May 2017 - Public - talk.mikrotik.com.au

xDSL SFPs
by Thomas Jackson 09 Aug '17

09 Aug '17

Good afternoon all, I remember some discussion earlier in the year about xDSL SFPs in AU. Did anyone manage to find one that worked? We've got a few sites coming up for refresh in the next month or so and it would be nice to move away from our standard deployment of an RB with a TPLink double-sided-taped together. All sites currently have ADSL2+ connections - and all are allegedly getting NBN FTTN or FTTdp in the next 12-18 months so it would be great to have something supporting both (although given that the office I'm sitting in at the moment had NBN fiber pulled in a couple of months ago which is still not ready for service, I'll believe that last part when I see it...). Thanks!

8 24

UPS Serial Cable
by Paul Julian 29 Jun '17

29 Jun '17

Hi guys, we have got some APC UPS's with the serial DB9 connections on them but need to connect them to Mikrotik RB2011 and RB1100AHx2 models. Does anybody have any suggestions on a cable to suit ? The problem is they are both setup to be the B end of the situation and not the MT setup to be the A end and the UPS as the B end. I was thinking of a gender bender but don't really want to do that if I don't have to..... Any thoughts would be appreciated. Thanks Paul

6 10

Locking Wireless Data Rates
by Paul Julian 31 May '17

31 May '17

Hi All, I'm just wondering what people consider as best practice when working with wireless signals that fluctuate a little and associated fluctuations in data rates. I don't think I have ever really seen a typical data rate that doesn't fluctuate somewhat, but I am interested to know whether most people monitor sync speed and then lock the maximum sync speed by using the supported data rates option. For example if you have a connection which is jumping around between 130M and 144M would you lock it at 130M or just let it move around ? Whichever option you would use why do you choose this option and what are the benefits ? We have quite a lot of wireless links and traditionally we let them move around as they want, but as we starting do more QOS on our links I am starting to think about pulling them back so they don't fluctuate so that we can be more certain of what actual bandwidth we will get to a site across that link and use QOS in a better more manageable way. Thanks Paul

2 3

SSL Acceleration
by Andrew Gilbett 29 May '17

29 May '17

Hi Guys, I am wanting to know which MT devices support SSL Acceleration, if any? The purpose is for openvpn usage. Thanks Andrew

2 1

PPPoE VRF
by Dave Browning 26 May '17

26 May '17

Howdy, I've built some janky script that's applied 'on up' to a PPP profiles that puts the dynamic PPPoE interfaces into a VRF. Anyone got any better ways to do that? Any word if MT are going to add this as an option to PPP profile? Seems a fairly common use case. Cheers, Dave

3 3

BGP convergence
by Alex Samad 17 May '17

17 May '17

Hi Question 4 routers (CCR's), each has connection to Internet vlan. each connect to a ISP. call them a b c d. there is a vrrp on the internet vlan which is used as dgw. receiving full table from ISP, so somehere between 800k-1.2M prefixes. I go onto router a and disable the isp link. I can see inbound slowly peeter off The interesting things is that the DGW disappears from the route table on router A, but routers B,C,D still have all the prefixes advertised from the ISP connected on router A, still in their routing table. so packet hit the VRRP and then get routed to router A, it has a iBGP DGW and sends it back to router B,C,D, they check routing table and send it back to router A. loop . death. took about 3 min for the routes to be pulled from the routing table in B,C,D. How can I make this/convergence work faster, can I ? Alex

2 2

BFD /OSPF with PA-3060
by Alex Samad 09 May '17

09 May '17

Hi trying to setup OSPF with BFD between ccr1036 and PA-3060. the CCR can see the OSPF init, but fails because of BFD. I have 2 PA's and they can see each other ! when i check /routing bfd neighbor> print detail I see no rx for the PA's to the CCR. Alex

2 2

Re: [MT-AU Public] Public Digest, Vol 39, Issue 4
by Steve Hille 04 May '17

04 May '17

Hi Mike, I haven't tried yet, has anyone else faced this same issue? I'll try to roll it back if I'm on my lonesome with this one. Cheers, Steve On Thu, May 4, 2017 at 10:00 AM, <public-request(a)talk.mikrotik.com.au> wrote: > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: Mikrotik options for fast IPSEC throughput (Mike Everest) > 2. BGP convergence (Alex Samad) > 3. Re: BGP convergence (Damien Gardner Jnr) > 4. SSH in RouterOS 6.39.1 (Steve Hille) > 5. Re: SSH in RouterOS 6.39.1 (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 3 May 2017 11:56:14 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Mikrotik options for fast IPSEC throughput > Message-ID: <1b2101d2c3b0$728d50d0$57a7f270$(a)duxtel.com> > Content-Type: text/plain; charset="utf-8" > > Watch out for the RB1100AHx4 coming soon - 'dude edition' features 4 core > 1.4GHz cpu, accelerated encryption (for up to 2200mbps IPSEC) and included > 60 gig microSD storage. > > Available soon at 'you know where' ;-) > > Cheers! > > Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Chris Herrmann > > Sent: Wednesday, 3 May 2017 10:31 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] Mikrotik options for fast IPSEC throughput > > > > Hi all, cross-posting from ITPA apologies for any duplication... > > > > > > > > I have a MK RB2011UAS at home and it works a treat. But? in the real > world > > it will only handle about 16Mbps IPSEC throughput and flakes out after > that. > > This model has been brilliant because heaps of features, it works? and > it?s > > cheap. But it obviously won?t scale to 100Mit throughput, let alone 100+. > > > > > > > > So? just wondering what Mikrotik options I can look at after this model? > > > > > > > > - Will be running dual wan > > > > - Don?t need POE or Wifi > > > > - Needs to be faster than the RB2011 specifically when handling > > IPSEC. > > > > - Prefer Gbit interfaces but not required > > > > - If it?s in the same ?family? as the RB2011 that would be good > > > > > > > > It?s for a small office so not looking for anything carrier grade. But > internet > > speeds have moved on (sort of) finally? > > > > > > Cheers, > > > > > > Chris > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Message: 2 > Date: Thu, 4 May 2017 10:42:14 +1000 > From: Alex Samad <alex(a)samad.com.au> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: [MT-AU Public] BGP convergence > Message-ID: > <CAJ+Q1PWJPVW5wxNBVxNjUBw0hZuL8T+6Z1uWbRw+zBUMHsacCA@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi > > Question > > 4 routers (CCR's), each has connection to Internet vlan. each connect to a > ISP. call them a b c d. > > there is a vrrp on the internet vlan which is used as dgw. > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > I go onto router a and disable the isp link. > > I can see inbound slowly peeter off > > The interesting things is that the DGW disappears from the route table on > router A, but routers B,C,D still have all the prefixes advertised from the > ISP connected on router A, still in their routing table. > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > and sends it back to router B,C,D, they check routing table and send it > back to router A. loop . death. > > took about 3 min for the routes to be pulled from the routing table in > B,C,D. > > How can I make this/convergence work faster, can I ? > > Alex > > > ------------------------------ > > Message: 3 > Date: Thu, 4 May 2017 10:58:06 +1000 > From: Damien Gardner Jnr <rendrag(a)rendrag.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] BGP convergence > Message-ID: > <CAPrfDLU46aRrEzgdb7FuEoEx2kq-9h4=b5DnDL1=1HaC+cUMmQ@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > The way I used to get around this was to not carry a full table. Each > router would filter the accepted routes to default route, and one or two AS > hops on each ISP. Then I preferenced my cheapest transit provider as the > best default route. > > Convergence was MUCH faster :) > > On 4 May 2017 at 10:42, Alex Samad <alex(a)samad.com.au> wrote: > > > Hi > > > > Question > > > > 4 routers (CCR's), each has connection to Internet vlan. each connect to > a > > ISP. call them a b c d. > > > > there is a vrrp on the internet vlan which is used as dgw. > > > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > > > > I go onto router a and disable the isp link. > > > > I can see inbound slowly peeter off > > > > The interesting things is that the DGW disappears from the route table on > > router A, but routers B,C,D still have all the prefixes advertised from > the > > ISP connected on router A, still in their routing table. > > > > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > > and sends it back to router B,C,D, they check routing table and send it > > back to router A. loop . death. > > > > took about 3 min for the routes to be pulled from the routing table in > > B,C,D. > > > > How can I make this/convergence work faster, can I ? > > > > Alex > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > -- > > Damien Gardner Jnr > VK2TDG. Dip EE. GradIEAust > rendrag(a)rendrag.net - http://www.rendrag.net/ > -- > We rode on the winds of the rising storm, > We ran to the sounds of thunder. > We danced among the lightning bolts, > and tore the world asunder > > > ------------------------------ > > Message: 4 > Date: Thu, 4 May 2017 09:21:40 +0800 > From: Steve Hille <stevehille84(a)gmail.com> > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: > <CAB+S9V9Bs5iN+0UXkETj17KgEnTt4SzexjzyutasLS5 > cdybq1Q(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Greetings all, > > I downloaded the latest version this morning as a test on one of our > devices and now I can no longer SSH to it, I logged in with Winbox and > under IP -> Services, SSH is no longer listed but Telnet is! > > Does anyone know how I turn it back on? > > Cheers, > > Steve > > > ------------------------------ > > Message: 5 > Date: Thu, 4 May 2017 11:26:53 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: <1da901d2c475$8362e580$8a28b080$(a)duxtel.com> > Content-Type: text/plain; charset="us-ascii" > > Ouch! > > Did you try downgrade to previous version? > > Cheers, Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Steve Hille > > Sent: Thursday, 4 May 2017 11:22 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > > > > Greetings all, > > > > I downloaded the latest version this morning as a test on one of our > devices > > and now I can no longer SSH to it, I logged in with Winbox and under IP > -> > > Services, SSH is no longer listed but Telnet is! > > > > Does anyone know how I turn it back on? > > > > Cheers, > > > > Steve > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 39, Issue 4 > ************************************* >

3 2

SSH in RouterOS 6.39.1
by Steve Hille 04 May '17

04 May '17

Greetings all, I downloaded the latest version this morning as a test on one of our devices and now I can no longer SSH to it, I logged in with Winbox and under IP -> Services, SSH is no longer listed but Telnet is! Does anyone know how I turn it back on? Cheers, Steve

3 2

Mikrotik options for fast IPSEC throughput
by Chris Herrmann 03 May '17

03 May '17

Hi all, cross-posting from ITPA apologies for any duplication... I have a MK RB2011UAS at home and it works a treat. But… in the real world it will only handle about 16Mbps IPSEC throughput and flakes out after that. This model has been brilliant because heaps of features, it works… and it’s cheap. But it obviously won’t scale to 100Mit throughput, let alone 100+. So… just wondering what Mikrotik options I can look at after this model? - Will be running dual wan - Don’t need POE or Wifi - Needs to be faster than the RB2011 specifically when handling IPSEC. - Prefer Gbit interfaces but not required - If it’s in the same “family” as the RB2011 that would be good It’s for a small office so not looking for anything carrier grade. But internet speeds have moved on (sort of) finally… Cheers, Chris

4 3