Hello guys

I'm facing a strange problem with CCR. I use it with radius as a hub and I use nat rules on it.
When someone disconnects a PPPOE or simply drops somebody, the CPU over a lot in average 30% when only one person falls, soon after stabilizes in 5%, even with 700mbps passing inside the interface of entrance.

The problem is that when it drops many pppoes, the Mikrotik hangs and drops all the pppoes, which takes in average 5 minutes, leaving all clients without connections until all sessions are cleared, then clients begin to authenticate again.
I noticed that this only happens when there is an active NAT rule, no rule, no matter what it is.

I'm going crazy already, I've put all the versions of the imaginable router.
As IPV4 is running out of ips, I unfortunately need to make a nat, already try mascarede, src-nat without success.

Someone with similar problem?

Sorry for the bad english, because my default language is portugues brazil

Thank you all for reading and replying.

Here happens the same, weak hardware for tons of ppp. We disabled conntrack and this behavior gone. try this and post your experience.

What Ros version do you have ?
Asking as 6.39 is vastly changed in ppp area: https://mikrotik.com/download/changelogs

!) ppp - completely rewritten internal fragmentation algorithm (when MRRU is used), optimized for multicore;
!) ppp - implemented internal algorithm for "change-mss", no mangle rules necessary;
!) pppoe - added fastpath support when MRRU and MLPPP are enabled;

Yo BartoZ! we use 6.39 exactly because of this!! don't solve de issue, another ccr1036 same behavior, so i think this hardware is weak, just happens when conntrack is enable and we kick at least 200 pppoe sessions at once.

just forgot to mention, we don't use NAT, and when this happens we see "firewall" eating all cpu's.

take a look https://youtu.be/3LmQYIQ5RoA?t=13m55s

Here happens the same, weak hardware for tons of ppp. We disabled conntrack and this behavior gone. try this and post your experience.

With active contrack, problems with pppoe, when several pppoes disconnect, without contrak works perfectly, but we lose the power of the routeros.
Our customer blocking system, rules of nat.
In Brazil, this is not being released IPV4 and we are missing, being necessary to do a src-nat.
I have tested from versions 6.0 beta to the latest version, without success.

Anyone else with similar problem or with a tip?

We already exchanged a CCR for another one is of the same problem.

I'm almost migrating to a PC

Here happens the same, weak hardware for tons of ppp. We disabled conntrack and this behavior gone. try this and post your experience.

With active contrack, problems with pppoe, when several pppoes disconnect, without contrak works perfectly, but we lose the power of the routeros.
Our customer blocking system, rules of nat.
In Brazil, this is not being released IPV4 and we are missing, being necessary to do a src-nat.
I have tested from versions 6.0 beta to the latest version, without success.

Anyone else with similar problem or with a tip?

We already exchanged a CCR for another one is of the same problem.

I'm almost migrating to a PC

Ainda está com problema amigo ?

yep, we didn't find out what is causing this behavior with conntrack active. in our friend case, the video posted can solve his problem.

Here happens the same, weak hardware for tons of ppp. We disabled conntrack and this behavior gone. try this and post your experience.

With active contrack, problems with pppoe, when several pppoes disconnect, without contrak works perfectly, but we lose the power of the routeros.
Our customer blocking system, rules of nat.
In Brazil, this is not being released IPV4 and we are missing, being necessary to do a src-nat.
I have tested from versions 6.0 beta to the latest version, without success.

Anyone else with similar problem or with a tip?

We already exchanged a CCR for another one is of the same problem.



I'm almost migrating to a PC

Ainda está com problema amigo ?

AInda estou sim, mas consegui amenizar reduzindo os valores do contrack.