MikroTik

I have big problem with couple of routerboard. They work fine but after couple of hours i have packed rejectew when i ping even they interfaces.
Can abybody help me ? Where is the problem ? Routerboard, OS ???
MT have only ethernet interfaces and 5G Atheros.

Are you sure that it is everything OK with their power supply?
Try to switch the power supply from the router that works OK with the one that makes you troubles.

Are you sure that it is everything OK with their power supply?
Try to switch the power supply from the router that works OK with the one that makes you troubles.

I don't know why you are asking about power supply.
I have the same problem(packet rejected), and the only answer from support was you have filter in firewall.
I am using for as wireless backbone link two Routerboards, one 230 and second RB532, and I have packet rejected constanlty. I can not link with anything, system resources, link quality - always 54 Mb/s, memory, I checked everything.
I expect from mikrotik users and experts do you they know what is the problem.
Regards,
Florin

Does the problem go away after a while if you reboot the router?

I am seeing a similar thing with a few of my routers but it starts after a day or two and not an hour or two. Rebooting the device "clears" it - until the next time.

It is as if the router is getting clogged up with something.

I don't know why you are asking about power supply.

Simply because power supply malfuncion could cause router hanging.
If I understanded Baczans question, then the router hangs after couple of hours, and it dont even answer to ping request.
If it works OK, but only rejects ICMP, than I must agree that my question was stupid
Baczan, does your router hangs totally or not?

My router's wors all time,they lost many packet (packed rejected), after reboot all works fine couple of hours depens on traffic. This problem i have on pc boards too connected (ethernet or wireless) directly to routerobards (on main router).

Routers answer to ping request , but have many timeouts.

The problem goes away after reboot, but i have another after copule of hours not days. More traffic, more interfaces - more troubles.
My main router have only 4 ethernet interfaces (3 local conected to routerboards, 1 to internet) and have packed rejected too.

Which power supply is correct 12-24 or 24-48 ? I have 18v 800mA. I'll try to change it but i think this is diffrent problem mayby in MT filters or ... ?

I don't know why you are asking about power supply.

Simply because power supply malfuncion could cause router hanging.
If I understanded Baczans question, then the router hangs after couple of hours, and it dont even answer to ping request.
If it works OK, but only rejects ICMP, than I must agree that my question was stupid :)
Baczan, does your router hangs totally or not?

The problem is near as explained by Baczans, you don't have all ICMP packets rejected but some of them(after a while even 30 %), and if you reboot equipment, the problem disapears for couple of hours or even a complete day. The things that worries me, is that when ICMP packed is rejected, your system also will not work properly.

Wow .... Gremlins ??!

I think this not Gremlins but serious problem not only for me, I rebooted my MT six times today !!!

I think this not Gremlins but serious problem not only for me, I rebooted my MT six times today !!!

I configured more than 100 wireless systems and routerboards, but I didn't have any kind of this problem in pure routing system. If the case is like my problem, I thing that problem is bridging the interfaces, because I my case the router has four or less bridged interface.
Please let me know, am I right.

I think this not Gremlins but serious problem not only for me, I rebooted my MT six times today !!!

I configured more than 100 wireless systems and routerboards, but I didn't have any kind of this problem in pure routing system. If the case is like my problem, I thing that problem is bridging the interfaces, because I my case the router has four or less bridged interface.
Please let me know, am I right.

Can you make the output of "/ip firewall connection print file=output" and send it to me in florin@ati-kos.com.

Best regards

no not to florin, to support. we might have found the problem, we are working on it, hold on

no not to florin, to support. we might have found the problem, we are working on it, hold on

Yes, you are right, but when I send you output from my routers, I didn't have any problem, so I though I can compare.
But anyway you are right, the file should go to support.

Thank You Normis

[/img]

Capture winbox of 2 routers directly connected ethernet cable.
1.have packed rejected
2. main have timout but after while packed rejected too.
Both have very simple configuration (bridge,routing - rip, mark routing and filter from mt documentation).

I'll make connection output, but I rebooted my mt and now I'll wait for packed rejected

This is /ip firewall connection print file=output from few router's when packed rejected appears (and support.rif). I'll send files to support too.

http://www.gb.net.pl/output.zip

I sent all to mt support and now waiting......

We were having the exact same problems until I turned connection tracking off. Once connection tracking is off all of our problems disappear. If you turn off connection tracking while packets are being rejected the problem goes away, just as if you rebooted the router.

Hope this helps,
Ken

Don't disable connection tracking !!!!


Email from mikrotik support :

Hello,

you have a lot of people that use P2P sharing programs.

You can decrease tcp-established-timeout in "/ip fireall connection tracking",
or limit connections per customer (100 for example)

in firewall there is a parameter connection-limit. you can set this parameter
and with the action drop, each new connection will be dropped if the
connection count reaches the set number.

or wait for v2.9.8 (there will be larger connection table and more improvements)

Regards,
Normunds

or wait for v2.9.8 (there will be larger connection table and more improvements)

Waiting....

When connection tracking is switched off, there is no problem. We have two identical bridges installed, one for over 1 month and the new one for one week. We had the same problem with the new one - packet rejecting. We compared configuration many times but we forgot to check connection tracking. Now when it is OFF, it works fine and I hope it will be functional for many weeks like the old bridge.

When connection tracking is switched off, there is no problem. We have two identical bridges installed, one for over 1 month and the new one for one week. We had the same problem with the new one - packet rejecting. We compared configuration many times but we forgot to check connection tracking. Now when it is OFF, it works fine and I hope it will be functional for many weeks like the old bridge.

Please update us, do you have problem with new bridge, and also for other users, with connection tracking off, is the problem completely overcomed.

I ave over 30 routers mt in my network. when connection tracking is off after 1-2 hours routers don't see network only his neighbours (sometimes more) - routing doesn't work, all users have problem with connection to internet and crazy ping's. Network is not working propely.

With connection tracking OFF, you can`t use mangle... it is a handicap to loose this feature!

Best solution - change rtc estabilihed timout (30 m or ???). I have 30m and all work's ok without packed rejected.

By default it is 10 days, or something like that. You shortened this to 30min and everything goes OK? If the answer is YES; it`s worth trying...

After 2 days when connection tracking is OFF it works fine, no packet rejected. We use the connection only for bridge purposes so no mangling and routing is performed.

Now I'have 30 min and all works OK.Somtimes i'have packed rejected but amll amount and really somtimes.

how to set rtc estabilihed setting?

Hello friends,

I have a similar problem with CCR1036-8g2s+.

I work in an ISP and we have 2 CCRs1036-8g2s+ (let's call them R1 and R2), 2 CCRs 1036-12g4s and 1 CCR1016-12g.

R1:
SFP+1 Link-IP 2Gb BGP.
SFP+2 (Vlan1) Link-IP 500Mb Point-to-Point - (Vlan2) IX 2Gb.

R2:
SFP+1 Link-IP 500Mb BGP.
SFP+2 (Vlan1) IX 3Gb BGP.

The other routers are authenticating our clients.
I was using LONG-TERM version in all routers, when this problems started, I've updated all versions to STABLE 6.46.6.
Everything are working fine when it suddenly stop.
The router still working, the CPU is always working with about 20-35%, nothing wrong on LOG and everything still connected but not working.
When pinging, I receive PACKET REJECTED and after a while it receives timeout.
If we reboot our router, everything back to normal and it starts working fine again.
I had reviewed all the configurations, route filters, firewall rules, and asked our providers to check their sides.
Until now, I couldn't find nothing that could cause this issue.

I appreciate any help.
Thank you!

@Jellison, can you exclude heat issues?
What do the following commands say if you issue them at the local serial console of the devices when remote connection is not possible due to the said error situation? :

/system health print

/system resource print

And: do you have some scripts running in the background, ie. in the scheduler?

@Mutluit, thanks for answering

Yeah, the CPU are working in about 55 to 58Cº, fan OK and we have temperature control at room.
CPU work in about 20 to 40% only, it looks normal when it happens.

2 scheduled scripts
1 create backup
1 send backup
create backup are running at 00:00.
Send backup are running at 00:08.

Today it happened again, it was about 19:15, it was rebooted by watchdog timer and again, everything BACK TO NORMAL!
But when it happens, our clients lose connection for a while, something about 5 minutes to reload everything again.
I don't know if it's a bug or not, but it's really hard to figure out what's wrong with it.

Hello Guys,

We replaced the router with a RB1072 and until now, no problems.
I don't know if it's a capacity problem or something related to this, but after replaced, the problem is gone!

NOTE: The problem started when we reached 3,5Gb.

The supout file was sent to Mikrotik, but no answers yet.
Hope that could help you guys.

Hi,

I have also started experiencing this problem after years of everything running smoothly.

We have CCR1072s, every 22 hours we will experience intermittent connectivity and packet rejected until we reboot the router.

We were running LONG-TERM but updated to the latest stable to try and rectify the problem, however it still happens.

We have a redundant setup and the 2nd router is just fine running the same version and hardware.