March 2017 - Public - talk.mikrotik.com.au

CCR 1072 and SFPs
by Alex Samad 16 Mar '17

16 Mar '17

Hi I just tried one of my SFP 1G - original a Dell spec SFP, I had thought it would work in a CCR, my dell spec DAC's do ... Any way when I insert the SFP I see no log line item to say SFP inserted ! Are the CCR locked down in any way to SFP this is the sfp I have http://www.sfpex.com/320-2879 and need to replace with a comparable one for the CCR Alex

1 1

MicroSD cards
by Alex Samad 16 Mar '17

16 Mar '17

Hi has any one had any issue with microSD cards not working in CCR's. Alex

1 0

RouterOS hardening and notifcation setup
by Alex Samad 16 Mar '17

16 Mar '17

Hi Wonder what people do to harden their ROS boxes I have based my stuff of this https://www.manitonetworks.com/mikrotik/2016/5/24/mikrotik-router-hardening pretty sensible stuff then https://wiki.mikrotik.com/wiki/Securing_New_RouterOs_Router I like the section on /system logging which is what I am looking at now. Any gotchas to logging to disk. Seems like I can log any message to disk and remote .. Alex

2 2

ipv6 on routeros
by Alex Samad 13 Mar '17

13 Mar '17

Hi If I have the system package ipv6 disabled. I presume that no don't have to worry about IPv6 on my router. ie no firewall rules and not having to worry about ssh attempts etc etc. But it seem thats I can still sniff ipv6 packets. is that about right ? Alex

2 1

CCR / Routeros
by Alex Samad 09 Mar '17

09 Mar '17

Hi can they handle /31 networks ? Alex

6 6

Kernel Failures
by Paul Julian 08 Mar '17

08 Mar '17

Man what is it with kernel failures at the moment, it must be the weather, anybody else seem to be getting a few lately ?? We have seen two in two days from totally different device types, both critical devices of course.... Regards Paul

7 11

multi VRF
by Alex Samad - Yieldbroker 06 Mar '17

06 Mar '17

Hi Asking the list again, sorry my google skill on archive search is letting me down. So a quick recap ccr1036 & ccr1072 I have Interface Xfer - bridge port onto eth1, this was the interface is also up , 192.168.1.1/24 Management - vlan 8 Vendor - vlan 7 Internet - vlan 6 My default routing table is 192.168.1.0/24 Xfer Dgw 192.168.1.2 My internet I have vrf internet and I use BGP with routing tag internet Same for vendor and same for management So management routing table is basically Local attached network 10.10.10.80/24 Dgw 10.10.10.1 I have the appropriate ip route vrf and ip route rule lines and I also have mangle lines that mark inbound packets and re applies marking on the outbound packets What happens is any ICMP generate locally ... host / net unreachable are generated with src address 192.168.1.1 not the right src address for the vrf. I have tried snat lines basically saying if src address = 192.168.1.1 and out interface = management then change to the 10.10.10.80 << this doesn't work. I seem to remember somebody saying they had fixed this some how? If so can you please repost. I have chatted with support... basically they say yes bug, will not be fixed until V7 .. maybe next century ... Any one know of any work arounds ? Thanks Alex

3 2

Scripting question
by Alex Samad 06 Mar '17

06 Mar '17

Hi if I do something like this /route ospf interface :if ( [ print count-only ] > 0 ) do { <something> } when I import the script (and it runs), the number of items in print count-only get printed as well. I tried :local A [print count-only] but still it prints it when the script it run Any one know how to stop that ? A

2 2

EOIP Tunnel Drop
by Paul Julian 06 Mar '17

06 Mar '17

Hi All, we have had a few EOIP tunnels just die recently between Mikrotik Routers. Some have been running happily for years and then just stop, disable/enable makes no difference. The only way to fix the problem is to either change the tunnel ID or create a whole new interface on each end. Has anybody come across this before ? Regards Paul

2 4