Community discussions

MikroTik App

Search found 49 matches

by gilljr
Fri Sep 02, 2022 2:46 am
Forum: Forwarding Protocols
Topic: iBGP Won't Establish [SOLVED]
Replies: 12
Views: 956

Re: iBGP Won't Establish [SOLVED]

What software load are you running? With 7.x you need to define local address.

Gilbert
by gilljr
Sat Aug 27, 2022 1:36 am
Forum: Forwarding Protocols
Topic: Issue with OSPF over a second link v7
Replies: 2
Views: 448

Re: Issue with OSPF over a second link v7

Found the issue. Rookie mistake.
The microwave radio link was limiting mtu. I increased the mtu on the radio link and the OSPF came up.
by gilljr
Thu Aug 18, 2022 2:25 am
Forum: Forwarding Protocols
Topic: RouterOS v6 to v7 update broke my BGP peering
Replies: 6
Views: 5065

Re: RouterOS v6 to v7 update broke my BGP peering

On the Connection Tab, make sure to assign the local address. I had this same issue and that was the solution.
by gilljr
Wed Aug 17, 2022 10:27 pm
Forum: Forwarding Protocols
Topic: Issue with OSPF over a second link v7
Replies: 2
Views: 448

Issue with OSPF over a second link v7

I have a CCR2116-12G-4S+ running 7.4.1 and cannot establish a second link to another Mikrotik router running v6. The primary link is of network type ptp and is running fine reporting a state of Full. The second link (different interfaces over a different path) will only go into link state ExStart. F...
by gilljr
Wed Aug 17, 2022 1:18 am
Forum: Forwarding Protocols
Topic: v7.1.1 OspfNeighbor received wrong LS Ack
Replies: 17
Views: 8818

Re: v7.1.1 OspfNeighbor received wrong LS Ack

I am running v7.4.1 and I am seeing this on a link to a router running v6.47.9. I added a second link between the routers and I am getting the same error on the secondary link.
by gilljr
Wed Jul 18, 2018 1:12 am
Forum: General
Topic: Issues with software release 6.40.8
Replies: 1
Views: 873

Issues with software release 6.40.8

I am having an issue with routers running software release 6.40.8 (bugfix). 1. Cannot create support file. It gets 60 to 80% complete then stops, never writing to the file system. 2. With SAF WS licensed radios, I am getting fcs errors every 30 seconds on ports connected to those radios. I have not ...
by gilljr
Tue Aug 29, 2017 9:47 pm
Forum: General
Topic: Ports Bounce CCR
Replies: 0
Views: 685

Ports Bounce CCR

I have a CCR1009-8G-1S-1S+ running 6.37.5 software release at a very remote location. I just had all of my active ports just bounce. Below is the section of the log showing the occurrence. Has anyone else had this issue? If you had this issue, what was your resolution? I have not seen this in any po...
by gilljr
Thu Mar 09, 2017 4:45 pm
Forum: Forwarding Protocols
Topic: 802.3ad bonding to Cisco Switch
Replies: 6
Views: 4790

Re: 802.3ad bonding to Cisco Switch

Do you not need to put Channel-group 1 mode active on interfaces for them to advertise. That was the issue. The Cisco Interfaces now look as follows... interface Ethernet1/17 switchport mode trunk switchport trunk allowed vlan 206,607 speed 1000 channel-group 1 mode active interface Ethernet1/18 sw...
by gilljr
Thu Mar 09, 2017 4:26 pm
Forum: Forwarding Protocols
Topic: 802.3ad bonding to Cisco Switch
Replies: 6
Views: 4790

Re: 802.3ad bonding to Cisco Switch

Do you not need to put Channel-group 1 mode active on interfaces for them to advertise.
That maybe the issue. I am going to move the traffic off of the bond and see if I can fix it and move the traffic back.
by gilljr
Thu Mar 09, 2017 4:05 pm
Forum: Forwarding Protocols
Topic: 802.3ad bonding to Cisco Switch
Replies: 6
Views: 4790

Re: 802.3ad bonding to Cisco Switch

As you have bonded the two ports on the switch you may be experiencing and issue with STP and RSTP. have you tried connecting just 1 and seeing if traffic flows? I have Spanning Tree Disabled on the VLANs. It is traffic originating from the Mikrotik that is going only on one interface. Traffic from...
by gilljr
Thu Mar 09, 2017 3:43 pm
Forum: Forwarding Protocols
Topic: 802.3ad bonding to Cisco Switch
Replies: 6
Views: 4790

802.3ad bonding to Cisco Switch

I found a previous post relating to this subject that did not answer my issue...https://forum.mikrotik.com/viewtopic.php?t=110400 I am using a CCR1036-12G-4S (6.37.4) and bonding 2 SFP modules to a Cisco Nexus 3064 switch. The bonding does not seem to be working properly. I expect it is an issue wit...
by gilljr
Fri Jul 29, 2016 11:48 pm
Forum: Forwarding Protocols
Topic: LDP Neighbor - No Addresses shown
Replies: 4
Views: 3594

Re: LDP Neighbor - No Addresses shown

I have now resolved the LDP issue. A reboot did not resolve the issue, but placing advertising filters that only advertise the loopback addresses did. I must have to many addresses assigned to my routers. My VPLS tunnel is also now establishing which is great. If someone else has some issues getting...
by gilljr
Fri Jul 29, 2016 11:57 am
Forum: Forwarding Protocols
Topic: OSPF Filter for Source IP Address
Replies: 6
Views: 2187

Re: OSPF Filter for Source IP Address

I would use policy based routing. You tag the flows with mangle and route on the tag. There is a use case on my network that I had to do this where a small segment of traffic does not flow over the OSPF best path.
by gilljr
Fri Jul 29, 2016 1:36 am
Forum: Forwarding Protocols
Topic: LDP Neighbor - No Addresses shown
Replies: 4
Views: 3594

Re: LDP Neighbor - No Addresses shown

I captured the packets on the link between R3 and R6 at R3 and looked at my capture using wireshark. I do not know exactly what I am supposed to be seeing, but I am only seeing the addresses sent from R3 to R6. Below is a look at my capture. LDP Packet Capture.PNG I have R6 scheduled to be rebooted ...
by gilljr
Thu Jul 28, 2016 8:39 pm
Forum: Forwarding Protocols
Topic: LDP Neighbor - No Addresses shown
Replies: 4
Views: 3594

LDP Neighbor - No Addresses shown

RouterOS 6.32.4 on both sides MTU set to 1508 I had a previous posting where I talked about not being able to ping R6 when I enabled the LDP interface on R3 and R6 and neighbors were discovered. That is no longer my issue. Now when the neighbors are discovered I am having 2 issues. 1. The LDP neighb...
by gilljr
Thu Jul 28, 2016 2:51 am
Forum: Forwarding Protocols
Topic: Enabling LDP interface causes icmp to fail
Replies: 2
Views: 928

Re: Enabling LDP interface causes icmp to fail

I modified the MTU and made all the OSPF routes intra area. Now I no longer lose traffic when enabling the LDP Interface, but I still cannot establish a VPLS tunnel. I am ending this post and starting a new one "LDP Neighbor - No Addresses" as that is my problem now.
by gilljr
Wed Jul 27, 2016 8:12 pm
Forum: Forwarding Protocols
Topic: Enabling LDP interface causes icmp to fail
Replies: 2
Views: 928

Re: Enabling LDP interface causes icmp to fail

Do all the routes need to be Intra-Area or can I have a mixture of Intra-Area and External Type 1? That is the only thing I can think of. I do not list all the network addresses in the OSPF networks tab, instead I redistribute static and connected.
by gilljr
Wed Jul 27, 2016 12:34 pm
Forum: Forwarding Protocols
Topic: Enabling LDP interface causes icmp to fail
Replies: 2
Views: 928

Enabling LDP interface causes icmp to fail

I have a network that has multiple routers running OSPF that I am slowly enabling MPLS on and I am having some difficulty. I am going to be adding a second VPLS network so I have to expand the number of routers with MPLS enabled. All of my routers use a loopback address for OSPF router ID as well as...
by gilljr
Mon Feb 29, 2016 9:39 pm
Forum: General
Topic: DHCP Relay, Multiple subnets on same interface
Replies: 1
Views: 927

Re: DHCP Relay, Multiple subnets on same interface

I found that if my local address in the dhcp-relay is one of the IP addresses on the interface it will work if you use the "shared-network" command on the DHCP server. shared-network SharedNetworkName { subnet x.x.x.x netmask y.y.y.y { ..... } } subnet z.z.z.z netmask w.w.w.w { ..... } } }
by gilljr
Mon Feb 29, 2016 7:41 pm
Forum: General
Topic: Basic Inter VLAN routing - not Working
Replies: 15
Views: 3609

Re: Basic Inter VLAN routing - not Working

Sorry about the drop off in replies. I have been chasing my tail on other issues and have not been on the forum. /interface ethernet switch egress-vlan-tag add tagged-ports=ether9,switch1-cpu vlan-id=100 /interface ethernet switch egress-vlan-translation add customer-vid=100 new-customer-vid=0 ports...
by gilljr
Thu Feb 25, 2016 6:48 pm
Forum: General
Topic: Basic Inter VLAN routing - not Working
Replies: 15
Views: 3609

Re: Basic Inter VLAN routing - not Working

I know this is a basic question, but have you tried the same ports that work with the newer windows boxes with the linux and xp boxes.
by gilljr
Thu Feb 25, 2016 5:04 am
Forum: General
Topic: Basic Inter VLAN routing - not Working
Replies: 15
Views: 3609

Re: Basic Inter VLAN routing - not Working

These switches are not intuitive at all to program but once you have done it a couple times it is easy enough. Below is an example on how you could do it. My example uses ether1 as the master switch port and trunking port. VLANs 10,20,30,40,50,60 are the 6 VLANs and 10 is the management VLAN. First ...
by gilljr
Thu Feb 25, 2016 3:55 am
Forum: General
Topic: DHCP Relay, Multiple subnets on same interface
Replies: 1
Views: 927

DHCP Relay, Multiple subnets on same interface

I have been using DHCP relay with Mikrotik and a Linux box for years. My question is can I relay 2 different subnets on the same interface via dhcp-relay. I know that if the Mikrotik is acting as the DHCP server it can use a pool that leads to another to do what I want, but I centrally manage DHCP a...
by gilljr
Mon Nov 16, 2015 2:58 pm
Forum: Forwarding Protocols
Topic: OSPF - Invalid sequence number / MD5 authentication failed
Replies: 6
Views: 5584

Re: OSPF - Invalid sequence number / MD5 authentication failed

I have now begun seeing this same error between 2 of my CCR (1009 and 1016) routers at random times (a handful of times every 3 days) in Point-to-Point OSPF mode. The errors are showing on both sides of the link but not at the same time. The routers are both running 6.30.4 and are connected via a Me...
by gilljr
Thu Oct 15, 2015 7:46 pm
Forum: General
Topic: firmware version numbering confusion
Replies: 9
Views: 1753

Re: firmware version numbering confusion

I would not recommend running 6.32.2, but rather 6.30.4 which is the bug fix version if you are in production. I find it to be very stable while I have had some issues with versions both above it and below it in my testing.
by gilljr
Thu Oct 15, 2015 3:09 am
Forum: General
Topic: Fiber Installation on Tower
Replies: 1
Views: 858

Re: Fiber Installation on Tower

I have ran fiber up a tower before. Typically I only do it for one of two reasons... 1. Long run (Ethernet is 100m) 2. Powered tower and do not want RF to enter my data transmission I use armored fiber cable and usually bring it into a NEMA enclosure through a waterproof gland and terminate it norma...
by gilljr
Thu Oct 15, 2015 2:54 am
Forum: General
Topic: Possible SYN DDOS Attack
Replies: 8
Views: 3503

Re: Possible SYN DDOS Attack

Your trace route looked good. As the other person who posted stated, it looks like you have either a virus or maybe are sharing a torrent behind your router. I would suggest torching the LAN side of your router and see if there is a device that is sending a lot of traffic.
by gilljr
Thu Oct 15, 2015 2:40 am
Forum: General
Topic: DHCP Relay and SRC-NAT
Replies: 0
Views: 952

DHCP Relay and SRC-NAT

I utilize a centralized DHCP server and am having issues with using DHCP relay with NAT. If NAT is not involved, DHCP works great. I am not worried about security since the whole network is private that the DHCP requests are going over. Can I get this to work without setting up a VPN to bypass NAT o...
by gilljr
Tue Oct 13, 2015 12:50 am
Forum: General
Topic: Bonding 2 microwave links
Replies: 4
Views: 1302

Re: Bonding 2 microwave links

We ended up switching to banance rr to send traffic over both links. At this point the traffic looks good and I am not seeing any issues.
by gilljr
Mon Oct 12, 2015 7:00 pm
Forum: General
Topic: Bonding 2 microwave links
Replies: 4
Views: 1302

Re: Bonding 2 microwave links

The bonding interface is bonding 2 vlans. I would only bond 2 interfaces, but I need to manage the Microwave links. So the Vlans are not on the bonding interface. I question was how do I get the traffic to evenly pass over both the microwave links. 802.3ad does not seem to work since the link is poi...
by gilljr
Thu Oct 08, 2015 7:20 pm
Forum: General
Topic: Bonding 2 microwave links
Replies: 4
Views: 1302

Bonding 2 microwave links

I have two 300Mbps Microwave links joining 2 sites together. One site is just a relay point to get bandwidth to the other site. On either side I have CCR routers. Because the radios are inband managed as configured, I have the radios listening on one vlan and a different vlan configured for passing ...
by gilljr
Tue Sep 22, 2015 7:34 pm
Forum: General
Topic: OSPF Issues
Replies: 3
Views: 910

Re: OSPF Issues

The issue was the Metro-LAN service. The carrier that I was using actually fixed the issue within their network that was causing the reflection and the short time that I was switch to NBMA I had no drops or errors.

Thank you for the help.
by gilljr
Mon Sep 21, 2015 10:36 pm
Forum: General
Topic: OSPF Issues
Replies: 3
Views: 910

Re: OSPF Issues

You seem to imply that this is a new fiber setup to a new site. You might try a NBMA neighbor setup so that multicast is removed from the equation. If your fiber is some sort of metro-LAN service, you might be seeing the multicast reflected. Joe It is a metro-LAN service from a carrier I have never...
by gilljr
Mon Sep 21, 2015 7:27 pm
Forum: General
Topic: OSPF Issues
Replies: 3
Views: 910

OSPF Issues

Side A: CCR1016-12S-1S+ (v6.28) Side B: CCR1009-8G-1S-1S+ (v6.32.1) I have setup a PtP link between 2 routers labeled Side A and Side B above using a /30 network. There are many routers connected to Side A utilizing OSPF that are working fine and not throwing errors. The connection between Side A an...
by gilljr
Fri Sep 18, 2015 7:44 pm
Forum: General
Topic: Core Dump on CCR1009-8G-1S-1S+
Replies: 1
Views: 826

Core Dump on CCR1009-8G-1S-1S+

6.32.1 Software Release

I am experiencing a Core Dump on my CCR router when I add 2 interfaces to a bonding group, remove the bonding group, and then finally attempt to add one of the interfaces that were part of the bonding group to a bridge. Has anyone else seen or experienced this bug?
by gilljr
Thu Jan 22, 2015 11:18 pm
Forum: General
Topic: IPSec Bypass
Replies: 1
Views: 840

Re: IPSec Bypass

I figured it out.
I created a policy for the block that I did not want encrypted and in that policy I set the following which can be seen in the attached image:
1. Action=none
2. Level=use
3. Priority=1 (greater that the policy for the main block).


:D
by gilljr
Thu Jan 22, 2015 11:10 pm
Forum: General
Topic: IPSec Bypass
Replies: 1
Views: 840

IPSec Bypass

I have a block of IPs that I connect securely via an IPSec tunnel. There is a subset of that block that I do not want to send through IPSec tunnel because I have a different secure path to reach that block. Does anyone know how to bypass the encryption of that subnet of traffic without fully subnett...
by gilljr
Thu Nov 13, 2014 8:10 pm
Forum: RouterBOARD hardware
Topic: RB1100 Power Plug
Replies: 2
Views: 1514

RB1100 Power Plug

I have a DC only site that I want to use a RB1100AHx2 at. I need all of the ports including the port 13 to be Gigabit. I tried powering via PoE and port 13 will only do 100FD and not Gigabit when powered that way. Does anyone know what the plug on the end of the power supply inside the case is? The ...
by gilljr
Tue Nov 04, 2014 11:53 pm
Forum: RouterBOARD hardware
Topic: RB850Gx2 and ROS 6.20
Replies: 0
Views: 888

RB850Gx2 and ROS 6.20

I was having an issue with TCP drops on this platform when running ROS 6.20 and VLANs. My Setup. 1. Basic Routing, no NAT. 2. Using it as a router to some Cambium ePMP1000 radios. 3. Basic Bridge joining a vlan tagged 3 on the ports connected to the ePMP1000 radios. 4. IP address (ePMP gateway) assi...
by gilljr
Fri Nov 15, 2013 11:34 pm
Forum: General
Topic: help with routing
Replies: 3
Views: 1111

Re: help with routing

From my previous response, I would change the following:

You would assign 2.0.0.2/32 to ether1 and add a route of 0.0.0.0/0 with a gateway of ether1.
/ip address add address=2.0.0.2/32 interface ether1
- and -
/ip route add dst-address=0.0.0.0/0 gateway=ether1
by gilljr
Fri Nov 15, 2013 11:29 pm
Forum: General
Topic: help with routing
Replies: 3
Views: 1111

Re: help with routing

I actually misread your post. You have a /32, not /30.... I will post another answer for the /32. Lets say your WAN block is 2.0.0.0/30 and your LAN block is 1.0.0.0/24. Your ISP is using 2.0.0.1 and they tell you to assign 2.0.0.2 to your interface (lets say ether1). You would assign 2.0.0.2/30 to ...
by gilljr
Fri Nov 15, 2013 6:56 pm
Forum: General
Topic: Mikrotik MTU
Replies: 2
Views: 1168

Mikrotik MTU

I have a question on MTU and Mikrotik. On the Wiki there is an article that explains the L2MTU on all versions of routerboard and also shows examples of what the MTU would be with VLANs, MPLS, and VPLS. Here is where my confusion is... If I create a VPLS tunnel, do I need to adjust the MTU on the VL...
by gilljr
Tue Sep 24, 2013 12:21 am
Forum: Forwarding Protocols
Topic: BGP Full Routes - CCR1036-12G-4S - CPU Question
Replies: 4
Views: 3818

Re: BGP Full Routes - CCR1036-12G-4S - CPU Question

I saw the video and the other thread about BGP full routes on the CCR. I was hoping that it had been made multithreaded. I noticed that there was also a firmware update (3.09) for the CCR that came with the 6.4 software that I did not see when I first posted. I applied it and rebooted. I am seeing t...
by gilljr
Mon Sep 23, 2013 11:46 pm
Forum: Forwarding Protocols
Topic: BGP Full Routes - CCR1036-12G-4S - CPU Question
Replies: 4
Views: 3818

BGP Full Routes - CCR1036-12G-4S - CPU Question

I just installed a CCR1036 on my network that I bought several months ago. I updated it to v6.4 today and then connected it to a new peer that I have turned up with bgp full routes. My question/concern is that the CPU load in general seems to be sitting at 2% with CPU 10 sitting at 100% load 95% of ...
by gilljr
Fri Aug 16, 2013 8:03 pm
Forum: RouterBOARD hardware
Topic: CCR SNMP interface query issues
Replies: 6
Views: 2587

Re: CCR SNMP interface query issues

That did solve the issue. I am now getting accurate values. Now this is only for the spf interfaces, correct or should this be also used on all gbit interfaces?
by gilljr
Fri Aug 16, 2013 7:55 pm
Forum: RouterBOARD hardware
Topic: CCR SNMP interface query issues
Replies: 6
Views: 2587

Re: CCR SNMP interface query issues

I will try that. This is the first time for me to have this issue. I am switching from an old Cisco routers I had at the edge to Mikrotiks. They had all polled ok at the same speeds.
by gilljr
Wed Aug 14, 2013 2:22 am
Forum: RouterBOARD hardware
Topic: CCR SNMP interface query issues
Replies: 6
Views: 2587

CCR SNMP interface query issues

I am experiencing issues when querying bandwidth stats on the spf1 interface if a CCR-1036-12G-4S running v6.2 of the OS. I am not sure if this applies to all interfaces or only the spf interface. When the interface has traffic exceeding 100mbps it truncates the speed. Example: when the router is re...
by gilljr
Mon Nov 19, 2012 11:49 pm
Forum: Forwarding Protocols
Topic: VPLS Bridge Issues
Replies: 2
Views: 1643

Re: VPLS Bridge Issues

I will check and see if I get fragmentation. I only segment that I would expect issues with is the Micorwave radio link where I have VLANs and it has always worked on the Microwave segment.
by gilljr
Thu Nov 15, 2012 11:15 pm
Forum: Forwarding Protocols
Topic: VPLS Bridge Issues
Replies: 2
Views: 1643

VPLS Bridge Issues

Topology Customer Network <---> RB1100( a ) <--> RB1100( b ) <---> MikroRouter8000ux2( c ) <---> RB1100( d ) <---> Customer Network The connection between device a and device b is a 100Mbps microwave link with all data running on a vlan. All other connections are Gigabit Ethernet handoffs. device a ...