Community discussions

MikroTik App
Forum rules
Only MikroTik related software is allowed. No bumping of topics, no spam, no unrelated or vaguely related tools.
 
User avatar
MikroTikMarc
just joined
Topic Author
Posts: 4
Joined: Tue Jan 07, 2025 6:25 pm
Location: USA
Contact:

FCS errors explained 🛠 💣 ❌ (Frame Check Sequence)

Tue Jan 07, 2025 7:12 pm

Hello all,
My name is Marc and I wanted to start sharing some of the wisdom I've learned over the last few decades of networking, starting off with FCS errors. If you'd like to see this content as a video, here's the YouTube: https://www.youtube.com/watch?v=QW-o0HTbM-I

What are FCS errors?

In a MikroTik, each interface tracks tons of data about its link, traffic and errors. You can see if any of your MikroTiks is having interface errors by double clicking the interface you want to view and clicking on RX and TX stats. FCS errors are a type of error that’s related to RX, or when the interface RECEIVES packets or frames.

Image

FCS stands for Frame Check Sequence, which is a mechanism for ensuring that what a sender sends is the same as what a receiver receives. Let’s break that down a little bit…

Image

Remember that childhood game, where you sit in a circle and whisper something to your neighbor, and then it goes all around the circle whispering neighbor to neighbor until it gets back to you? If the message you whispered to start things off isn’t the same as the message whispered back to you, then you know the message was CORRUPTED, meaning that it changed during the sending and receiving process. As kids, it felt like it was impossible to get the same message at the end, as the one that you started with.

Fortunately with computers, the message is digital instead of analog – it’s all 1s and 0s instead of whispers, and it’s incredibly easy for a computer to mathematically identify if any corruption has occurred on the message. Computers are insanely good at exact copies of messages.

So What happens is that when creating the string of 1s and 0s to transmit the data, the sender runs a predetermined algorithm against the block of data and comes up with a mathematical answer, called a checksum. So the sender says, here’s a FRAME worth of data and at the end of it, here’s my math answer to running this FRAME’S worth of data through the FCS algorithm. It’s like taking a test question and writing down the answer after it. Then, the receiver takes that stream of data that includes the FRAME of 1s and 0s and the CHECKSUM provided by the sender, and he runs the exact same FCS math algorithm against the frame’s 1s and 0s, and if no corruption has occurred, he’ll get the same answer!

FCS is there to verify that what YOU sent and YOUR answer to the test question is the same as what I received and MY answer to the same test question. 99% of the time, the FCS of the sender and receiver matches and that means that the 1s and 0s that were SENT were EXACTLY the same as the 1s and 0s that were RECEIVED. Excellent!

So what about those rare occasions when FCS doesn’t match?

Image

When the FCS’s doesn’t match up, we drop that frame – throw it away and increment a counter of discards. It’s a dropped packet at the interface that has received it (RX), because guess what? It’s BOGUS data. Somewhere along the way, one or more 1s and 0s got all screwed up and now we can’t trust that data anymore! So we might as well throw it away.

Won’t throwing away frames and packets be bad for the network?

Wouldn’t a user notice that? The answer to that question is, it depends.

If we throw away 1 frame out of every thousand, or maybe one frame every couple of days, things won’t be very bad. Almost all applications use TCP – or Transmission Control Protocol which is a stateful and reliable protocol – and that’s also the topic of another discussion – but rest assured that 99% of the time, losing one packet here or there will not be perceptible to a user. Even if that traffic is UDP, real-time or otherwise unreliable, most applications are OK with a tiny amount of loss.

BUT – what if we increase FCS errors every hour? New errors every minute? What about EVERY SECOND!? The more frames that our switches and routers discard, the worse the user experience is. If we get up to 1% packet loss, meaning throwing away more than 1 out of 100 frames, it’s GUARANTEED that a user will notice that the network is incredibly slow as applications keep asking for retransmission of lost packets, and real-time applications like voice and video will get choppy with tiling, artifacting and even those robot voices you may have sometimes heard

What can I do about FCS errors?

So now what? On the plus side, FCS errors are almost always an indicator of a physical layer problem, and they’re always a problem you should take action on if your counters are incrementing.

Here’s what you can do
  • First and most likely, maybe you just have a bad cable – Replace the cable or connector (doesn’t matter whether it’s copper, fiber, or even wireless)
    • If you made the cable yourself, you could try re-terminating the connector because it could be just the connector itself is bad and the cable is still good
    • If it’s a fiber optic cable, a heavy bend or sag when cable management isn’t at its best can be the cause of FCS errors and just adding a tension loop or relaxing the bend on the cable with some additional support can prevent FCS loss.
  • Next, if you’re using Small Form Pluggable, or SFPs – you could try replacing the SFP module
  • Up next, maybe you’ve got a Bad port – you can change your configuration and move traffic from ether2 to ether3, for example.
    • Here’s a TIP: If moving traffic fixes your FCS problem, make sure to mark the old port as bad so that you don’t plug something else into it and start this rabbit hunt all over again.
  • Update the firmware. Your device could just have a bug in the interface processing software driver, so make sure that the firmware is updated.
  • Next up, it could be speed/duplex mismatch – you could try forcing the speed/duplex to match at both ends of the connection as appropriate. Use care here, if you pick a speed and duplex that the device doesn’t actually support, you could lock yourself out until you have local access to the UI while directly attached.
  • Also, it could be a faulty entire MikroTik, motherboard or switch, so if you get this far, you could try replacing the whole MikroTik itself (or the other device connected to the MikroTik at the other end of the cable)
  • One thing to note: in case you haven’t noticed, FCS errors will NOT tell you exactly what the problem is. whether the sender is sending you garbage, the receiver is making garbage out of a perfectly good message, or whether somewhere along the transmission path – like that copper or fiber cable (or even wireless) between networking devices – something is totally messing with our stream of 1s and 0s on the way between the sender and receiver, and it could even be the sender or receiver itself as well
  • Finally, it could be something completely external to networking that’s interfering with the transmission. For example, if it is a copper cable like a cat7 patch cord and it’s run next to a strong power source, like some bright lights or a line to an appliance like a MikroWave or whatnot, RF interference can be introduced from the power lines into the data lines.
Coincidentally, this is the reason that inside the sleeve of that cat7 cable there are 8 wires that are tightly wound – the induction of the signal along the intertwined wire – called TWISTED PAIR – helps to prevent RF interference and crosstalk! So cool!

I hope this helps!

If you found this info helpful, I hope you'll leave a comment to let me know and I'll keep adding more MikroTik knowledge. Up next - Router on a Stick howto. Please consider dropping me a comment if you have suggestions for future content ideas.

If you'd like a system to monitor and alert you when you have FCS errors instead of having to check it manually, one by one on your own, check out my software at https://admiralplatform.com

Have fun Routing the World with MikroTik!
 
User avatar
MikroTikMarc
just joined
Topic Author
Posts: 4
Joined: Tue Jan 07, 2025 6:25 pm
Location: USA
Contact:

🚀 RemoteWinBox Admiral centralized MikroTik Management

Tue Jan 07, 2025 8:18 pm

What is Admiral / RemoteWinBox?

Image

We are MikroTik certified network engineers who build tools for network engineers. MikroTik network operators all over the world use our software to streamline operations and get more done with a small team. An enthusiast might have just 1 MikroTik on their account for remote access and insights, MSPs love us for automations, alerts and monitoring, and ISPs love that our software scales and reduces their support costs with centralization and customer self service for tens of thousands of Tiks. Heck, even Starlink users love us for all the things. We have both cloud and on-prem options available and you can start managing MikroTiks using our cloud SaaS in under 5 minutes!

Image

Only have 1 minute to spare? Here's our 1 minute overview video:
Image

Here's some of the capabilities of Admiral:

RemoteWinBox - secure remote access to Winbox, Webfig, WebSSH and more. With remote access to WinBox and a webSSH built-in client that works through NAT, prevent a truck-roll and site visit. Works with ROMON and can even provide remote access to non-MikroTik gear, too!

Image

Backups manager - disaster recovery and change control. Daily backups and configuration change email alerts ensure that you can keep the network running, even when you take a lightning hit or make a configuration mistake.

Image

Real-time and Historical graphs and charts - Gain insights into the network to make better decisions and understand behavior.

Image

Centralized management - Instantly search and stay organized to keep your MikroTiks managed with tags, groups and regular expression searches.

Image

Alerts and notifications - Know when there's an outage and other problems on the network so you can be proactive with mitigation and customer communication. We support email, SMS, telegram and slack! Get notified when SFP light levels change, Tiks go offline, speed/duplex changes, FCS errors and more!

Image

Managed WiFi - Allow customers to access a safe and easy to use dashboard (that's NOT winbox) so they can see their usage, WiFi password and pause and rate-limit.

Image

Image

Image

Firmware Management - Keep your MikroTiks up to date on both /system packages and /system routerboard so that you're not vulnerable to CVEs!

Image

Network Topology - Scan your network with the push of a button and get a visual of how things are connected automatically.

Image

API and more integrations!

Image

Learn more at https://admiralplatform.com and feel free to ask me anything!
 
jaclaz
Forum Guru
Forum Guru
Posts: 2083
Joined: Tue Oct 03, 2023 4:21 pm

Re: 🚀 RemoteWinBox Admiral centralized MikroTik Management

Tue Jan 07, 2025 8:54 pm

Only out of curiosity:
Heck, even Starlink users love us for all the things.
Why the "heck, even"?
Are Starlink users a category apart? :?
 
User avatar
Larsa
Forum Guru
Forum Guru
Posts: 1630
Joined: Sat Aug 29, 2015 7:40 pm
Location: The North Pole, Santa's Workshop

Re: 🚀 RemoteWinBox Admiral centralized MikroTik Management

Tue Jan 07, 2025 9:57 pm

What about platform security? Not a single word mentioned (unless I missed it).
 
User avatar
MikroTikMarc
just joined
Topic Author
Posts: 4
Joined: Tue Jan 07, 2025 6:25 pm
Location: USA
Contact:

Re: 🚀 RemoteWinBox Admiral centralized MikroTik Management

Wed Jan 08, 2025 12:17 am

Only out of curiosity:
Heck, even Starlink users love us for all the things.
Why the "heck, even"?
Are Starlink users a category apart? :?
Nothing meant by it....We were surprised by the large number of use cases for our software for Starlink integrators.
 
User avatar
MikroTikMarc
just joined
Topic Author
Posts: 4
Joined: Tue Jan 07, 2025 6:25 pm
Location: USA
Contact:

Re: 🚀 RemoteWinBox Admiral centralized MikroTik Management

Wed Jan 08, 2025 12:29 am

What about platform security? Not a single word mentioned (unless I missed it).
I don't think you missed it; I'm pretty sure I forgot to mention!

We have:
  • Hardened Firewall - only you can access your deployment and you can manage allowed IPs in your account dashboard under ACCOUNT SECURITY
  • MFA - once per week you'll be prompted for your security code (by email, SMS, telegram, or authenticator app)
  • Randomized - usernames and passwords
  • Randomized - VPN credentials
  • Encrypted - AES256-CBC tunnel communication for all command and control / telemetry
  • On-premise/dedicated deployment option - we can enhance the firewall even further so that the dashboard is only accessible from your VPN/NOC
 
jaclaz
Forum Guru
Forum Guru
Posts: 2083
Joined: Tue Oct 03, 2023 4:21 pm

Re: 🚀 RemoteWinBox Admiral centralized MikroTik Management

Wed Jan 08, 2025 12:32 am

Nothing meant by it....We were surprised by the large number of use cases for our software for Starlink integrators.
Ah, ok, you meant more like professional users than final customers, since starlinks are more likely installed in remote areas It makes perfect sense that a remote management solution Is popular among them.