February 2016 - Public - talk.mikrotik.com.au

Simple Queue behavoir with mixed dynamic and static queues
by Paul Julian 23 Feb '16

23 Feb '16

Hi All, just wondering if anybody has noticed this functionality in Simple Queues before, it kind of makes sense that it does it but kind of doesn't as well. The scenario goes like this. You have a backhaul for a site, let's say it's 50M, it connects into a RB1100AHx2 for example, so you have a simple queue on that interface to keep it just under that because it's a MEF and it will drop packets like a bitch if you let it go over. This site runs PPPOE termination for a couple of users for example, so when you add your queue for the backhaul interface the other queues then come in after it once the users log in, so for some reason simple queues work in order somehow, so all my user queues below the backhaul queue somehow inherit the speed setting on the backhaul queue, it's like the queue limits are totally ignored on the user queues. If I have 50M limit on the backhaul queue and 10M limit on my user dynamic queues they all get access to more than 10M and spike up to the 50M limit of the backhaul queue. So if I move the backhaul queue to the bottom, or tell the PPP profile to put the user queues above the backhaul queue then the user queues behave correctly but the backhaul queue seems to get some random traffic and never the total for the interface. The way I setup the backhaul queue is just simply set the target to equal the backhaul interface name and set my upload and download speeds, nothing else. I have come across this issue before and the only way I could find around it was to change the backhaul queue to be a queue tree queue and use mangle rules to mark the traffic. Has anybody had this issue before ?, am I just trying to do this wrong ?, is it broken or working by design or what ?, any suggestions ?? Thanks Paul

2 3

question re vlan tagging
by kevin＠scottsip.com.au 22 Feb '16

22 Feb '16

Hey there, Can you use a mac filter to set say polycom handsets to vlan 101 and everything else to vlan 100 per say ? Regards, Kevin Scott

2 1

spid ce9 is not found
by Dave Browning 22 Feb '16

22 Feb '16

Hi All, Anyone seen this error before when trying to get IPsec working? Google comes up with nothing. “spid ce9 is not found” Cheers, Dave Dave Browning | Systems Engineer P 07 3369 7666 Level 1, 12 Railway Tce, Milton QLD 4064 This email and any files transmitted with it contain confidential information for the exclusive use of the intended recipient. If you received this email in error please notify Sentrian Pty Ltd immediately by return email to the sender and delete the original email. We do not guarantee that this email or any attached files are free of viruses. All recipients should undertake their own virus scanning.

1 0

CRS stacking ?
by Paul Arch 22 Feb '16

22 Feb '16

Hi, Is it possible in some form of configuration to have a pair of say CRS226 operating in a stack-like fashion, so as to say do a LAG to another pair of switches for redundancy. ie: [CRS-SW01] [SWITCH-01] || |_______________| || || ( LAG-01 ) || [CRS-SW02] [SWITCH-02] |_______________| Sorry if that diagram doesn't render properly thanks ! Paul Arch

3 2

Radio Strangeness
by Denis Hancock 09 Feb '16

09 Feb '16

Maybe you have seen this strangeness before ? I stumbled across an issue where devices would not connect to Mikrotik Radios (wAP, cAP - Atheros). Turns out that Channels 7,8,9,10 don't work for us, we came across this where we were deploying a dozen wAP's using CAPsMAN and we had the system set to "auto" frequency. Channel 7 would sort of work with some stations but they would not pickup an IP address and association was flaky, others would not connect at all. In testing, we went through each channel by selecting the exact frequency, 2412, 2417 and so forth. Connecting to channels 1 through 6 and 11 were reliable. Other channels did not work at all. Using my WiFi analyzer, nothing was coming out of the Radio (7-10) (according to my laptops Radio). I reckon there was but the "incompatibility" was giving me a herring. I've tried with Spectralink SIP Handset, Apple Devices (Phone Tablet etc) and Dell equipment. The challenge now is to limit CAPsMAN to only (automagically) assign 1, 6 or 11 -- Best Regards Denis Hancock | Network Support | 1300 139 593 Skype denis.hancock.melbourne | http://www.samurai.com.au

2 2

CCR Kernel Failures
by Paul Julian 04 Feb '16

04 Feb '16

Hi guys, we have had a number of CCR's in use for quite a while now with no real problems to speak of. In the last 3 days though we have had two routers reboot out of the blue and report kernel failures, these routers had been up for over 400 days without issue and just rebooted out of the blue at different times. They were both running 6.22, I have upgraded one to the latest OS version and done a firmware update, I can't touch the other as it's a major router so will have to schedule an update to it, but I Was wondering if anybody else had experienced this fault and conclusively resolved it with updates ? Regards Paul

5 5

CGNAT implementation with routerOS
by Mike Everest 03 Feb '16

03 Feb '16

Hi all, I thought members of this list may be interested in results of some discussions that I have been having over last few weeks with tech team at MT regarding CGNAT implementations and RFC7422. In reaction to these duiscussions, Janis M and Maris have put together an article on the subject here: http://wiki.mikrotik.com/wiki/Manual:IP/Firewall/NAT#Carrier-Grade_NAT_.28CG NAT.29_or_NAT444 Two important points coming out of this discussion are: 1) src-nat table does not have major impact on CPU resource since only the first packet of the connection parses this table, therefore it is OK to have very large numbers of rules with no need for partitioning via multiple jump rules 2) a script published by Maris and Janis offers an effective way to build CGNAT rules with flexible definitions of src-port grouping When we started talking about this, I was asking for feature to make a CGNAT rule like that using just one entry, and although I still think that such a feature enhancement would be particularly valuabe, this scripted result achieves pretty much exactly what I was asking for ;) THANK YOU Maris and Janis M :-) Cheers, Mike.

4 4

RB SXT LTE
by Thomas Jackson 02 Feb '16

02 Feb '16

Good morning all, Just wondering if anyone has tested out an RB SXT LTE in AU yet (specifically with Telstra)? From my understanding, all three networks have band 3 and/or band 7 coverage in metro areas, so I suspect it will work. I've had a chat to Duxtel and they advised that they're not planning on bringing it in at this stage (unless I want to special order a carton of them); it would be nice to know if it might work before I order one from overseas. Regards, Thomas

6 9

6.34 reset issue turns RB-941-2ND into paper weight
by Andrew Gilbett 01 Feb '16

01 Feb '16

Hi Guys, I was playing with some RB-941-2ND's and I upgraded them to 6.34 and I am now unable to log in to them after a reset. Basically I set up a CPE style config using pppoe and mistyped the password and therefore reset it to get back in and following a reset it did not respond on 192.168.88.1 at all. Is there any way to bring these devices back to life? I have tried netinstall with out any luck and multiple resets. Any help would be appreciated. Thanks Andrew

4 3