GATEWAY DISTANCE 0 ADS 0.0....

You would need a masquerade rule to reach the internet from LAN. /ip firewall nat add chain=src-nat out-interface=ether24-WAN action=masquerade My apologies! I do have NAT enabled with the above mentioned rule. With ether24 being my WAN and all other ports the LAN, is there something that i need to...

What firewall rules do you have?

None at this point. I know there are security related rules I should put in place but have yet to do so until I know everything else is working.


Sent from my iPhone using Tapatalk

Thanks for your help k6ccc and tclafoe! I am getting closer... First thing I did was change ether ports around as suggested... WAN was moved to ether24 and labeled accordingly with master port set to 'none' LAN was moved to ether1 and labeled accordingly with master port set to 'none' Ether2-23 will...

Once making the above change I noticed my DHCP Server entry was 'red' It wanted me to change it from ether2 to a different port with the warning message of 'DHCP cannot be set to a slave port'. I set it to the ether1-WAN port - not sure if this is right or not but is necessary when changing ether2 t...

Thank you both for the reply... I have a laptop running windows 10 plugged into ether2 with IPv4 and IPv6 adapter properties set to obtain IP and DNS addresses automatically. I set ether2 to a slave of ether1 which is my WAN. Upon booting of the laptop, I do not see where an IP address is being assi...

Greetings all... Been lurking for a few months reading up on things and finally decided to graduate from a residential grade router to a CRS125. Problem: DHCP will not assign an IP address The router can access the internet from the terminal; a simple ping of google.com resolves the url and shows a ...