- Public - talk.mikrotik.com.au

PPPoE VRF
by Dave Browning 25 May '17

25 May '17

Howdy, I've built some janky script that's applied 'on up' to a PPP profiles that puts the dynamic PPPoE interfaces into a VRF. Anyone got any better ways to do that? Any word if MT are going to add this as an option to PPP profile? Seems a fairly common use case. Cheers, Dave

3 3

BGP convergence
by Alex Samad 16 May '17

16 May '17

Hi Question 4 routers (CCR's), each has connection to Internet vlan. each connect to a ISP. call them a b c d. there is a vrrp on the internet vlan which is used as dgw. receiving full table from ISP, so somehere between 800k-1.2M prefixes. I go onto router a and disable the isp link. I can see inbound slowly peeter off The interesting things is that the DGW disappears from the route table on router A, but routers B,C,D still have all the prefixes advertised from the ISP connected on router A, still in their routing table. so packet hit the VRRP and then get routed to router A, it has a iBGP DGW and sends it back to router B,C,D, they check routing table and send it back to router A. loop . death. took about 3 min for the routes to be pulled from the routing table in B,C,D. How can I make this/convergence work faster, can I ? Alex

2 2

BFD /OSPF with PA-3060
by Alex Samad 09 May '17

09 May '17

Hi trying to setup OSPF with BFD between ccr1036 and PA-3060. the CCR can see the OSPF init, but fails because of BFD. I have 2 PA's and they can see each other ! when i check /routing bfd neighbor> print detail I see no rx for the PA's to the CCR. Alex

2 2

Re: [MT-AU Public] Public Digest, Vol 39, Issue 4
by Steve Hille 04 May '17

04 May '17

Hi Mike, I haven't tried yet, has anyone else faced this same issue? I'll try to roll it back if I'm on my lonesome with this one. Cheers, Steve On Thu, May 4, 2017 at 10:00 AM, <public-request(a)talk.mikrotik.com.au> wrote: > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: Mikrotik options for fast IPSEC throughput (Mike Everest) > 2. BGP convergence (Alex Samad) > 3. Re: BGP convergence (Damien Gardner Jnr) > 4. SSH in RouterOS 6.39.1 (Steve Hille) > 5. Re: SSH in RouterOS 6.39.1 (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 3 May 2017 11:56:14 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Mikrotik options for fast IPSEC throughput > Message-ID: <1b2101d2c3b0$728d50d0$57a7f270$(a)duxtel.com> > Content-Type: text/plain; charset="utf-8" > > Watch out for the RB1100AHx4 coming soon - 'dude edition' features 4 core > 1.4GHz cpu, accelerated encryption (for up to 2200mbps IPSEC) and included > 60 gig microSD storage. > > Available soon at 'you know where' ;-) > > Cheers! > > Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Chris Herrmann > > Sent: Wednesday, 3 May 2017 10:31 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] Mikrotik options for fast IPSEC throughput > > > > Hi all, cross-posting from ITPA apologies for any duplication... > > > > > > > > I have a MK RB2011UAS at home and it works a treat. But? in the real > world > > it will only handle about 16Mbps IPSEC throughput and flakes out after > that. > > This model has been brilliant because heaps of features, it works? and > it?s > > cheap. But it obviously won?t scale to 100Mit throughput, let alone 100+. > > > > > > > > So? just wondering what Mikrotik options I can look at after this model? > > > > > > > > - Will be running dual wan > > > > - Don?t need POE or Wifi > > > > - Needs to be faster than the RB2011 specifically when handling > > IPSEC. > > > > - Prefer Gbit interfaces but not required > > > > - If it?s in the same ?family? as the RB2011 that would be good > > > > > > > > It?s for a small office so not looking for anything carrier grade. But > internet > > speeds have moved on (sort of) finally? > > > > > > Cheers, > > > > > > Chris > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Message: 2 > Date: Thu, 4 May 2017 10:42:14 +1000 > From: Alex Samad <alex(a)samad.com.au> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: [MT-AU Public] BGP convergence > Message-ID: > <CAJ+Q1PWJPVW5wxNBVxNjUBw0hZuL8T+6Z1uWbRw+zBUMHsacCA@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi > > Question > > 4 routers (CCR's), each has connection to Internet vlan. each connect to a > ISP. call them a b c d. > > there is a vrrp on the internet vlan which is used as dgw. > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > I go onto router a and disable the isp link. > > I can see inbound slowly peeter off > > The interesting things is that the DGW disappears from the route table on > router A, but routers B,C,D still have all the prefixes advertised from the > ISP connected on router A, still in their routing table. > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > and sends it back to router B,C,D, they check routing table and send it > back to router A. loop . death. > > took about 3 min for the routes to be pulled from the routing table in > B,C,D. > > How can I make this/convergence work faster, can I ? > > Alex > > > ------------------------------ > > Message: 3 > Date: Thu, 4 May 2017 10:58:06 +1000 > From: Damien Gardner Jnr <rendrag(a)rendrag.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] BGP convergence > Message-ID: > <CAPrfDLU46aRrEzgdb7FuEoEx2kq-9h4=b5DnDL1=1HaC+cUMmQ@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > The way I used to get around this was to not carry a full table. Each > router would filter the accepted routes to default route, and one or two AS > hops on each ISP. Then I preferenced my cheapest transit provider as the > best default route. > > Convergence was MUCH faster :) > > On 4 May 2017 at 10:42, Alex Samad <alex(a)samad.com.au> wrote: > > > Hi > > > > Question > > > > 4 routers (CCR's), each has connection to Internet vlan. each connect to > a > > ISP. call them a b c d. > > > > there is a vrrp on the internet vlan which is used as dgw. > > > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > > > > I go onto router a and disable the isp link. > > > > I can see inbound slowly peeter off > > > > The interesting things is that the DGW disappears from the route table on > > router A, but routers B,C,D still have all the prefixes advertised from > the > > ISP connected on router A, still in their routing table. > > > > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > > and sends it back to router B,C,D, they check routing table and send it > > back to router A. loop . death. > > > > took about 3 min for the routes to be pulled from the routing table in > > B,C,D. > > > > How can I make this/convergence work faster, can I ? > > > > Alex > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > -- > > Damien Gardner Jnr > VK2TDG. Dip EE. GradIEAust > rendrag(a)rendrag.net - http://www.rendrag.net/ > -- > We rode on the winds of the rising storm, > We ran to the sounds of thunder. > We danced among the lightning bolts, > and tore the world asunder > > > ------------------------------ > > Message: 4 > Date: Thu, 4 May 2017 09:21:40 +0800 > From: Steve Hille <stevehille84(a)gmail.com> > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: > <CAB+S9V9Bs5iN+0UXkETj17KgEnTt4SzexjzyutasLS5 > cdybq1Q(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Greetings all, > > I downloaded the latest version this morning as a test on one of our > devices and now I can no longer SSH to it, I logged in with Winbox and > under IP -> Services, SSH is no longer listed but Telnet is! > > Does anyone know how I turn it back on? > > Cheers, > > Steve > > > ------------------------------ > > Message: 5 > Date: Thu, 4 May 2017 11:26:53 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: <1da901d2c475$8362e580$8a28b080$(a)duxtel.com> > Content-Type: text/plain; charset="us-ascii" > > Ouch! > > Did you try downgrade to previous version? > > Cheers, Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Steve Hille > > Sent: Thursday, 4 May 2017 11:22 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > > > > Greetings all, > > > > I downloaded the latest version this morning as a test on one of our > devices > > and now I can no longer SSH to it, I logged in with Winbox and under IP > -> > > Services, SSH is no longer listed but Telnet is! > > > > Does anyone know how I turn it back on? > > > > Cheers, > > > > Steve > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 39, Issue 4 > ************************************* >

3 2

SSH in RouterOS 6.39.1
by Steve Hille 04 May '17

04 May '17

Greetings all, I downloaded the latest version this morning as a test on one of our devices and now I can no longer SSH to it, I logged in with Winbox and under IP -> Services, SSH is no longer listed but Telnet is! Does anyone know how I turn it back on? Cheers, Steve

3 2

Mikrotik options for fast IPSEC throughput
by Chris Herrmann 03 May '17

03 May '17

Hi all, cross-posting from ITPA apologies for any duplication... I have a MK RB2011UAS at home and it works a treat. But… in the real world it will only handle about 16Mbps IPSEC throughput and flakes out after that. This model has been brilliant because heaps of features, it works… and it’s cheap. But it obviously won’t scale to 100Mit throughput, let alone 100+. So… just wondering what Mikrotik options I can look at after this model? - Will be running dual wan - Don’t need POE or Wifi - Needs to be faster than the RB2011 specifically when handling IPSEC. - Prefer Gbit interfaces but not required - If it’s in the same “family” as the RB2011 that would be good It’s for a small office so not looking for anything carrier grade. But internet speeds have moved on (sort of) finally… Cheers, Chris

4 3

Memory usage for BGP
by Alex Samad 01 May '17

01 May '17

Hi How do I tell how much memory is being used by and how much is free for BGP tables Looking at my CCR's 1072 & 1036 is it just /system resource print Alex

2 1

USB Ports on Routerboards
by Paul Julian 27 Apr '17

27 Apr '17

Hi all, has anybody successfully run more than one device off a USB port on a routerboard ? We need to connect a USB cable for a UPS and a 4G USB modem as well and just wondering if the routerboards will address more than one device on a port if we used a USB hub Thanks Paul

2 2

ISP Recommendations
by Ben Jackson - eLogik 27 Apr '17

27 Apr '17

I'm looking for some help in locating a cost effective business grade service for a customer. They are currectly with TPG on a 20/20Mbps MBE / EoC service and are not happy with the service or price. They are about to hire 14 new staff and consequently need a faster service (in the region of 40Mbps) at minimum. They are based in The Rocks, Sydney. The building isn't lit up for fibre so I was considering other options such as fixed wireless? Some direction would be great. Thanks. *BEN JACKSON* Director *M *0404 924745 *E* ben(a)elogik.com.au *W* elogik.com.au <http://www.elogik.com.au/> <http://www.elogik.com.au>

1 0

strange udp
by Alex Samad 26 Apr '17

26 Apr '17

Hi any one know what 81.198.87.240:15252 is used for by the CCR's then I found this https://forum.mikrotik.com/viewtopic.php?t=116484 This is more of an FYI. A

1 0