BETA Testing and Feature Suggestions for next routeros

cibernet · Mon Jan 30, 2006 3:04 pm

2.10

some ETA? perhaps a year?

Mon Jan 30, 2006 3:10 pm

sooner. really sooner. q3 2006 maybe

kleber · Mon Jan 30, 2006 7:12 pm

Sorry for bad English, but whats is q3 2006 ?

dsovereen · Mon Jan 30, 2006 7:28 pm

OSPF Route/Prefix Filtering (my apologies if this is in routing-test already)

Dave

rickard · Mon Jan 30, 2006 9:02 pm

I hope they will include support for Intel motherboard temp readings

that will be nice.

altaphon · Mon Jan 30, 2006 9:32 pm

Q3 2006 means the third quarter of 2006 -- hope that's right!

More diagnostic info is always useful. The SNR figures in wireless-test are great, should we expect to see that migrated to 2.10 stable? How about some details on how you measure noise? I can guess, but it would be helpful to know what is actually being measured so we can guess what noise sources it's going to be useful to identify (mainly, is it responsive to noise on channel only, or on adjacent channels too, which would cause some degradation to on-channel performance)?

Beccara · Tue Jan 31, 2006 12:21 am

IPV6 - Pure and Dual Stack Options

jp · Tue Jan 31, 2006 6:14 am

I'd like to see more commands for filtering a printout on the cli, *nix has grep, cisco has | include, mikrotik has no good cli for this. If you do a /ip route print, you can have pages of routes, and no way to sort or grep them easily.

aviper · Tue Jan 31, 2006 9:53 am

"Small nmap port" or simular features ?

djape · Tue Jan 31, 2006 2:02 pm

And live radio stations support

Little joking wont hurt anyone I hope

andreacoppini · Tue Jan 31, 2006 2:13 pm

Antenna diversity!!

driton · Tue Jan 31, 2006 3:33 pm

regular expression support for match content at ip filter

Tue Jan 31, 2006 3:42 pm

regular expression support for match content at ip filter

why? it is packet content, if you don't know what exactly you are looking for, better not use it. it would be dead slow. this is not for offensive website filtering.

cmit · Tue Jan 31, 2006 3:53 pm

Those possible performance problems would be the reason for me to NOT include this - at least in my network setups. RegEx-ing every packets' contents will be a REAL performance killer.
And in my opinion that's something rather not to be done on a router. Ok, RouterOS is evolving more and more into a more generic system and DOES offer content inspection capabilities - but I think that would take it too far.

Just my 2 (Euro) Cent...

Best regards,
Christian Meis

driton · Tue Jan 31, 2006 8:52 pm

Well just a fast thought. Other vendors support classifying traffic on application layer based on regular expr eg. classify a specific http url like /html/bin/business and /html/flashgame and give more priority to first than second. Or classify traffice based on MIME types or you can even match a virus/worm etc. with this feature and route it to a blackhole.

driton · Tue Jan 31, 2006 11:49 pm

I found something on the net about application level marking:

Router(config)# class-map match-all http_transact

Router(config-cmap)# match protocol http url "/transact/*"

or

Router(config)# class-map match-any audio_video

Router(config-cmap)# match protocol http mime "audio/*"

Router(config-cmap)# match protocol http mime "video/*"

or

Router(config)# class-map match-any web_images

Router(config-cmap)# match protocol http url "*.gif"

Router(config-cmap)# match protocol http url "*.jpg|*.jpeg"

or if you want to block a worm

Router(config)#class-map match-any http-hacks
Router(config-cmap)#match protocol http url "*default.ida*"
Router(config-cmap)#match protocol http url "*cmd.exe*"
Router(config-cmap)#match protocol http url "*root.exe*"

and then you apply policies to these classes. I hope MT will at least look into it.

rickard · Wed Feb 01, 2006 2:31 am

I need support for Mobile Telemetry standard EN 300 674 -2-1 on the 5795-5805 Ghz in sweden. with 5 Mhz chanels. then i can use 2 Watt

EiRP.

And full support for Hiperlan 2 standard ETS 300 836-1 5.4-5.7 Ghz 1 Watt EiRP, With DFS and TP working

.

//Rickard

changeip · Wed Feb 01, 2006 5:02 am

Let's think about making 2.9.x more stable before getting a wishlist for 2.10 : )

Revision numbering ...
2.10.01
2.10.02
2.10.03
2.10.04
...
2.10.10

Stable BGP
routing-test completion and integration into standard routing

Standard intel mobo fan, temp, power monitoring

[ASM] · Wed Feb 01, 2006 6:54 am

My wishlist (it's two years old):
1) SMP support
2) lm_sensors
3) ttl match in /ip firewall
4) l7-filter
5) Script actions OnConnect and OnDisconnect in /ppp profile
6) :include directive in scripts
7) :fetch (to download a new version of some :include file via http :) )
8) add tx-signal-strenght in /interface wireless registration-table print oid
9) Full Changelog :)

there are more things but I cann't remember then now

savage · Wed Feb 01, 2006 7:33 am

- Configuration syncnig between routers

Places where this would be usefull for example, VRRP.
- Configurable ARP Timeouts (Excuse me if I haven't seen it in older versions yet)

stephenpatrick · Wed Feb 01, 2006 1:27 pm

Just a few from me: all of these came from real customers or potential customers, so it's more of a "needed" not idle wishes:

- MPLS. One major potential customer asked, they are used to C*sco and we really don't want any of that in the network..
- Proper automatic TPC on wireless , the current "set to -3dB" is only a work-around not really compliance with EU specs
- SNR on atheros radio
- support for MIMO radio cards
- support for WiMax Mini-PCI
- CPU and system temp for regular x86 platforms
- Backup and restore to USB memory stick

Some of those are "easy" and some less so ...

Regards

expat · Wed Feb 01, 2006 7:51 pm

- Inbound loadbalancing such as LVS.
- Support for digital certificates for remote access VPN.
- Sync'ing filter rules on VRRP'd devices

EDIT:

- Non-MS winbox app: GTK2 would be nice.

andreacoppini · Wed Feb 01, 2006 8:58 pm

VRRP MAC address portability (for true failover)

savage · Wed Feb 01, 2006 10:00 pm

- Non-MS winbox app: GTK2 would be nice.

As a matter of interest. Does it run under WINE?

Thu Feb 02, 2006 8:50 am

- Non-MS winbox app: GTK2 would be nice.
As a matter of interest. Does it run under WINE?

what `it`, current winbox? yes

expat · Mon Feb 06, 2006 2:01 pm

- Non-MS winbox app: GTK2 would be nice.
As a matter of interest. Does it run under WINE?
what `it`, current winbox? yes

But it's not very stable and eats the CPU.

Mon Feb 06, 2006 2:03 pm

try wine forums maybe?

dfwair · Thu Feb 16, 2006 4:12 am

Maybe a java version of the winbox? It would be great for Apple!

Thu Feb 16, 2006 8:50 am

there was a java version a very long time ago - in RouterOS 2.4

But for MacOS - there is now the DarWine and the VirtualPC

changeip · Thu Feb 16, 2006 8:53 am

Will winbox communication protocol ever be opened up so we can write apps for specific functions? I would love to have a little window that only showed the traffic graphs - or one that showed a routing table only ... etc.

Sam

stephenpatrick · Thu Feb 16, 2006 11:49 am

Less elegant, but you can do this via telnet.

We have a PC app that does that (RadioManager) for installation engineers. It can be customised just to show particular features, including super-friendly signal strength bargraphs, and audio beeper using the PC speaker, for routers that don't have audio.

One of the problems is code maintenance, any changes in the MT CLI command structure means given items don't display. We're on top of that though.
We could get the graphs out for display using FTP, or alternatively generate customised graphs on the PC by logging.

Regards

CableFree Solutions

rickard · Mon Feb 20, 2006 8:34 pm

My wish list:

- LM Sensor (Working temp volts on standart Intel MB)
- Dual CPU suport that will be nice (then i can make use of Dual core)
- API for the Winbox

so we dont to have make C++ programs all the time. and use Telnet...
-More UPS support like APC, Thrust, Belkin,...

//Rickard

zhall · Tue Feb 21, 2006 10:54 pm

IPv6, have at least two projects that we can't use MT on due to no IPv6

driton · Wed Feb 22, 2006 12:49 am

More robust PPP and features, especially ppp callback.

boardman · Thu Feb 23, 2006 11:13 pm

Sorry for bad English, but whats is q3 2006 ?

That means third quarter 2006, third part of the year, july-september.

Bytes....

vegard · Fri Feb 24, 2006 9:02 pm

IPv6, have at least two projects that we can't use MT on due to no IPv6

I second this. IPv6 would be very useful.

dsovereen · Fri Feb 24, 2006 11:09 pm

Hello,

I sent an e-mail to support quite awhile ago asking for SIP traversal through NAT (we're starting to see newer NAT firewall routers capable of doing this, usually marketed to people doing VoIP) and was told that it would probably be added to 2.9 in a little while. Well, it's been awhile now.

If not in 2.9, can this be added to 2.10?

Thanks,

Dave

BelWave · Sat Feb 25, 2006 3:23 am

Let's think about making 2.9.x more stable before getting a wishlist for 2.10 : )

Revision numbering ...
2.10.01
2.10.02
2.10.03
2.10.04
...
2.10.10

Stable BGP
routing-test completion and integration into standard routing

Standard intel mobo fan, temp, power monitoring

Hit it on the head for me, but I don't want to wait until 2.10.10! How about 2.9.15 or 2.9.16 instead?

(1) improve BGP
(2) improve BGP
(3) improve BGP
(4) and lastly improve BGP

Best,

Brad

Hellbound · Sat Feb 25, 2006 9:26 am

2.10 some ETA? perhaps a year?

add wget or something so we can write script to automatically load or login on web-based application... certain ISP also need web authentication for our router or my APC UPS has only web interface so I need to reboot my modem or server when they're unreachable

secondly, you can add MAC Address binding to certain antenna jack? for instance I have two antennas on my wireless card , JACK-A - Omni antenna covering the area, JACK-B directional grid parabolic antenna aiming to base-station.
by having this option I can skip extra wireless where it is not necessary to have higher bandwidth...
even if you can even step beyond and have conditional binding such as JACK-A is 2.4 and JACK-B is 5.8 (like CM9 a/b/g cards) it will be a super speed as well...

thanks

aviper · Sat Feb 25, 2006 11:48 am

1) I'm not quete sure how good is OLSR (i've just start reading the papers) ... but it sound good enough ...

2) Antena divercity, soo we can use it for inside Wi-Fi Lans (MIMO should be part of 802.11n, soo we can wait for compatible "end-use" devices

)

cmarazzi · Sat Feb 25, 2006 5:32 pm

How about a reference manual that includes all the features that router Os has.

Hellbound · Sat Feb 25, 2006 5:35 pm

Sorry for bad English, but whats is q3 2006 ?

q3 = third quarter (july to september)

hafiri · Sat Feb 25, 2006 9:14 pm

An elegant solution to backup configuration is to copy it to a tftp server. You would just make a scheduler to copy config to the tftp server at a certain time interval without having to write scripts to ftp to ther router and copy config or send via email or something which is not so nice. Also it would be nice when you what to apply a template config to a router just to type copy tftp config.

ghmorris · Sat Feb 25, 2006 10:21 pm

Let me add another vote for OLSR. Sounds like exactly what we need.

George

Hellbound · Sat Feb 25, 2006 10:26 pm

Let me add another vote for OLSR. Sounds like exactly what we need.

George

whats OLSR? is it what I asked?

ghmorris · Sat Feb 25, 2006 10:34 pm

OLSR is Otimized Link State Routing protocol. OLSR allows you to design a multi-radio MESH implementation.

Basically it allows you to set costs on any exits from your network, then OLSR figures out the best way to get there. If you get a backhaul link failure, as long as there is another possible route out, OLSR will use it.

Star-OS has it in beta for V3, and it looks like just what we need for micro-cell 900MHz deployments where we will drop in a few ADSL "safety" Internet feeds in addition to our main fibre and let OLSR manage the failover.

http://www.olsr.org/

George

ghmorris · Sat Feb 25, 2006 10:36 pm

We'd also REALLY like to see MPLS/VPLS make it to the top of the "must do" list. We're getting chased for MPLS regularly now.

George

rickard · Tue Feb 28, 2006 9:42 am

OID (SNMP) support for station mode on the wierless status page .
that will be very nice

So i can read out Noice and SNR for my clients.

//Rickard

GJS · Wed Mar 01, 2006 3:33 am

Most of these have already been asked for but my 2c:

1. A method of backing up the router configuration so that it can be loaded onto a new router in the event of hardware failure.
2. More UPS support.
3. More OIDs, maybe even SNMP V2? Or 3?
4. A more accurate and comprehensive manual.
5. An accurate and comnprehensive changelog.
6. Support for xDSL PCI cards.

cmarazzi · Wed Mar 01, 2006 2:50 pm

A good new feature to have is regarding configuration and WINBOX.

It would be good to be able to work offline in winbox on a Router's configuration and then be able load it back in.

So you will log in to a router with Winbox download a configuration file. And be able to use winBox to configure it. without needing to be connected to the router live. Then be able to upload the configuration to the router.

-Carlo

Wed Mar 01, 2006 2:52 pm

what would be the use of this? in what order would your configs be applied? what if these configs conflict?

GJS · Wed Mar 01, 2006 4:08 pm

Hmm...yes, I can't see any use for a feature like this. Maybe if you have only dial-up access to your network? But that must be only very rare cases I would think.

cmit · Wed Mar 01, 2006 4:18 pm

And I can tell from experiences with different other products that do it that way: This creates some very nasty problem Normunds already mentioned above.
I would strongly suggest to stay away from that

What I could imagine is that you could be able to download a config and only VIEW it offline in WinBox - but even that is very questionable in my opinion...

Best regards,
Christian Meis

andreacoppini · Wed Mar 01, 2006 4:51 pm

What I could imagine is that you could be able to download a config and only VIEW it offline in WinBox - but even that is very questionable in my opinion...

How about allowing WinBox to open a SUPOUT file offline? We deal with a lot of Mikrotik boxes which are installed at client sites (and not accessible over the 'net), if we could tell them to send us a SUPOUT file that we can open in WinBox to take a look at their config (and recent log/traffic history) it would be great.

cmit · Wed Mar 01, 2006 4:53 pm

Yep - the wish to be able to open/interpret supout files is one of my longest-standing wishes.
But MikroTik has denied this so far...

Best regards,
Christian Meis

Beccara · Thu Mar 02, 2006 2:58 am

Ok so i've looked a little more at our network and seen these needs, in order of how much i want them

1. IPV6
2. MultiCast Support
3. MPLS

IMHO this is what will move mikrotik out of the playtime routers and into the realtime networks.

These are all thing supported in basic ISP routers and its logical that if mikrotik wants more market share they will have to put these in at some point

andreacoppini · Thu Mar 02, 2006 7:00 pm

A MikroPBX

- Asterisk is out there and working like a charm, but severly lacking a good, consistent, complete administration tool like WinBox....

pekr · Tue Mar 07, 2006 4:58 pm

Guys,

if you want cross platform, small and flexible environment for your Winbox, I am all for REBOL. That is the language created by the person I do regard being kind of genius - Carl Sassenrath - AmigaOS author.

Just expose Winbox protocol API - then you have small GUI or even smaller non-gui version for scripting your configs from outer tools

http://www.rebol.com
http://www.rebol.net

As for what to add to 2.10.x branch - after some talks during MUM with some guys, I think that MT should concentrate upon routing istelf

Don't also forget to be prepared for Wimax, simply to allow deployment to new areas ...

As for regexp, or scripting in general - well, router is not switch, it probably does not work with packets in-place anyway, so why not to support it for those who would like to have it? I am all for more powerfull scripting hooks, if it makes sense

Cheers,
-pekr-

eflanery · Tue Mar 07, 2006 8:46 pm

I would love to see the winbox API opened up, but I don't think it would be a great idea to tie it to a specific language. REBOL is a good language, but personally I would prefer Python, Ruby, or Lisp (no doubt others would prefer VB, Perl or even C).

If MT were to open the winbox protocol, at the socket level, then those of us with an interest could easily implement libraries for whatever language we felt like. It would be easier for them, and more flexable for us.

--Eric

changeip · Tue Mar 07, 2006 8:50 pm

Exactly. . .

I am guessing that the remoting that winbox is doing though is built on top of something that is probably not at the socket level, so we'll see.

Sam

eflanery · Tue Mar 07, 2006 9:19 pm

Yeah, you are probably right. If I were to guess, mingw seems likely, which would imply a C API.

Still, puting someting together to talk to a C interface is not all that different from talking to sockets, and sure beats scripting up a tty.

Abstraction is good :-)

--Eric

airnet · Sun Mar 19, 2006 12:47 am

1) CARP (or similar) Live Firewall state syncronisation and rules syncronisation. CARP was developed for OpenBSD but no doubt there's a linux port somewhere. EG - for VRRP devices or for devices that want to do multiple-edge-bgp-peer-redundancy-balancing. Currently this is not physically possible IF your edge routers have any firewall rules in them.

2) Web-proxy with Client IP spoofing capability - for 100% transparency EG outside world see's clients IP as the originating request instead of the Proxy's address. EG Balabits tproxy is the most efficient way of performing such a task with squid: http://www.balabit.com/products/oss/tproxy/README.txt

3) Human readable SUPOUT.rif + human readable and editable .backup files

4) SMP / HT CPU support

5) R/W SNMP agent

6) A MT 'mirror' website so that people on the other side of the planet can download the latest software without problems. Sometimes we see 2-3 day outages of the MT website. Yes this IS a real pain in the arse when you GOTTA deploy routers to customers and you GOTTA licence it within 24hrs and you CANT.

Mon Mar 20, 2006 8:46 am

human readable and editable .backup files

use export files, they contain all configuration, are editable, and can be imported back into newly installed routers

A MT 'mirror' website

we already have a US mirror, look in the download page

SMP / HT CPU support

2.10 should have that at least to some extent

R/W SNMP agent

snmp write is already planned

eflanery · Mon Mar 20, 2006 9:59 pm

A MT 'mirror' website
we already have a US mirror, look in the download page

Yea, but how about a _GOOD_ US mirror?

I.e. One that isn't 1/10th the speed of the Latvian server, for those of us in the US (or other places well connected to the US).

--Eric

Tue Mar 21, 2006 8:59 am

some people say the opposite about it's speed

we will check this

changeip · Tue Mar 21, 2006 9:40 am

We can provide a mirror possibly ... let me know.

Sam

bjohns · Tue Mar 21, 2006 3:20 pm

Along with MPLS, ISIS routing would be nice.

SIP Proxy, more advanced telephony - like allowing hotspot users to use a cordless sip phone and the associated radius support.

NAT-T (another vote)

I guess device drivers will get a revamp, but I would like to see support for VPN accelerators such as the Sokris vpn1401 and the IPSec co-processor on the Intel S series cards etc.

And for something out of left field - network printing. Allow hotspot/campus users to print to a local printer (for a fee of course). So I guess IPP support? This may be better handled by a seperate device. Probably in the same pool as VoD and IPTV.

csickles · Tue Mar 21, 2006 7:42 pm

Only one wish...

Here it comes..... Oh no......... I have to say it .......

PCI ADSL

Oh noo.... did I type that out loud ????

Craig.....

eflanery · Tue Mar 21, 2006 10:02 pm

some people say the opposite about it's speed :) we will check this

Well, since 2.9.18 was just released, I downloaded it from both.

From the "Latvian"* link (http://www.mikrotik.com), it took 7sec, at a rate of 1534KBps (big B).

From the USA link (usa2.mikrotik.com), it took 7min 30sec, at a rate of 23.8KBps (also big B).

That is a much greater disparity than even the factor of ten that I gave earlier, more like 64x the speed.

Both of them came in over the same transit link (AT&T's AS7018, which is very well connected), so the problem does not appear to be with us or our providers.

* I put Latvian in quotes, since it now actually seems to resolve (for us at least) to something in or around the Dallas Equinix facility. Actually, both of them appear to be in or around Dallas, but with some significant differances in connectivity.

--Eric

changeip · Tue Mar 21, 2006 10:38 pm

I would say there is a definate problem with latency out there.

  6    10 ms    11 ms    10 ms  so-0-1-0-0.gar1.SanDiego1.Level3.net [63.214.191.45]
  7     8 ms    12 ms    11 ms  ge-7-0-0.mp2.SanDiego1.Level3.net [4.68.113.69]
  8    38 ms    42 ms    37 ms  ae-0-0.bbr2.Dallas1.Level3.net [64.159.1.110]
  9    40 ms    40 ms    40 ms  ge-6-2.ipcolo1.Dallas1.Level3.net [4.68.122.140]
 10    40 ms    39 ms    41 ms  4.78.221.158
 11    46 ms    45 ms    42 ms  bgp-shr-fac-gw1-serxx-dal.nationwide.net [216.87.144.178]
 12    43 ms    45 ms    51 ms  cat5509-rsm.core.shreve.net [207.254.193.34]
 13   608 ms   612 ms    45 ms  mikrotik.cust.shreve.net [207.254.214.150]
 14   223 ms   220 ms   217 ms  207.254.214.169
 15   220 ms   233 ms   222 ms  207.254.214.169
 16   363 ms   359 ms   357 ms  207.254.214.169

Trace complete.

Same results here in San Diego ... faster to go to Latvia than to Dallas.

Sam

eflanery · Wed Mar 22, 2006 1:36 am

Not to mention 6% packet loss.

eflanery@wireless:~$ mtr -rc 100 usa2.mikrotik.com
HOST                                    LOSS  RCVD SENT    BEST     AVG   WORST
12.127.79.9                               0%   100  100    9.59   10.91   17.38
gbr1-p70.st6wa.ip.att.net                 0%   100  100   60.54   61.88   63.94
tbr2-cl10.sffca.ip.att.net                0%   100  100   59.57   60.98   64.59
tbr1-cl30.sffca.ip.att.net                0%   100  100   63.36   64.99   67.86
tbr1-cl3.la2ca.ip.att.net                 0%   100  100   63.74   65.73   70.51
tbr1-cl20.dlstx.ip.att.net                0%   100  100   60.71   61.96   64.96
gbr6-p20.dlstx.ip.att.net                 0%   100  100   59.20   78.99   90.67
gar3-p370.dlstx.ip.att.net                0%   100  100   62.75   64.14   74.55
12.119.145.138                            0%   100  100   59.74   67.06   81.72
bgp-shr-fac-gw1-serxx-dal.nationwide.net  0%   100  100   67.33   73.97  271.42
cat5509-rsm.core.shreve.net               0%   100  100   64.22   66.18   99.97
mikrotik.cust.shreve.net                  3%    97  100   63.71   65.52   71.89
207.254.214.169                           6%    94  100  237.27  240.24  246.78

eflanery@wireless:~$ mtr -rc 100 www.mikrotik.com
HOST                                    LOSS  RCVD SENT    BEST     AVG   WORST
12.127.79.9                               0%   100  100    9.30   11.09   16.65
gbr2-p70.st6wa.ip.att.net                 0%   100  100   10.38   13.20   31.66
12.122.84.37                              0%   100  100    9.59   20.06   25.08
192.205.33.98                             0%   100  100    9.52   11.32   16.61
dcr1-so-1-0-0.Denver.savvis.net           0%   100  100   36.38   38.88   66.26
dcr1-so-0-0-0.dallas.savvis.net           0%   100  100   50.65   54.70   59.67
dcr1-as0.dallas.savvis.net                0%   100  100   50.88   53.19   95.86
aer1-ge-5-3.dallasequinix.savvis.net      0%   100  100   51.38   56.35   58.00
ge5-2.fcr01.dal01.softlayer.com           0%   100  100   51.95   58.39   61.25
66.228.113.58-reverse.softlayer.com       0%   100  100   50.85   52.49   58.79
66.228.113.27-reverse.softlayer.com       0%   100  100   51.53   53.35   57.35

It does look like AT&T is giving me some grief in Seattle, between the gar we connect to, and the gbr heading to California, but nothing that would explain the difference.

--Eric

bjohns · Wed Mar 22, 2006 3:42 am

Radius AVPair support would be nice too.

RoddyZ · Fri Mar 24, 2006 10:26 pm

My wish list:

1) Wildcard soport for the "content" field in filters
2) "persistent" variables. Keep his values after reboot
3) Any kind of facility to write files using input, output, append and random access modes, like old basic language methods
4) A "mac address" list, like the current ip_address list

-Roddy

bakula · Sun Mar 26, 2006 12:22 pm

http://elceef.itsec.pl/natdet/

Alessio Garavano · Mon Mar 27, 2006 2:07 pm

May be good to don't permit to enable or disable a rule in firewall or an interface which disconnect an external winbox connection

Many times need to go back fast to the office or call by phone to enable or disable an erroneous rule or reactivate an interface from a client while it repaired some problem to him in the connection by Winbox.

Regards and continue looking for the perfect router. This is not very far

cmit · Mon Mar 27, 2006 2:30 pm

This can already be achieved by using safe-mode. The hardest thing with safe-mode is to remember to enable it BEFORE doing something on remote routers

It pops to my mind every so often in that second when I did something stupid - but then it's too late...

Best regards,
Christian Meis

hci · Tue Mar 28, 2006 1:33 am

1) Wildcard soport for the "content" field in filters

That would be nice. Also, how about QOS inside a PPPoE connection.

Matthew

jdmarti1 · Tue Mar 28, 2006 5:07 am

How about using something similar to wget on the router. This would make upgrades easier. No longer would I have to download the packages to a PC just so I can upload it to the others.

pedja · Tue Mar 28, 2006 11:44 am

A descent scripting language would be nice improvement.

Tue Mar 28, 2006 11:51 am

what do you mean by `descent`? is there a lot of stuff that current scripting can't do?

changeip · Tue Mar 28, 2006 8:12 pm

what do you mean by `descent`? is there a lot of stuff that current scripting can't do?

The only request for scripting enhancement I would have would be better error handling / reporting. Rather than it simply terminating with nothing give some debug output. Its really hard to troubleshoot a script when you don't even know which line number its terminating on.

eflanery · Tue Mar 28, 2006 9:49 pm

In addition to error handling, as changeip suggests, I would like to see support for printed output based upon regex matches ("vendor C"'s | incl, or even ye-olde grep, for example. Things like large routing tables are awkward to deal with using find, :find, :pick, etc...).

Also, more flow control options (subroutines with parameters, for instance) would be nice.

The need for significantly enhanced scripting will largely be oblivated by your new open source API (mentioned somewhere around here), but it would still be nice to have a bit more sophisticated logic available to the units when they are isolated.

I wouldn't complain if you happened to add a Lisp or Python interpreter, though.

Perhaps you could even go so far as to give us a busybox and libc (such as "vendor-J" or "vendor-I" does).

--Eric

pedja · Wed Mar 29, 2006 1:32 pm

what do you mean by `descent`? is there a lot of stuff that current scripting can't do?

In short, something like perl, php or similar language.

vhatz · Wed Mar 29, 2006 1:44 pm

Hello,

My wish list:

1) Support for more ISDN interfaces, especially active and higher density cards (multiple BRI or even PRI ports). We desperately need support for ISDN interfaces with analog modems, and higher densities in ports/card, such as Eicon Dive Server cards, or AVM cards, so that we could use MT Router as RAS Servers for dial in. The problem with the current supported interfaces is that we have to separate the analog from the digital incoming dialup calls on different interfaces and there are not enough PCI slots on a motherboard to host many ISDN ports on a signle router. This is very limiting.

2) MPLS is definitely a must.

Wed Mar 29, 2006 1:52 pm

ISDN? not going to happen, yesterdays stuff.

MPLS - very complicated thing to make, we are working on it, but it won't be ready anywhere soon.

vhatz · Wed Mar 29, 2006 3:04 pm

ISDN? not going to happen, yesterdays stuff.

MPLS - very complicated thing to make, we are working on it, but it won't be ready anywhere soon.

Hello,

Thanks for your reply. Why is ISDN yesterday's stuff? Isn't ISDN boards with analog modems the most efficient way to provide dial-up access to clients?

Best regards,
Vlasis.

RoddyZ · Thu Mar 30, 2006 1:36 am

Nice, if we can to have a "save config" command, like cisco routers.

All changes in the configuration, will be erased when the router reboot, but the changes can to be permanent if a "save config" command is executed before.

Is a well know problem, to lost the remote control (winbox or telnet) because a bad command is sended.

-RoddyZ

cmit · Thu Mar 30, 2006 10:02 am

You can "simulate" this using RouterOSs' safe-mode. This will make all changes done while in safe-mode only temporarly. If you loose connection to your RouterOS machine, it will revert those changes. Only on leaving safe-mode the changes are stored permanently.

The hardest thing is to think of starting safe-mode before you do something "dangerous". As the mechanism to do changes only temporarily are obviously already there (safe-mode), I think implementing it the other way round shouldn't be too hard. So everything is always done temporarily and HAS to be saved explicitly. Could be easier to work with for several people.

The best thing would be if I could set the "mode" the router is on myself: So either the current way (where you explicitly have to start safe-mode), or a "C***o-like" style, where you always explicitly have to save your config.

Best regards,
Christian Meis

Beccara · Thu Mar 30, 2006 1:30 pm

Can we get some comformation from mikrotik about what features taken from these pages will be put in place.

We are looking to do something that will REQUIRE multicast support and i really dont want to put a large amount of time and money into it if mikrotik wont put it in place.

Getting an idea if Multicast and MPLS will make it into 2.10 would be handy for us looking at our options down the line

Thu Mar 30, 2006 1:32 pm

as previously said, MPLS is very hard to make, it is a massive system which will take many months to make and test. don't expect it this summer. maybe at end of year.

Beccara · Fri Mar 31, 2006 2:59 am

Understandable but how about Multicast? THAT shouldnt be any more diffcult than the rest of the ip subsytems

dsovereen · Tue Apr 04, 2006 5:29 pm

Would like RADIUS Accounting from DHCP Server in 2.10

mrchiless · Wed Apr 05, 2006 5:51 am

Nice, if we can to have a "save config" command, like cisco routers.

All changes in the configuration, will be erased when the router reboot, but the changes can to be permanent if a "save config" command is executed before.

Is a well know problem, to lost the remote control (winbox or telnet) because a bad command is sended.

-RoddyZ

Another command that goes hand in hand with this one on ciscos, is a reload in xx. So that you can tell the router to reload back to the old config if you break something and cannot access the router

mrchiless · Wed Apr 05, 2006 6:17 am

I would like the abilty use more of the TOS bits in the QOS setup.
Using IP Precedence and TOS so that other device can pass information thru to the routeros for us to make QOS decisions on

hkaiser · Tue Apr 11, 2006 8:13 pm

Hi all,

Out there are a lot of wishes to support a specific kind of hardware, PCI ADSL, WiMax MiniPCI cards, special radio link cards, etc.

I would be a cool feature to create a API, for example in C, to allow customers and developers generate there own drivers for hardware. So a big range of hardware could be supported. And drivers which seem to be well developed and stabil could become part of Mikrotik RouterOS.

with best regards
hkaiser

jp · Wed Apr 12, 2006 4:08 am

With regard to ISDN, it's a declining business, and MT is smart to stay out of it. There is already a big surplus of ISDN equipment.

You can get RAS on ebay for pennies on the dollar. Lucent PM3s that cost $10,000 new are $30-500. Pattons which new were $12,000 are $1,000-3,000. Cyclades RAS which were $8,000-12,000 routinely don't sell for any amount of Ebay. Not a good market to be in for MT. Use pm2i's for BRI ISDN, or get a used Adtran atlas ISDN switch to switch BRIs into PRIs or CT1s.

jarosoup · Wed Apr 12, 2006 8:55 am

Hotspot feature request

Not sure if this is an unreasonable request...It would be interesting to have a counter that keeps track of the total number of successful logins on the hotspot. For example, a global counter that starts at zero and counts until you manually reset it, and another counter that resets after a predefined (hourly, daily, weekly, monthly, etc) or a defined (reset counter every 00:00:00) period of time and be readable via SNMP. I know you could do this by parsing a logfile with a script, but would be handy to get this statistic via SNMP. Along with that, 3 counters that keep track of the logouts. Maybe another one for failed logins?

Logins:

Total logins: 100
Current Logins: 25

Logouts:

Keepalive Timeout: 5
Idle Timeout: 15
Session Timeout: 0
Lost Lease: 2
User Logout: 3
Other: ? (?)

Two interesting and useful statistics would be helpful here. Wireless clients (laptop users) with weak signal or poor radios often have to login because they lose their lease rather easily. Also, for Hotspots where there is only one user account shared among many users (logging in via a button instead of a user/password) it would be interesting to see how many logins happen every day and overall for busy public hotspots.

Doable? Not Easy? Not worth it?

Also, another plug for adding a counter, readable from SNMP, for current active hotspot users as well as one for active DHCP leases

vhatz · Fri Apr 14, 2006 3:52 pm

With regard to ISDN, it's a declining business, and MT is smart to stay out of it. There is already a big surplus of ISDN equipment.

You can get RAS on ebay for pennies on the dollar. Lucent PM3s that cost $10,000 new are $30-500. Pattons which new were $12,000 are $1,000-3,000. Cyclades RAS which were $8,000-12,000 routinely don't sell for any amount of Ebay. Not a good market to be in for MT. Use pm2i's for BRI ISDN, or get a used Adtran atlas ISDN switch to switch BRIs into PRIs or CT1s.

Hello JP,

Thanks for your input. First of all I believe that ISDN is not declining. ISDN is replacing most POTS lines for telephone users, and it will not be replaced by another technology for quite some time for this particular application (voice & fax for the end user).

I agree that dialup in general either analog or ISDN is declining in favour of DSL, so, I guess that this was what you meant in your posting in the first place.

However, not everyone has access to broadband, and dialup is still used in the world. Whatsmore, most ISPs that I know give a dialup backup connection to their DSL users in case they have a problem with their DSL connection. I don't understand why there is so much support for analog dialup in MT Router, but so little of it for ISDN.

My point is that no ISP can do without providing dialup service to its users, unless they have a very specific business model.

Also, we are not talking about CONSTRUCTING new ISDN hardware. There is no need for this. As you said, there is a surplus of ISDN equipment being sold, and you are right.

What I'm talking about is ADDING drivers for EXISTING hardware not creating new hardwar. Why not capitalize on this surplus equipment and allow MT users to use all this well-priced equipment in their routers? There are many unused Eicon multiBRI and PRI cards as well as AVM cards out there. There are even low cost ISDN 4port BRI and 8 port BRI from Junghanns.net, or even 1, 2 and 4 span PRI cards from Digium which are used primarily for the Asterisk PBX.

All this equipment could be used for high density RAS on a MT box if their drivers were added in MT. They can even be used as PSTN interfaces for the VoIP capabilites of MT. Given the fact that in most countries ISDN is used more and more as a last mile PSTN connection, it's easy to understand that ISDN interfaces for various uses will be important. Perhaps not so important for the end user for connecting to the Internet, but important for a service provider.

You mentioned some costs of RAS servers like Lucent or Pattons with very low costs. I've been looking for quite some time on ebay and used network equipment web sites, and I couldn't find such prices. Such prices for a fully featured RAS system with RADIUS AAA etc seem too good to be true. I'd be grateful if you could provide me with the URLs where you found those prices.

Best regards,
Vlasis Hatzistavrou.

Mapik · Fri Apr 14, 2006 7:33 pm

USB boot will be really good feature

We now have problems with Intel D945GNT boards that can't boot MikroTik from PATA drives bigger then 8GB (and SATA is not supported by MT, Windows, BSD and others boot fine) and CompactFlash via CF-to-IDE converter is not supported by Intel now

dsovereen · Fri Apr 14, 2006 8:12 pm

I'd like to see watchdog compatability with the watchdogs built into some of the Mini-ITX boards out there, as well as CPU, temp, fan, voltage, etc status/monitoring support on these same boards. The Commell 671 comes to mind.

Dave

Wyoming · Fri Apr 14, 2006 9:42 pm

I would like to see better statistics for the interfaces. Such as Errors on the ethernet interfaces. Maybe Broadcast counters, Collision counters, etc.

butche · Thu Apr 20, 2006 7:23 am

Ok, I've seen a LOT of good things mentioned. I will post my short list of wants/needs....

* FTP or RCP client. wget would work for this, too. Some way for the router to initiate a connection to a central server to grab a configuration (such as firewall rules, for example). This would also be useful to SEND exports from the router to a central location (automated backup for example).

* Easier identification of VoIP - This is almost impossible today

* Better identification and control of bit-torrent

* A good API - or better yet, a linux/unix based SCRIPTABLE command line utility that will allow for easier updates initiated on the server side. Would both be asking too much?

* More OIDs exposed (many have mentioned this) to the SNMP interface

* interface stats in the command-line or winbox - errors for example are available via SNMP now, but not in winbox or cli.

* COMPLETE AND ACCURATE CHANGELOG (sorry, but this is probably the biggest issue I have with MT)

* better BGP (this is already improving) and route filtering for OSPF.

* MLPPP - As I understand it, this is already slated for 2.10?

* Policy routing is working, but there are some things that are a pain in the rear to get working right. Perhaps the router should know (for example) that DC routes should always use the "main" table. This is not the case in 2.9.20.

I am sure I will think of more, but this is the quick (off the top of my head) list.

Thu Apr 20, 2006 9:04 am

* Better identification and control of bit-torrent

what's wrong with it now? it can already detect and drop any p2p application, including encrypted torrent traffic.

* COMPLETE AND ACCURATE CHANGELOG (sorry, but this is probably the biggest issue I have with MT)

already discussed

* A good API - or better yet, a linux/unix based SCRIPTABLE command line utility that will allow for easier updates initiated on the server side. Would both be asking too much?

API already in the works, this has been posted before

butche · Thu Apr 20, 2006 9:43 am

* Better identification and control of bit-torrent
what's wrong with it now? it can already detect and drop any p2p application, including encrypted torrent traffic.

Unless I am missing something, bit-torrent can be dropped, but not easily controlled. I would like to allow the traffic, but control the impact of this devilish p2p app.

* A good API - or better yet, a linux/unix based SCRIPTABLE command line utility that will allow for easier updates initiated on the server side. Would both be asking too much?
API already in the works, this has been posted before

Yes...I am just voicing my vote here, too. This will be very nice to have.

Thu Apr 20, 2006 9:54 am

Unless I am missing something, bit-torrent can be dropped, but not easily controlled. I would like to allow the traffic, but control the impact of this devilish p2p app.

true, we will think of something

pedja · Thu Apr 20, 2006 11:54 am

In many places MT counts traffic even if it is dropped. That may be very confusing. It would be good if there is option to distinguish traffic which goes al the way, and one which is actually blocked.

Hammy · Fri Apr 21, 2006 7:04 am

Let's think about making 2.9.x more stable before getting a wishlist for 2.10 : )

Revision numbering ...
2.10.01
2.10.02
2.10.03
2.10.04
...
2.10.10

Stable BGP
routing-test completion and integration into standard routing

Standard intel mobo fan, temp, power monitoring
Hit it on the head for me, but I don't want to wait until 2.10.10! How about 2.9.15 or 2.9.16 instead?

(1) improve BGP
(2) improve BGP
(3) improve BGP
(4) and lastly improve BGP

Best,

Brad

One more time, Brad. ;-)

oh yeah... IMPROVE BGP!

jp · Fri Apr 21, 2006 5:09 pm

One other wishlist suggestions....

Some sort of CPU power management features like newer linux systems have, like powernow.

Fast computers are now dirt cheap, but use LOTS of power compared to old or embedded computers. Some sort of power management would cut our electric bills. (On the mainland, power is about 0.16$ per kwh, and on islands it can be between 0.28-0.50$ per kwh). Power consumption reduction would also reduce the need for cooling. I use rb532 wherever I can at sites to draw less power than a full computer, but sometimes I need the speed or additional interfaces of a full computer.

pedja · Tue Apr 25, 2006 4:19 pm

There is an option in script to set LED statuses. It would be good also to be able to read and write some pin statuses on serial and parallel ports.

eflanery · Tue Apr 25, 2006 7:46 pm

Parallel would be new, but for serial there is already:

[admin@EricsHome] > :list tool sigwatch
List of console commands under "/" matching "tool" and "sigwatch":

tool sigwatch
tool sigwatch add name= port= pin= on-condition= log= script= copy-from= disabled= 
tool sigwatch disable <numbers> 
tool sigwatch edit <number> <value-name> 
tool sigwatch enable <numbers> 
tool sigwatch export file= from= 
tool sigwatch print without-paging count-only append brief detail value-list terse interval= file= port= on-condition= state
= from= 
tool sigwatch remove <numbers> 
tool sigwatch set <numbers> name= port= pin= on-condition= log= script= disabled=

--Eric

pedja · Wed Apr 26, 2006 2:57 pm

Thanks I did not know about this. But just reads statuses, tehre is no option to set them.

NetTraptor · Wed Apr 26, 2006 4:44 pm

Let me add another vote for OLSR. Sounds like exactly what we need.

George

1 more from me....

Mapik · Thu Apr 27, 2006 1:28 am

Let me add another vote for OLSR. Sounds like exactly what we need.

George
1 more from me....

Yes. It will be great if you add it.

Mapik · Thu Apr 27, 2006 12:09 pm

Any chance for USB boot in the future ???

Alessio Garavano · Sat Apr 29, 2006 12:42 am

May be good to Mikrotik show CPU usage by process to know what is overloading the CPU

And also it would be good for being able to make run hotspot from an interface bridged but independent to the bridge, for example to have a bridge between ether1 and ether2 but that hotspot single runs on ether2 since it makes version 2.8...

I can´t upgrade my 2.8 to 2.9 because this problem...
I have bridged Ether1 with a Public IP and Ether2 with a Private IP and need to lease to my clients privates and publics IPs, but when i put the hotspot running in other than the bridge interface the server hotspot don´t work and is showed in red, and if i select the bridge interface, in Hosts list appears my clients and all the publics IPs incoming to the router, like MSN, yahoo, etc etc... exist a solution about this?

Regards!
Alessio

jp · Mon May 01, 2006 4:54 pm

I've decided it would be a good idea to be able to have multiple versions of router-os to boot. Right now, it will boot the current version, or install the version found on / in flash and boot that. I think it would handy so I could revert or try a version without having to transfer another router-os over the network. Especially handy when there are network problems. Could I make a subdirectory and put the other versions in there? Routeros could automatically copy the prior router-OS into a backup directory space permitting, allowing an easy firmware rollback.

stephenpatrick · Mon May 01, 2006 8:49 pm

JP,

some nice ideas, and "roll-back" form a "problematic upgrade" including any config changes would be a really good idea (been there).
Multi-boot, probably a "test network" luxury but nice item IMHO.

Regards

CableFree Solutions

GotNet · Mon May 01, 2006 9:53 pm

These come up in the RB forums but has not been mentioned here:

Better control over the RB112 hardware.

LED on / LED off (not just blink)

Speaker frequency outside of alignment mode.

Ability to read the optional user switch

Goal? Customer Friendly Premise Equipment

Mike[/i]

meritel1025 · Tue May 02, 2006 6:44 am

It would be great if MT had drivers for current production hi-cap cards and USB LCDs. We wanted our MT to do our DS3 and OCx support however, the only cards that are supported have been out of circulation for some time. The DS3 cards are too expensive to just hope it will work (knowing it won't).

The serial LCD is nice, but the graphical, USB, units would allow a much more professional looking router to be developed.

This actually seems to be quite common. Much of the hardware MT requires is no longer available or is very hard to find. Picking up COTS hardware usually ends up biting us as it is too new for MT drivers.

I'm not getting bleeding edge on most of this, but when putting in a new system, I do like to have current releases of hardware so I know it will last a few years.

Thanks

meritel1025 · Tue May 02, 2006 6:44 am

It would be great if MT had drivers for current production hi-cap cards and USB LCDs. We wanted our MT to do our DS3 and OCx support however, the only cards that are supported have been out of circulation for some time. The DS3 cards are too expensive to just hope it will work (knowing it won't).

The serial LCD is nice, but the graphical, USB, units would allow a much more professional looking router to be developed.

This actually seems to be quite common. Much of the hardware MT requires is no longer available or is very hard to find. Picking up COTS hardware usually ends up biting us as it is too new for MT drivers.

I'm not getting bleeding edge on most of this, but when putting in a new system, I do like to have current releases of hardware so I know it will last a few years.

Thanks

pedja · Wed May 03, 2006 10:35 am

Are you talking about directional antenna or something else?! Umm. There is a good page for directional antenna perhaps!
Also,you can find some other content on it,such as hotel gardasee or brio toys or power boats.
You can search on the homepage try some other keywords,no ads even.these page updated every day.Because of the huge database,it perhaps not very fast,if you don't like it,take it easy.

I cannot believe my eyes. Spam on this forum

Alessio Garavano · Wed May 03, 2006 12:16 pm

I suppose that it will be to be neglected because of the MUM in USA

bsnik · Sat May 06, 2006 2:35 pm

it will be nice if PPPoE can have more QoS control properties

Hammy · Mon May 08, 2006 5:24 am

http://wifinetnews.com/archives/005156.html

Faster wireless handoff. This system supposedly is available with Atheros open source drivers.

pd · Sat May 13, 2006 1:16 am

one more vote for OLSR

hotspotsolutions · Thu May 18, 2006 9:12 am

Hi Guys,

I would like to see the functionality of the Advertsing section for the hotspot increased with extra functionality.

Some ideas I have are:

- The ability to frameset ads instead of popup, to negate popup blockers. The click this link to proceed is fine but it is very obtrusive and when people are paying to use the service I dont think its very professional. So a frameset displays the ad page at the top/bottom and the page they are accessing is in the frame. If the website has a frameset remover which some do then thats fine in my opinion?

- Ability just to bypass if they have a popup blocker. So it tries to popup ad, if it cant, it just continues.

- More control over the popup page. The ability to customize every aspect of this page as per the hotspot pages, so there are variables but how they are worked with is up to us. This would be good so the click here page is "skinned" to look like our sites, or the ad is displayed inline for a second, then continues on. There could be heaps of ways to utilize this page in future.

- Extend popup functionality so when ad is due, the next page is manipulated so that all href tags have a javascript "window.open" command appended to them, this then will override all popup blockers, and again be seemless.

- Allow certain ads to be for specific websites, based on either keywords or partial matches perhaps. So if someone accesses the "Microsoft" website for example, we can display an ad for microsoft products perhaps.

These are all ways we can make the advertise functionality alot more useful to hotspot providers, as at this stage I think its a little limiting in its functionality.

Thu May 18, 2006 9:33 am

- The ability to frameset ads instead of popup

this involves manipulation of the website code. first of all it would take a lot of resources and we would have to make some parser. second - it might break a LOT of pages. you can't just force some of your code into some webpages. this is more a `kiosk browser` feature, and must be made in the browser, not the hotspot. i doubt that it's even possible

- Ability just to bypass if they have a popup blocker. So it tries to popup ad, if it cant, it just continues.

sounds fine

- Extend popup functionality so when ad is due, the next page is manipulated so that all href tags have a javascript "window.open" command appended to them, this then will override all popup blockers, and again be seemless.

this too involves manipulation of the pages and is not an easy task. imagine what resources would it take to parse every single page and modify it

hotspotsolutions · Thu May 18, 2006 9:40 am

Manipulation of the html was always going to be a long shot, I never thought it was going to be a case of yeah sure, will get right on that

But I think opening up the advert page for modification would really help.

We really want to use the advet functionality but we cant justify forcing people with a popup blocker to click a link when they have paid good money to surf the web with our service.

We would like to advertise, I guess we have to find a balance between what MT can do and what is good for the end user.

I dont want to go down the route of breaking web pages as I think that defeats the purpose also.

Thu May 18, 2006 9:45 am

but of course, we will improve the AD feature - we just released it, so there is still some improving to do anyway.

pedja · Thu May 18, 2006 10:28 am

- The ability to frameset ads instead of popup
this involves manipulation of the website code. first of all it would take a lot of resources and we would have to make some parser. second - it might break a LOT of pages. you can't just force some of your code into some webpages. this is more a `kiosk browser` feature, and must be made in the browser, not the hotspot. i doubt that it's even possible

Using framesets actually does not change external site code. It loads complete external page into a frame without changing it a bit.

<FRAMESET rows="115,*" cols="*"> 
<FRAME name="toolbar" src="http://local.site.url/toolbar.php" scrolling="NO" NORESIZE>
<FRAME name="external" src="http://external.site.url" scrolling=AUTO NORESIZE>
</FRAMESET>

I find this suggestion quite good. Actualy, i would like to see it implemented in proxy so I could, for instance, use framesets to create small toolbar alike addon for each loaded page. i do not run commercial net so i do not need it for adverts, but it could be useful to provide some always needed links or inforamtion related to local network.

eflanery · Thu May 18, 2006 10:33 am

one more vote for OLSR

Incase no one had yet noticed, the "other guys" just got OLSR.

Patiently waiting.

--Eric

Vigor · Fri May 26, 2006 10:18 am

1 more vote for OLSR

alex23 · Fri May 26, 2006 7:29 pm

one more vote for OLSR if it works out fine with no problems

Hammy · Sat May 27, 2006 12:37 am

I would like to recommend a client-friendly web interface. That way if a client wants to setup port forwards, wireless keys, etc. they can. Something just like a consumer router.

How hard is this? I'm guessing not hard.

You already have a web interface.
You already have multiple user logins.
You already have varying levels of high level security (web access, telnet, ssh, read, write, etc.).
Just go one step further to say they can write to the NAT section, wireless, etc. but cannot read or write anything that I put there.

This would remove the need for a client to have their own router if they want to have control over their settings (as many users do).

changeip · Sat May 27, 2006 12:54 am

Once the API is out we plan on making a client area... dummy proof questions and settings.

Sam

Hammy · Sat May 27, 2006 2:34 am

Commercial license?

ericsooter · Sat May 27, 2006 7:10 pm

I mentioned this at the MUM conference, and I thought I would post it here. It would be very nice if you could use Virtual AP mode to run NStream and non-NStream together on a single card. I know that John had mentioned that you guys thought about implementing that in the past. Here are the reasons:

1. Tower cost - Some of the towers I'm on are $200-400/mo(or higher) per antenna (depending on height). To simply be able to use virtual AP for NStream support would be a major cost savings; as opposed to hanging another antenna and radio.

2. Nstream migration - Would be a very easy way to migrate non-nstream customers to an nstreame-based tower. From Mikrotik's standpoint, I would see this as something that could sell more licenses/hardware, because of all the non-routeros hardware that would be swapped out or migrated to Mikrotik. I currently don't use Mikrotik CPE's, but if you all had this feature, I would begin to use it.

3. Class of service - For those that use VOIP or other more latency/jitter sensitive applications, we could easily move them to another virtual AP instead of hanging a new AP base up.

I do understand if this is impossible to accomplish due to restrictions of the protocol. But if it is doable, I think it could be a win/win.

Eric

changeip · Wed May 31, 2006 7:43 pm

It would be nice if 2.10 supported some kind of sata so we could start using these type adapters:

http://www.acscontrol.com/Pages/Product ... dapter.htm

Sam

Hammy · Wed May 31, 2006 8:46 pm

Once the API is out we plan on making a client area... dummy proof questions and settings.

Sam

Is this going to be available to the public? Cost?

rockr · Thu Jun 01, 2006 3:33 pm

I would settle for solid working ospf i rb532 hardware. As of 2.9.24 and routing-test, it is still broken.

Thu Jun 01, 2006 4:53 pm

we fixed some ospf issues in 2.9.25, so wait for that

dsovereen · Thu Jun 01, 2006 9:13 pm

Any idea on when 2.9.25 will be out?

Thanks,

Dave

savage · Thu Jun 01, 2006 11:38 pm

Been said on other posts before, but...

1) Workable VRRP, there's just to many issues currently, and it's flakey at best
2) Certain config replications... Noteably Firewall rules
3) The whole MT configuration taking on a 'redundancy' point of view, master/slave roles, config changes on the master replicated to the slave, master dies, slave works without problems...

A nice example here will be 2 redundant Cisco Pix firewalls for example... Hell, even if a dedicated ethernet port might be required (like the pix does), that's still small change to be able to build good redundancy into a network with MT...

At this stage there's no way to have a reliable redundant (either from a network or hardware point of view) network with MT. OSPF/BGP is not the most stable, VRRP aren't stable at all, etc etc etc. I think redundancy is critical if you want to be considered a serious competitor in the routing field...

Said before in this topic, I'll say it again... I'd VERY much like to see a more stable 2.9 before a 2.10. IMHO, MT moved backwards from 2.8 to 2.9 as far as stability goes...

Fri Jun 02, 2006 10:38 am

david - today

nuclearcat · Sat Jun 03, 2006 10:50 pm

From 2 sources it is leaked, that Atheros have FEC(forward error correction) capabilities.
It can be useful for long-distance, and VERY useful for NLOS.
Already canadian linux based system and BlueBox have capabilities to turn this bits on. Mikrotik must have too.

grzesjan · Sun Jun 04, 2006 4:52 pm

david - today

Two days passed after that "today" and no new software.

Gregor

Alex · Sun Jun 04, 2006 11:35 pm

it was in Mikrotik lab at friday but not in download page...I think this delay is because new version is under stress-test now...

grzesjan · Mon Jun 05, 2006 12:30 am

it was in Mikrotik lab at friday but not in download page...I think this delay is because new version is under stress-test now...

Wow, <irony>the first version stress-tested!</irony>

Yes, I know, I'm cruel

Gregor

Mon Jun 05, 2006 9:20 am

actually all versions undergo at least a week of stress test

Beccara · Mon Jun 05, 2006 11:07 am

david - today

Soooo 72 hours is one looooong day

Mon Jun 05, 2006 11:39 am

stress test means that we try to find unapparent issues. if the release is not on the web. apparently we still have to improve it a little. today or tomorrow then

rpingar · Mon Jun 05, 2006 12:01 pm

any new nwes about intel driver for 1000pro dual???

the actual one has problems confirmed by MT guys.

Regards

dritoni · Wed Jun 07, 2006 1:40 am

- Support for loopback interface would be perfect
- Option to add source interface for radius,telnet etc. sessions
- Supprt for null interface (bit bucket)

Eugene · Wed Jun 07, 2006 11:58 am

loopback is available now. Just create an empty bridge.

dritoni · Wed Jun 07, 2006 2:25 pm

yes it is true. I just thought it is a hack not a standard way to create it. I think it isn`t in the documentation either.

nikhil · Wed Jun 07, 2006 3:27 pm

just get vrrp & bgp (make routing-test a full package) working perfectly in 2.9.x then move to 2.10

BelWave · Wed Jun 07, 2006 5:00 pm

just get vrrp & bgp (make routing-test a full package) working perfectly in 2.9.x then move to 2.10

Agreed. I really would like to see a version of 2.9 with a completely tested and stable BGP module supported by WinBox.

What is the red type notice on the download page mean regarding not to configure BGP via the WinBox? What specifically is or are the problems with WinBox and BGP configuration? How long has this notice been posted on the MT site?

Best,

Brad

Thu Jun 08, 2006 11:59 am

this is for 2.9.25, there are problems with winbox+bgp test, so use command line.

about VRRP - could any of you please write to support about this problem? we don't have any usable reports about any vrrp problems.

nikhil · Thu Jun 08, 2006 3:13 pm

normis there are posts about vrrp and virtual mac address all over. I have tried it quickly but it does not work similar problem to me as well.

Thu Jun 08, 2006 3:16 pm

yeah, cool - posts. what about actual problems? we don't have any reports to support

nikhil · Thu Jun 08, 2006 3:30 pm

yeah, cool - posts. what about actual problems? we don't have any reports to support

http://forum.mikrotik.com//viewtopic.php?p=39777

No offence Normis
I understand you need supout but when in live environments we have customers to support as well. Please see the thread maybe just maybe it may have a clue , there are a lot of people on this board who have wide experience with MT and can provide clues.

Thu Jun 08, 2006 3:32 pm

i understand, but we can't do anything until we can reproduce the problem or see a supout.rif file

Thu Jun 08, 2006 5:46 pm

yeah, cool - posts. what about actual problems? we don't have any reports to support
http://forum.mikrotik.com//viewtopic.php?p=39777

No offence Normis
I understand you need supout but when in live environments we have customers to support as well. Please see the thread maybe just maybe it may have a clue , there are a lot of people on this board who have wide experience with MT and can provide clues.

VRRP currently does not work on VLAN interfaces.

Mactrekr · Sat Jun 10, 2006 7:13 pm

Normis,

I would really like to see more T1/E1 synchronous interface PCI/PCIx cards supported. In particular the new line of Sangoma cards, A10x series. Most of the T1 Synch cards currently supported are out of production. I've spoken to Sangoma and they are willing to work with MT to get these cards supported. I've asked about this issue in other forums and never gotten a response. PLEASE address this and let us know what MT intends to do about it.

Mac

Hammy · Sat Jun 10, 2006 7:19 pm

True. I don't really use TDM interfaces, but it would be nice to have one as a backup. Anything MT supports is so old and out of production.

dainen · Fri Jun 16, 2006 8:44 am

* MLPPP - As I understand it, this is already slated for 2.10?

Can this be confirmed? It would be great to be able to use Mikrotik for MLPPP rather then Debian.

nikhil · Thu Jun 22, 2006 10:06 am

WISH :better support for intel nics on pci-x pro 1000mt

http://forum.mikrotik.com//viewtopic.php?p=41321#41321
[Ticket#2006060516000369]

kalviz · Tue Jun 27, 2006 3:54 pm

We highly demand IGMP/multicasting. Without supporting these features, RouterOS IS NOT IPTV-ready.

Wed Jun 28, 2006 8:52 am

We highly demand IGMP/multicasting. Without supporting these features, RouterOS IS NOT IPTV-ready.

could you please specify exactly what you want - which routing protocol should we add?

eflanery · Wed Jun 28, 2006 8:03 pm

Regarding multicast protocols, IGMP at layer 2 (when MTs are used as bridges) would be a good start.

After that, PIM-DM is probably the most useful for IPTV (fast channel switching, and such). If someone wanted to _try_ delivering IPTV over wireless, they would likely appreciate PIM-SM. For non-IPTV multicast applications, and ease of setup / integration, MOSPF would be great.

--Eric

interexus · Wed Jun 28, 2006 9:08 pm

Will the 2.10 release support the SR3 and SR4 cards that Ubiquiti has? If not what is the time frame for this support if going to support.

Fri Jun 30, 2006 5:27 pm

Will the 2.10 release support the SR3 and SR4 cards that Ubiquiti has? If not what is the time frame for this support if going to support.

Most likely these cards will work, but I am not sure, since we don't have these cards to test out.

pedja · Sun Jul 02, 2006 2:39 am

Is it possible to add option to MT to search for spoecific MAC in all rules and show wherever that MAC is used. Thic would help when we notice strange traffic from strange MAC addresses.

Eugene · Tue Jul 04, 2006 9:50 am

it is already possible:

ssh -l admin 10.0.0.1 "/export" | grep "00:0F:33:33:33:33"

Hammy · Fri Jul 07, 2006 12:11 am

FCC specified DFS for 5 GHz bands.

Operation in the newly available U-NII spectrum is conditioned upon compliance with
certain technical requirements. Specifically, the new rules require that U-NII devices operating in the
5.25-5.35 GHz and 5.47-5.725 GHz bands employ DFS in order to avoid causing interference to Federal
Government radar systems. DFS is a feature that monitors the spectrum and selects for operation a
frequency that is not already in use. Prior to the start of any transmission, a U-NII device equipped with
DFS capability must continually monitor the radio environment for a radar’s presence. If the U-NII
device determines that a radar is present, it must either select another channel or enter a “sleep mode” if
no channels are available.

TPC as defined by the FCC for all bands, not just the ones they're talking about.

Additionally, the new rules require U-NII devices to employ a TPC mechanism when
operating in the 5.25-5.35 GHz and 5.47-5.725 GHz bands to further protect operations in the Earth
Exploration-Satellite Service (active) (EESS) and the Space Research Service (active) (SRS). TPC is a
feature that adjusts a transmitter’s output power based on the signal level present at the receiver. As the
signal level at the receiver rises or falls, the transmit power will decrease or increase as needed.
Therefore, TPC will cause the transmitter to operate at less than the maximum power when lower signal
levels can provide acceptable service.

U-NII devices operating in the 5.25-5.35 GHz band and the 5.47-5.725 GHz band shall employ a
TPC mechanism. The U-NII device is required to have the capability to operate at least 6 dB
below the mean EIRP value of 30 dBm. A TPC mechanism is not required for systems with an
e.i.r.p. of less than 500 mW.

Hammy · Fri Jul 07, 2006 1:13 am

Actually, it would be nice if MT would allow the use of a radio to be dedicated to DFS monitoring. One could add one of these cards and plug it into an inexpensive antenna to be used for the sole purpose of monitoring for DFS so that the card carrying the traffic would not be offline for the duration of the channel scan. Then instead of forcing a channel change and the clients blindly searching for what happened to their AP, the AP could issue a packet that states that it will change to xxxx frequency so the clients know exactly where to go, minimizing the downtime.

While we're on the subject of dedicated cards... GPS sync support like Canopy to allow for higher frequency re-use. You already support a GPS interface, just use that to sync radios.

What? These things break 802.11? That's what N-Streme is for. Can't use N-Streme and WDS slave at the same time because it breaks standards? That's what N-Streme is.

Ness · Tue Jul 11, 2006 4:13 pm

Definitely we ALL will need:

0. STABILITY (new bug-fix version NOT every week or 2 and testing BEFORE release). Take a look at linux kernel and Cisco IOS versions.
0. CE certification
0. TPC support (and ability to turn it OFF)
0. Unified Thread Management (hardware antivirus, IDS, spam filter etc)
0. nice 19" rack mount kit
0. optical interface or SFP
1. IPv6 support
2. SBGP support (supporting X.509 certificates) (see RIPE NCC anti-spoofing WG)
3. Ident server (asked for it 5 years ago)
4. PPPoE unauthorized server alerts (a'la DHCP alerts)
5. SwitchBoard (with SSH, VSRP, IGMP, electro-optical convertors on all ports, tantal capacitors, powered by PoE etc)
6. WiMax support (polling is good, but not enough). All wanna NLOS. ATM cells?
7. HSDPA support
8. EV-DO support
9. RoHS
10. USB UPS support
11. DVB/CSA support
12. USB Flash Disk boot (from USB key)
13. Solar power adapter (with PoE)
14. Remote control to reboot routers (and integrated RF sensor in router)
15. Universal Frequency converter
16. Integrated GPS receiver (with SiRF protocol support)

... just kidding

And BTW tell me plz: for what these 2 holes in OUTDOOR package of APs?

Ness · Tue Jul 11, 2006 4:20 pm

Oh, forgot one...

What about PoF (Power over Fiber)... can these optical lasers give enough power? All switch to optics... you switch to PoE... strange

jp · Tue Jul 11, 2006 10:19 pm

Ness, you forgot IR universal television remote on your list.

csickles · Tue Jul 11, 2006 11:45 pm

I for one dont need it...

I have it on me PDA phone...

csickles · Tue Jul 11, 2006 11:47 pm

I have only one BIG wish....

Here it comes....
I have to type it....

I cant stop.... Oh NO !!!!

A.D.S.L.

Oh No!!! did I type that out loud !!! OOPS !!!!

MikroTik ROCKS !!!

nolis · Sat Jul 15, 2006 3:09 pm

I would like to see better statistics for the interfaces. Such as Errors on the ethernet interfaces. Maybe Broadcast counters, Collision counters, etc.

I would like that either, especially up/down in interfaces (like cisco gear). I think it would be great if the interfaces could keep such statistics for problem debugging. I have a laser link connected in one side with a cisco and in the other side with a Mikrotik PC box. The cisco reports 1 - 2 times per day link up/down (lasts ms to many secs!) and we cannot understand in which side is the problem because the laser link is a transparent bridge and MT does not report a thing!

nabuk · Sun Jul 16, 2006 10:22 am

Only one question:
on 2.10 we will have a really stable dynamic routing support (ospf and bgp), and a very stable router ?
From 2.9 first release there are too much upgrade. Every time I must do an upgrade to a production router I have fear....

Ness · Mon Jul 17, 2006 11:38 am

One more suggestion: fix export full router configuration to .rsc file to be able latter import it on the other router. It don't working now BTW. Disable MAC address export (will do dublicate MACs), in PPPoE - if you define remote-address=pool import will not work etc.

And why we can't see neighbord Ciscos, if Cisco can see Mikrotik?

Add plain old CDP support.

Mon Jul 17, 2006 11:42 am

can't be fixed, because router can't know which new card will be which. if you have multiple different hardware devices, it is impossible to 100% restore config

Ness · Mon Jul 17, 2006 12:03 pm

A least fix for the SAME hardware. We must every new RIC522 setup manualy. We recall you every time

And plzzzzzzzzzz show string number where error is detected.

Ness · Mon Jul 17, 2006 12:15 pm

And add UDLD support... we will be able to use your RB as bridges with STP support. Without UDLD STP early or latter will hang all network. http://www.ietf.org/internet-drafts/dra ... dld-01.txt

ParisDragon · Tue Jul 18, 2006 8:24 pm

Please Allow Multiple src or dst address lists when matching

http://forum.mikrotik.com//viewtopic.php?p=43609#43609

Please Add SMTP Authentication and Custom Port Support

http://forum.mikrotik.com//viewtopic.php?t=8616

Ability to have a script FTP to a server and send a file (example your router backup config)

Wed Jul 19, 2006 10:36 am

how can the router know which one should be called `incoming` ? the `ether1` could be any interface

Beccara · Wed Jul 19, 2006 10:38 am

So you assign interfaces to names?

Ether 1 is Incoming right?

Move router onto new box and tell it that Ether 2 is Incoming.

Need a menu to assign physical interfaces to virtual names

Wed Jul 19, 2006 10:54 am

no, the other way around

the physical interface doesn't have any name. when routeros first starts up, it detects your cards, and assigns names in order of detection. it assigns ether1,2,3,4 etc. router doesn't know about incoming or outgoing, you assign this name later, depending on what you want.

Ness · Wed Jul 19, 2006 11:09 am

Oh come on. Use MAC addresses of interface to identify which one is ether1 (for manually asigned MACs use mac-alias or something like this) Or use FIFO method (assing randomly). It's much easer to plug cable to other hole, then setup each router manually.

Wed Jul 19, 2006 11:48 am

yes, mac address. but how about import to other PC. this doesn't solve anything

Ness · Wed Jul 19, 2006 11:58 am

On new hardware we ALREADY have interfaces with names! just enable it and use its name. Don't add new, just change parameters for existing interfaces.

If we rename interfaces, keep interface number (ether1), just add int-alias="outgoing", after import on other router use ether1 on new router, enable it and rename to "outgoing"

Wed Jul 19, 2006 12:01 pm

if you already have interfaces with names, export works fine and it is proven. the only problem is on zero-configured routers

Ness · Wed Jul 19, 2006 12:08 pm

If we don't have interfaces (how it's possible BTW, after booting of RouterOS, it MUST find all interfaces) use random (we can plug cable to any RJ45 on new router)

Wed Jul 19, 2006 12:10 pm

?

please explain differenly, or in latvian

Ness · Wed Jul 19, 2006 12:25 pm

Meģinašu latviski

Pēc RouterOS ieladešanas, viņa obligati atrast visus interfeisus (ja draiveris šajam iericem eksiste), tikai pec tam mēs varam importet vecu konfiguraciju.

Mums tikai vajag "enable" interfeisu ar nosaukumu skriptā un uzstadīt interfeisam parametrus no skripta. Un tikai pec tam mainit interfeisam nosaukumu no skripta (piemeram "outgoing")

Principa mēs varam lietot pirmu paņemto interfeisu (jebkuru), tapec ka mes varam iespraust kabeli jebkura briva RJ45.

Mogu esho po-russki

Wed Jul 19, 2006 12:37 pm

as far as i know, it already works that way. by default, routeros finds all devices and enables them (after installation). yes, you could assign the names randomly, to any interface, and then just plug the cable in the appropriate port, but some people would not be happy about this random thing.

we will research all possibilities. thank you for suggestions

grzesjan · Wed Jul 19, 2006 12:49 pm

we will research all possibilities. thank you for suggestions

Why is it not possible to leave ether1 as ether1 even if this is different physical port?

Imagine such situation - my power supply damaged and burnt whole pc and hard disk. I take firstavailable PC, which has different mother board, different NIC's, but the number of NIC's is the same. Why can't I just import backuped configuration?

Gregor