February 2015 - Public - talk.mikrotik.com.au

BFD + CCR1036
by Alex Samad - Yieldbroker 24 Apr '15

24 Apr '15

Hi I have a few CCR1036-8G-2S+, (6.22) I tried turning on BFD with OSPF. My first hurdle was BFD doesn't work by itself ! I then associated it with a OSPF interface, which had 4 nodes on it. Turned it on all 4 nodes.. worked for a while then up / down flapping ... I ran some tests sending flood pings down the line, no missed packets ! My final test, 2 of these boxes side by side, 1 cross over cable. Turned on OSPF + BFD, started to fail :( I have a nice simple firewall rule 10 ;;; Allow BFD chain=input action=accept protocol=udp dst-port=3784 log=no log-prefix="" I do have a drop invalid before it, but that should affect it and for a period of time BFD does come up. I have it attached to one of my BGP peers on a ROS VM, it seems to work fine. So I'm leaning toward an issue with CCR's So anyone else using BFD with CCR's and OSPF ? Alex

4 14

LTE/4G USB Modem
by Alen Orsolic 10 Mar '15

10 Mar '15

Hi All, Due to a number of recent enquiries I am seeking feedback as to known working 4G USB modems, in particular Telstra network supported devices. As we don't stock or use any ourselves any comments and or suggestions would be greatly appreciated. I have canvassed the MikroTik hardware support Wiki, but would appreciate any positive working and in production solution. A number of customers are looking at implementing a failover based product but, current 4G USB modems purchased from Telstra have yielded unsatisfactory results. Regards, Alen

4 11

Telstra Ethernet Access Shaping Guide
by Paul Julian 27 Feb '15

27 Feb '15

Hi Guys, I thought it might be worthwhile to put some information together for Telstra Ethernet Access services based on the MEF standard. This is a loose guide based on the Telstra TSIS documentation which isn't helpful for Mikrotik so I have attempted to convert the Cisco parameters to Mikrotik based on the information in the TSIS guide and also from personal experience. Please provide feedback if you think these figures work or don't work, I'm happy to update them as we keep rolling out links and any suggestions would be welcome and be shared on this list as they can be a challenge to get right and the slower links really suffer from Telstra dropping packets if they aren't configured right. L2 Speed Mbit/s L3 speed Mbit/s Limit-at kBit/s Max-limit kBit/s Burst kBits/s Queue Type Queue Size Packets MTU Size 6 5.88 5880 5976 96 pfifo 8 1596 8 7.84 7840 7960 120 pfifo 9 1596 10 9.8 9800 9960 160 pfifo 13 1596 20 19.6 19600 19920 320 pfifo 25 1596 30 29.4 29400 29840 440 pfifo 34 1596 40 39.2 39200 39696 496 pfifo 39 1596 50 49 49000 49640 640 pfifo 50 1596 60 58.8 58800 59520 720 pfifo 56 1596 70 68.6 68600 69400 800 pfifo 63 1596 80 78.4 78400 79360 960 pfifo 75 1596 90 88.2 88200 89240 1040 pfifo 81 1596 100 98 98000 99400 1400 pfifo 110 1596 150 147 147000 148760 1760 pfifo 138 1596 200 196 196000 198080 2080 pfifo 163 1596 300 294 294000 298000 4000 pfifo 313 1596 400 392 392000 396800 4800 pfifo 376 1596 500 490 490000 496800 6800 pfifo 533 1596 600 588 588000 595200 7200 pfifo 564 1596 800 784 784000 792000 8000 pfifo 627 1596 1000 980 980000 988240 8240 pfifo 645 1596 Regards Paul

2 3

problems posting?
by Mike Everest 27 Feb '15

27 Feb '15

Hi all! I dicovered this afternoon that this list was set for maximum message size of just 40k - any email larger than 40 was being uietly discarded :-} So if you were attemtping to post, and wonder why they were not forwarded, it might be related to large content or attachments or large sig etc. I upped it to 2M, so most of it should work now - even so, I suggest that it would be nice to refrain from sending large chunks of content inside posts to the list ;) Comments are welcome! Cheers! Mike.

1 0

Re: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 27 Feb '15

27 Feb '15

All, feedback from the 'OP': >> Hi Mike, the queue length tip may well have done the trick! I reiterated that it wasn't /my/ suggestion, and that he should join us and thank the right people personally ;) Thank you from me too :-) Cheers, Mike. ---------------------------------------------------------------------------- -------- Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ---------------------------------------------------------------------------- -------- Follow our tweets for news and updates: http://twitter.com/duxtel > -----Original Message----- > From: Stavros Patiniotis [mailto:stavros@staff.esc.net.au] > Sent: Thursday, 26 February 2015 2:39 PM > To: Mike Everest > Subject: RE: [MT-AU Public] NBNCo wireless service triggers traffic police, > fiber services do not > > Please do summarise findings to list if you have good off-list information > :) > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Mike Everest > Sent: Thursday, 26 February 2015 1:54 PM > To: 'MikroTik Australia Public List' > Subject: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber > services do not > > Thanks for all replies, on and off list - further comments are (of course) VERY > welcome :-) > > It all makes good sense to me, and I'll pass those comments and suggestions > along. > > See you all at the MUM in May! ;) > > Regards, Mike Everest. > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0

NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

Hi All! Earlier this week, I received a report from some guys using CCR to terminate ppp sessions over NBNCo tails and reporting that although fiber services worked perfectly, customers on wireless service continually hit traffic policer with result being download speeds about 1/2 of expected max. Again this morning, I received similar report from different operator :-( haven't confirmed what routerOS version for either of them yet.. Has anyone else seen this happen? Would setting output limit at client end ease that behaviour? Any/all comments, suggestions welcome! :-} Mike.

5 6

Re: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

Hi Stavros, These guys are both doing their NBNCo 'technical onboarding' testing in Melbourne this week, and came up against this one. We saw it too, but it was across the board and not just related to wireless which kind of got me stumped. Now that I think of it, pretty much EVERYONE who goes through the NBN testing processes come up against the same problem, though anecdotally it seems to hit in slightly different ways - just wireless, only above a certain data rate, across the board... maybe it's related to different routerOS release, maybe there are differences in the NBNCo network setup at different times... In any case, I will certainly report back on findings if they report them to me :-} Often as soon as the problem is solved, it is too easy to forget about that one and just go on to the next problem without getting back to the folks who assisted. That happens to us all the time! :-D Mind you, I don't think badly of someone who does that - I am well aware of the kind of pressure that your average network dude can come under in a busy NOC environment! :) I always encourage folks to join this list, since the questions posted and comments offered are always high level and useful for probably everyone else subscribing! :) I reckon that this forum is a wonderful 'meeting of minds' for all of these kind of el'wierdo routerOS problems that come up from time to time - hope it stays that way or keeps getting better! Cheers! Mike. > -----Original Message----- > From: Stavros Patiniotis [mailto:stavros@staff.esc.net.au] > Sent: Thursday, 26 February 2015 2:39 PM > To: Mike Everest > Subject: RE: [MT-AU Public] NBNCo wireless service triggers traffic police, > fiber services do not > > Please do summarise findings to list if you have good off-list information > :) > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Mike Everest > Sent: Thursday, 26 February 2015 1:54 PM > To: 'MikroTik Australia Public List' > Subject: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber > services do not > > Thanks for all replies, on and off list - further comments are (of course) VERY > welcome :-) > > It all makes good sense to me, and I'll pass those comments and suggestions > along. > > See you all at the MUM in May! ;) > > Regards, Mike Everest. > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0

NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

Thanks for all replies, on and off list - further comments are (of course) VERY welcome :-) It all makes good sense to me, and I'll pass those comments and suggestions along. See you all at the MUM in May! ;) Regards, Mike Everest.

1 0

Simple queues by MAC
by Paul Julian 24 Feb '15

24 Feb '15

Hi guys, I am working on a little project at the moment which requires queuing traffic based on MAC address. I want to be able to queue traffic upload and download using one simple queue, simple enough right.....I can do this with my eyes shut with an IP address by just setting the target IP in the simple queue but obviously that's no good in this situation. The problem is no matter what I do I get download matching but not upload. I have setup the usual connection mark and packet mark queues and told the connection mark queue to use a source MAC address to identify the traffic, I have tried the prerouting chain and forward chain. Example: chain=forward action=mark-connection new-connection-mark=MAC-con passthrough=yes src-mac-address=MAC chain=forward action=mark-packet new-packet-mark=MAC passthrough=no connection-mark=MAC-con name="queue" target="" parent=none packet-marks=MAC priority=8/8 queue=default/default limit-at=100M/100M max-limit=100M/100M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default The way it needs to work is that upload traffic will be heading out the PPPOE interface to the net and download traffic will be going into a bridge which has 4 ethernet ports in it, then out to the PC. I really don't want to do it in queue tree as I want to keep it as simple as possible so either I am missing something stupidly obvious here or something is broken. Any Suggestions please ?? Thanks Paul

3 8

BGP Community Matching
by Nick Pratley 13 Feb '15

13 Feb '15

Hey there, I have a question regarding BGP community matching on a Mikrotik, I have the following configuration: 0 chain=peering-out bgp-communities=ASN:XXX invert-match=no action=accept set-bgp-prepend-path="" 1 chain=peering-out protocol=bgp bgp-communities=ASN:XXX,ASN:ASN invert-match=no action=accept set-bgp-prepend-path="" 2 chain=peering-out invert-match=no action=discard set-bgp-prepend-path="" I am trying to match all routes, if they have ASN:XXX in one of the communities. For example, This is matched: 0 ADb dst-address=X.X.71.0/24 gateway=X.X.137.252 gateway-status=X.X.137.252 recursive via X.X.137.17 VLAN2803 distance=200 scope=40 target-scope=30 bgp-as-path="132839" bgp-local-pref=400 bgp-origin=igp bgp-communities=ASN:XXX received-from=BDR-1-3 This is not: 0 ADb dst-address=X.X.31.0/24 gateway=221.121.137.255 gateway-status=221.121.137.255 recursive via X.X.137.17 VLAN2803 distance=200 scope=40 target-scope=30 bgp-local-pref=100 bgp-med=0 bgp-origin=igp bgp-communities=ASN:XXX,ASN:ASN received-from=SW-1-1 Any ideas? Cheers Nick

2 3