MikroTik

Dude2048

Fortinet is one https://www.fortinet.com/blog/industry- ... cell-wi-fi

Dude2048

After upgrading to RouterOS v7.7 from v7.6 for CRS354 connected to vPC (CRS354 has a link to each of two Cisco Nexus 9xxxx that form vPC domain) - links start to flap. Issue goes away after downgrading to v7.6. As was the case with RouterOS v7.7rc5 also with RouterOS v7.7, using serial cable (have ...

Dude2048

He isn’t reading our replies or he is just plain….
Let it go.

Dude2048

The factory installed one can never be upgraded. It is your backup routerboot in case of emergency. See the same documentation and https://help.mikrotik.com/docs/display/ ... kuploaders

Dude2048

Upgraded RB4011, hAPac2, Rb961, Wap ac. No problems here

Dude2048

Thank you for the tips. I will try to better my life.

Dude2048

So stupid of me. I don't know why I missed this. Big thnx

Dude2048

When I create a script like below, in works like a charm in CLI but the "put" command stays empty when I run it from system scripts. Is this a V7.6 bug?

:interface monitor-traffic ether2 once do={:global bps $"rx-bits-per-second" }
:put $bps

Dude2048

Happy new year!!!

Dude2048

Start with posting your config with hide-sensitive.

Dude2048

… Nevermind

Dude2048

On the RR itself since the last filter rule is a deny all. In that way it won't be re-advertised to the originator.

Dude2048

Maybe construct a deny filter for the corresponding iBGP connection so that it won't advertise the routes back to the originator. For the time being this seems to me the only solution.

Dude2048

WireGuard public key

Dude2048

Rextended Check is my guess... To see that it is a lonely spammer or something?

Dude2048

@ Vaka /routing/stats/adverts print

Dude2048

@ Rox169 That you didn't see them doesn't mean it isn't there. I work for a very big company and yes we do use capsman.

Dude2048

What is your skill

Dude2048

Just read this first. If you have questions afterwards, I will be happy to answer them.
viewtopic.php?t=143620

Dude2048

https://wiki.mikrotik.com/wiki/Manual:Interface/Bonding

Dude2048

Can you elaborate on that problem?

Dude2048

Since my crystal ball is broken could you post your config with hide sensitive option?

Dude2048

You have to open it

Dude2048

No issues on CCR1009/CRS224/HAP AC2 and Wap AC. Al basic stuff, no routing protocols. Switch and Hap AC2 with vlan filtering.

Dude2048

Start a new topic and post your config.

Dude2048

So MS upgrade 10 to 11. MT is in the wrong. Just.... Really. Use linux for all I care.
About the broadcast stuf I stand with MKX.

Dude2048

search the forum. It is withdrawn an may come back.....

Dude2048

I know. I have seen the statement from Normis, but it never hurts to try.

Dude2048

And another answer:

Hello

We will try to resolve this problem as soon as possible in the future Dude releases when we will be working on fixes and improvements regarding this service.

Best regards

Dude2048

Answer from MT:

Hello

Yes, unfortunately, currently in the Dude it is not possible to upgrade devices by using v7 packages.

Best regards

——
I asked them if it will be fixed in future releases.

Dude2048

Created sup-84404

Dude2048

When the files are in the old location with V6 it works fine. With V7 you will get the option to upgrade but it triggers "needed packages are not available" and doesn't do anything.

To be a bit more precise; For me it is the CHR package which triggers this.

Dude2048

Hello, in MikroTik v7 DUDE still can't upgrade Devices - Dude server still shows "needed packages are not available", though packages are uploaded on DUDE server in dude path.
Somebody any solution please?

Dude2048

Is it a switch or router? A switch does switching in a specialized chip. So who cares if the cpu is not so strong. Use snmp instead of winbox. The cpu is only necessary to boot the software and program the switch chip. Problem solved.

Some switch chips can even do l3 in hw.

Dude2048

viewtopic.php?t=182009#p927302

Dude2048

Create a filter like the one above. In BGP attach it to the output filter.

Dude2048

@tangent and @gdanov; Even if you have a lab you just can't test al the different configurations which could cause a cascade of triggered bugs in a piece of software. The way it works is what Biomesh told you. MT is not alone in that regard. So; No, you don't deserve to know more, even if your sphin...

Dude2048

Congrats on turning green.

Dude2048

Haha, no more popcorn for msatter.

Dude2048

You're rude, not direct. That's a difference. Already three persons telling you that. Do something with it.

Dude2048

Dude, stop drinking vinegar. You don't have to use MT. The big companies do the same stuff and they won't give you an answer on a forum. So be grateful that they tell you in more details what is wrong. Some use more words than others, so be it. And I won't go to the pre-production testing before you...

Dude2048

If none of the fixes are needed, revert. And stop shouting. It is rude.

Dude2048

The last rule in a filter is deny all. So you sending what you want. You won’t be sending the reflected route to yourself.

Dude2048

https://m.youtube.com/watch?v=U6cNovT-Vt8

Dude2048

It is a joke, maybe a bad one. But I liked it.
If ether1 is not present it is most likely a defect. It is via a pci-e controller attached to the Tilera. I would get a rma.

Dude2048

https://m.youtube.com/watch?v=YLtGQAQ8iS0

Good tutorial

Dude2048

Please, stop your rant about it and your uneducated customers. It is not productive.

Dude2048

BGP max prefix is a will fixit. There was a riot on the forum and they listened. Sometime in an upcoming release. The other one is a big guess but via cli "routing route ....." But nevertheless, I understand the pain.

Found it viewtopic.php?t=182701

Dude2048

You can't downgrade to lower versions than the factory installed ones.
BTW; What kind of company policy is that...... V7 is coming to you in one way or another, not to mention other vendors who do exactly the same....

Dude2048

You have to create a blackhole route in your routing table. From there create a filter which matches the blackhole route and dump the smaller routes.

https://help.mikrotik.com/docs/display/ ... ingFilters

Dude2048

CHR no issues

Dude2048

Nope. I hope that it will be implemented.

Dude2048

How do we aggregate routes in bgp now?

With a filter. There’s an example in the help, but not quite the answer. You have to change that one.

Dude2048

Netinstall is a tool to unbrick your device. It will format the disk and restore the OS. It is destructive for any old configs....

https://help.mikrotik.com/docs/display/ROS/Netinstall

Dude2048

I have read it to many times. We will upgrade when we replace the units or CVE related issues.

Dude2048

I'm afraid that it's gonna be netinstall. Is the Dude stored on the SSD? Maybe you're lucky with that data. I believe netinstall won't touch the SSD.

Dude2048

He has a point. Just stop bitching about it.

Dude2048

What size did you use?

Dude2048

New routing engine, so I expect more problems than just this one. I really think they are working on it in a higher speed than the release of Ros7. So I bear with them and for the moment use Ros6.

Dude2048

Same behavior with 5 prefixes. Reboot does fix the problem however, but it is not what you want.

Dude2048

There was an answer for your code. If you have read the topic you know what to do.

Dude2048

Post your config with export hide-sensitive. That takes a lot of guesses away. And... Code 71 stands for Long-Lived Graceful Restart (LLGR) Capability. There is a mention in the wiki that this has been replaced to the community settings. https://help.mikrotik.com/docs/pages/viewpage.action?pageId=74...

Dude2048

Nope, that was not the answer. I seriously misunderstood it. Solved it. It was the "no client to client reflection" that bit me.

Dude2048

Had the same problem. I seem to have solved it. The confedration AS is 78910. Sub AS 65534 is for R08. Sub AS 65535 is for R09 R08 add as=78910/65534 disabled=no local.address=10.1.89.8 .role=ebgp name="R08 - R09" remote.address=10.1.89.9/32 .as=65535/78910 router-id=172.16.0.8 routing-tab...

Dude2048

Your rant is not going to work. Open a new topic instead of hijacking an old one. Be polite and tell us the problem.

Dude2048

I tried to make a simple route reflector setup with three routers (CHR 7.1.1). I tried several setups to no avail. Since the documentation is a kind of sparse on this subject I tried to Goolge it, read iBGP rr documents etc... The only advantage, for now, is that my understanding is a bit better, bu...

Dude2048

I don't know if Eve-NG supports mac-spoofing protection, but under hyperv I had problems with that setting until I disabled it,

Dude2048

What kind of router? Physical or say HyperV? HyperV requires an extra setting.

Dude2048

They had a power failure this weekend. Some post are missing because of that.

And V7 depends. Basic features are a go. BGP, OSPF and routing in general is different from V6 in regard to syntax. Some things are not feature complete. So your mileage may vary.

Dude2048

By definition possible. Contact MikroTik for the proper release.

Dude2048

Something like this
https://forum.mikrotik.com/viewtopic.php?t=40467

Dude2048

/ignore

Dude2048

Here you go; #------------------------------------------------------------------------------- # Apply configuration. # these commands are executed after installation or configuration reset #------------------------------------------------------------------------------- :if ($action = "apply&quo...

Dude2048

What Moba said, and now back on topic.

Dude2048

For the production readiness, you are right. For the rest you couldn’t be more wrong. New kernel, new routing engine, new read the rest on this forum.

About playing beta tester, that is a choice!

Dude2048

Most basic setup is https://help.mikrotik.com/docs/display/ROS/Bridge#Bridge-VLANExample-TrunkandAccessPorts For L3 use a router, and only one address for management on this switch. https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching#CRS3xx_series_switches Still in beta, so could be unstable ...

Dude2048

Put them both in their respective holes and try again.

Dude2048

You are using both power supplies at the same time?

Dude2048

Totally off topic because i couldn't find the mail button to do this in private, but how do you make the switch to the card with the better signal? It is a fairly new situation for me and maybe you could help me with signal levels to watch.

Dude2048

There is no hw ipsec on the 5009. But I see now that you already know that.

https://forum.mikrotik.com/viewtopic.p ... ec#p875278

Dude2048

*) added "Windows" menu for list of all currently opened windows; *) added separate "Show Columns" window for list of visible columns; *) allow changing column order by using drag and drop; *) made "Terminal" window titles unique; Thanks for these improvements. Very use...

Dude2048

We run 125+ 4011's. No problems with them. Same for 1100 AHX4 series.

Dude2048

The 125 is stil useable. Take a traditional setup with trunking and use it in conjuction with the 3xx series.

Dude2048

According to the manual, the crs125 doesn’t work in this setup.

Dude2048

I have the same speeds, so something must be off. Have you tried a proper spectrum analyzer?

Dude2048

Dude2048

https://wiki.mikrotik.com/wiki/Manual: ... sec_tunnel

Dude2048

Thanks for your post.

Dude2048

is, under system -> packages, the wireless package enabled?

Dude2048

Reverted back to 6.47.9. Problems are solved.

Dude2048

And that make three of us. Still looking for a cause

Dude2048

Can you post your configs?
Don't forget export hide-sensitive

Dude2048

First of all, ipsec is not a routing protocol, it is a policy. If you can ping all the addresses in your network you're ready to implement ipsec. So you have to solve that first. Then https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Application_Examples Menu ip -> ipsec Configure peer Configure identi...

Dude2048

Nevermind....

Dude2048

If you want to keep it managable, use a CHR. Set the time on the pollers a little longer and change the retention time for the collected data. The database will stay smaller and more manageble. This works loke a charm for up to 1500 devices, but 5000.... Best not to make promises or try other manage...

Dude2048

When it comes out of the box, there is a standard configuration on the device. Port 1 is the WAN port, the rest LAN. Port 1 is also a DHCP client. A default firewall is present. Don’t forget to setup the admin password. The little leaflet in the box should get you going. Look on the MikroTik channel...

Dude2048

https://m.youtube.com/watch?v=rv3vVamcSbk

I assumed there was a button. There is not. The two half moon is the reset.

Dude2048

A small hole with reset written. Paperclip needed. Poe should work.

Dude2048

No power.
Push the button and keep it pressed.
Plug in the powercable.
Wait until user led starts blinking.
Release the clip

Dude2048

Thank you!
for who?, for what?

please

Dude, stay on the subject of this forum, open a post of your own and stop cross posting.

Dude2048

Bw test is cpu intensive. So slow speeds are expected. Use iperf with a laptop. Gives better results.

Dude2048

Thanks. Will try it in a few days.

Dude2048

Install hyperv and a chr. Suits your case.

Dude2048

Did you look at the Cisco log what the cause was. I have an idea, and if you look at the Cisco log, you can google it and have the same idea. It is called "Pointing someone in the right direction" .

Dude2048

Most likely bpdugard. Check Ciscolog for error reason.

Dude2048

I will stop hijacking this post with this one last question. Sib, did you manage to resolve this recursive load balancing with LTE?

Dude2048

What Anav said, and thanks. I will try to build this in the weekend and provide some feedback.

Dude2048

I understand the mangle bit, I use it to. But why the recursive part?

Dude2048

Can you give an example config so that I can see how you put it together?

Dude2048

Netinstall

Dude2048

What do you suggest to improve it? Ranting is the easy part.

Dude2048

Thanx, higher than I expected. Nicely done.

Dude2048

It a bit early so I created an example. #<---- Main Mikrotik config ----> /interface bridge add name=Loopback /ip ipsec policy group add name=IKE2Group /ip ipsec profile add dpd-interval=5s dpd-maximum-failures=2 enc-algorithm=aes-256 hash-algorithm=sha256 name=IKE2Profile /ip ipsec peer add exchang...

Dude2048

I have tried the implementation from the presentation. It works pretty good and fast, but the problem is perfectly described. you can't take over a devce on the remote site. With some minor tweaks you kan have traffic in both directions and still have a road warrior setup. So that is why I asked his...

Dude2048

Please post relevant config so that I can take a look.

Dude2048

I understand where this is coming from, but please dump the / notation.

Dude2048

You have to push the button and be in the same network (L2). Sent a new one by post.

Dude2048

What have you done to answer these questions.

SSH for the device. Something like a tunnel or port forwarding to manage the camera's.
Wiki has an article as a starting point.
Dude / LibreNMS
Yes
Yes

Dude2048

Frequency 5180, 5200, 5220 and 5240 ( channel 36,40, 44 and 48).

Dude2048

Mikrotik cannot make the ideal device! Why it wasn’t easy to make support for USB, memory cards and several miniPCI-E slots and of course the ability to connect or immediately complete an SSD. In my opinion better to make one universal device that will be easier to maintain. Marketing, damn it ... ...

Dude2048

@pcunite
Thanks for the hard work.

Dude2048

I do not have time to look at your code right now, but i should tell you that this model in routing mode will perform in average about 240Mbps... Also all the CRS1xx and 2xx series do not support hardware offload with vlans, so you increase the CPU useage there.. Also you increase the CPU usage sin...

Dude2048

As of today (and a lot of days before) MikroTik is using the long term supported kernel (4.x) for Ros7. So it wil take a while.

Dude2048

Pics please.

Dude2048

The first two examples... https://wiki.mikrotik.com/wiki/Manual:CAPsMAN#Basic_configuration_with_master_and_slave_interface These example are for different SSID on the same AP I have a one SSID for each AP. This an example where to configure the access points and the security rules. Read the manual...

Dude2048

The first two examples... https://wiki.mikrotik.com/wiki/Manual:C ... _interface

Dude2048

support@mikrotik.com or https://mikrotik.com/support. This is a user forum.

Dude2048

What I have read is that your performance is good. MikroTik writes their own drivers and it seems to be close to the max. Other forums mentions this speed also. Your question is complete so why nobody answers....

Dude2048

Had the same thing. I disabled via SSH the winbox ip service en enabled it again. That worked for me.
@Normis, Great photo!

Dude2048

L2TP works... There used to be a site, nasa security, with a tutorial. The site is no longer up. Maybe internet archive or something like that.

Dude2048

There are big changes between the two versions. Open a new topic with your config and so on, or contact MikroTik support.

Dude2048

You are a bit short on information, so maybe that's why no one responded.
My best guess is to mangle the traffic and mark it. Then route the marked packets through the gateway (interface) of choice.

Dude2048

Or something with a script on the server which invokes this;
https://wiki.mikrotik.com/wiki/Manual:S ... e_commands

Dude2048

You are not the only one.
Read this there could be a solution for you in there. viewtopic.php?f=21&t=154444

Dude2048

Same issue here with 3 different RB1100AHx4. The situations happens with < 7 days uptime. During the incident, the devices don't accept new SSH, Winbox, SNMP or PPTP connections to the router itself. Also logins via CLI aren't possible (serial connection is possible; login doesn't work). We tried t...

Dude2048

I have two lte interfaces so yes, it should go into two different variables. It’s two o clock right now, I will test it some time in the morning. At first sight it solves the problem with the internal interface id’s.

Dude2048

Two LTE interfaces on a RBM33G. I tried, with the script below, to extract the RSRP in a variable. But there is a strange reaction from RouterOS. In the first part it wil return with, say, index 4. The LTE interface can be asked out on the fourth position. If you look at the interfaces pane in Winbo...

Dude2048

At last... Hope sooner than later.

Dude2048

The way i read your first post, your problem wasn’t that obvious to me. I can understand your frustation. Can you post your config with a hide sensitive?

Dude2048

Ip route disable [find dst-address=0.0.0.0/0 gateway=xx.xx.xx.xx]
:log error "ISP2 is down"
:delay 4000 ms
/ip firewall connection remove [find

Dude2048

Perfectly normal behaviour. DFS channels will do that.
Here is some material; https://www.youtube.com/watch?v=ZbrbRUAfpac

Dude2048

Thanks

Dude2048

Looks promising, I will give it a try. One request, can you post a simple yaml config file. It will give me a flying start.

Dude2048

Delete dude package, reboot, delete files

Dude2048

This is a user forum with some assistance from MikroTik. please submit this to support@mikrotik.com

Dude2048

Please run /export hide-sensitive and post it.

Dude2048

*No firewall yet *No NAT. Only the auto generated on the client side (mode config). *Yes true. But the problem is, when I add the correct policy's, it is working until a reconnect or a reboot of the client. From that moment on everything goes wrong. Phase 1 is coming up but phase 2 is going complete...

Dude2048

This is an internal network with CHR's, so forgive the ip addressing scheme. This setup is working, and speedy with the proper hardware. If you are on the road you can reach the server. No problems there. But if I need to acces the client computer it is a one way trip. With this setup I can't reach ...

Dude2048

It is a switch, not a router. It also doesn't have hardware acceleration. https://wiki.mikrotik.com/wiki/Manual:I ... celeration. So 100% is expexted.

Dude2048

Nice article.

Dude2048

Not promised. But the functionality is there. I have not tested it yet.

Dude2048

The only thing so far not working is the Dude who wants to connect to ROS7. SMNP works. I think that that particular sub system is disabled.

Dude2048

Try putting your router on latest v6 Stable or Testing release before upgrading to the v7 beta

Labtest beta? I tried the link on the first page. http://mt.lv/v7

Works like a charm. Thanks.

Dude2048

But do you understand that switching can be done in an efficient way with RouterOS?

Dude2048

I imagine people are going to freak about this
Code: Select all
/interface/ovpn-server/server/set protocol=udp

A very careful dance on the table.

Dude2048

Labtest beta? I tried the link on the first page. http://mt.lv/v7

Dude2048

Tried twice to install V7 on my hap ac2. Bricked the hell out if it.

Thank MikroTik for netinstall...... Wil try beta2

Dude2048

You can’t change it.

Dude2048

Yes I know. I have read their statement. But this is an issue since 2010.... Maybe earlier. I contacted the distributor and said that there is nothing he can do. Since there are literraly thousands of request, MikroTik could listen a bit more serious to some of them. Even though it is a user forum, ...

Dude2048

Dude2048

Something with a proper implementation. Selecting, testing and proof of concept starts within two months.

No further disclosures.

Dude2048

If nothing changes very very soon, I have to replace my tiks. Talking over 3000 devices. Replacements will come, and it won’t be MikroTiks.

My field of work demands ovpn.

Dude2048

Check that nothing is blocked to the internet.
If not; Contact MikroTik support. This an user forum.

Dude2048

CRS3XX is capable of SwitchOS and RouterOS. What are you running?

Dude2048

Single bridge hw offload for crs328

Dude2048

I use it the same way and keep things organized. This script is a big help.

Dude2048

Great work

Dude2048

Did you read the wiki about the bridge chip implementation?

Dude2048

And what about monitoring for SNMP v3 in The Dude?

Same problem for me.

Dude2048

Bad article, and what Normis said.

Dude2048

No. But with the Cisco knowledge you have a general idea what to configure. The learning curve is less steap, but stil there. O, and read the wikis.

Dude2048

Export config. Hide sensitive

Dude2048

https://mikrotik.com/training/

Dude2048

Get the course and do the exam. That is cheaper.

Three wanted postings is a bit much.

Dude2048

Go to users under sytem and check the permission of the full group. Admin should be a member of the full group

Dude2048

Probably DFS. Select a non DFS channel. https://m.youtube.com/watch?v=ZbrbRUAfpac

Dude2048

Pcq queue. Read the wiki. I can’t search for you right now.

Dude2048

Retention 180 days
Poll every 15 minutes
Don’t poll everything. I poll the internet connection. When it overloads I poll the system behind it to find the cullprit. But with trend analytics it is almost not needed.

I do ping every device.

Dude2048

I run a RB1100 dude edition stable with 400 clients, so the chr should be capable enough. What I changed was how it polled, retention and what was polled.

Dude is a good system for up/down and trend analitics.

Dude2048

See the main 6.45.2 tread. There is a problem with the sfp's.

Dude2048

You don’t. Mipsbe is not supported.

Dude2048

For your own safety, scrap them...

Dude2048

From what I have read, no. There is something in VLC that is preventing that.

Dude2048

Thanks TTL it is!!!!

Dude2048

Thanks, I will test the solitions in a day or two and let know if it is resolved.

Dude2048

There are no firewall rules what so ever. The only config on the routers is that what you see.

But thank you vert much for thinking about it

Dude2048

Dude2048

Declare a variable with the temparature in it. If the variable is higher then what you want -> Tool email with variable of the current temp. first do system health print, it wil give you a name for the temp. Then you can declare it. local temp [/system health get temperature] Now you can use it in a...

Dude2048

I tried to create a test multicast network. Example is below. When I start an RTP stream on the VLC server I can pick it up localy. So that is running The stream uses an address of 224.0.1.1. However the client won't connect to the stream on the server. When I setup a simple bridge with two ports in...

Dude2048

I have a RB1100ahx4 Dude edition which has the same behavior. What happens is that the memory hogs and the device will become inaccessible. I have a script that reboots the device when 70% is used. During the times that it is inaccessible I tried to make a supout, via console, but that didn't work.

Dude2048

Is this a giant Tell-Sell storyboard or what? This is advertisement for an unrelated business to MikroTik.
MikroTik please end this thread. It is not about support, but about profit for another company.

Dude2048

The firmware could be correct. They started the renumbering around that time, if I remember correctly.

There should be an entry in the log why it is not installing.

Dude2048

Basically what works for me; CCR /interface vlan add interface=ether5 name=ether5Vlan99 vlan-id=99 add interface=ether5 name=ether5Vlan100 vlan-id=100 add interface=ether5 name=ether5Vlan200 vlan-id=200 add interface=ether5 name=ether5Vlan300 vlan-id=300 Patch between "ether5 CCR" - "...

Dude2048

Should be something like this https://wiki.mikrotik.com/wiki/Manual:S ... s_Ports.29

Dude2048

Got a CCR 1036 running with 900 users and 107 AP. So monitor your 1009 and upgrade if needed. Using one bridge and a separate management interface.

Dude2048

Quote from second thread:
Yes, it is kernel level and is very hard to fix, since RouterOS v6 has an older kernel version and we can't just change the kernel.
Is that v7 announcement? Hurray!

You have made my day!

Dude2048

Please let go off the caps lock and post your config with hide sensitive. Maybe then we are able to help.

Dude2048

Buy a ccr.

Dude2048

Great work. Normis, make this topic sticky..

Dude2048

viewtopic.php?t=121158

Search found 230 matches