- Public - talk.mikrotik.com.au

Multiple transit provider configuration help
by Paul Julian 23 Nov '14

23 Nov '14

Hi All, I am hoping somebody can offer some advice here as my brain doesn't seem to be able to function correctly at this point in time..... Currently we have one main upstream transit provider, we talk to them using BGP from our primary border router, we only receive a default route from them as we really don't need anything else at this stage. Internally we use OSPF for routing around our network, so the OSPF config on that border router is told to distribute the default route, everything works fine, all the routers know to get out to the net they go through that border router. We now want to configure our secondary border router with another upstream transit provider as a backup, we will use BGP to connect to them also on this second router, it is also part of the internal OSPF network like the primary border router. What I can't get my brain to work out is how to I setup the OSPF on this secondary router so that I can propagate the default route from that at a higher distance or whatever so that all the internal routers know they can get out there if the primary one fails, but only if it fails. On the secondary we are prepending our AS to make it look less desirable as we really only want this for emergencies and won't provision enough capacity to use it as a daily driver. Currently we run the following settings in the OSPF instance on the primary router: Redistribute Default Route - always (as type 1) Redistribute Connected Routes - as type 1 Everything else is set to no, metrics are set to defaults, we also run filtering which is configured to keep things correct. I am thinking that we may need to use some OSPF filters to increase the cost of the secondary default route but I was hoping somebody may be able to advise what settings I will need and what will work the best in this scenario which is really just a backup transit connection. Thanks in advance ! Regards Paul

2 2

Data Quotas
by Ben Jackson 20 Nov '14

20 Nov '14

Hi all, I’m looking for a way to set a download quota on a Mikrotik router for guests at some rental accommodation. Had a google about and didn’t find anything that made sense to me. I guess I need to use the “hotspot” feature? The guests will be connecting via wi-fi and getting dhcp-assigned addresses so it can’t be done with “pre-known" or static IP’s. I did look to see if the UniFi AP's I am using have this feature, and they supposedly do but I have had no luck getting it to work, even after following the cheat sheet. I also feel that this type of thing is better placed to be controlled on the router. Thanks, Ben Jackson w: www.elogik.net m: 0404 924745 e: ben(a)elogik.net <http://www.elogik.net/>

3 9

multicast routing
by Alex Samad - Yieldbroker 20 Nov '14

20 Nov '14

Hi Anyone had any experience at MR when upstream is a cisco ? Alex

1 0

6.22
by Alex Samad - Yieldbroker 17 Nov '14

17 Nov '14

Hi Any one tried this. Went to upgrade my test CCR and found it was available, thought I would be a bit adventurous. Behaving itself okay so far. Alex

2 1

ccr's and routeros 1.20+
by Alex Samad - Yieldbroker 12 Nov '14

12 Nov '14

Hi I have a few CCR1036-8G-2S+'s I am running 6.19 and am quite happy with it. The mikrotik boys are quite good at putting out lots of new versions. 1) What do most other people do with patching, I am not looking forward to patching every month 2) Is anyone else running 6.20 or 6.21 (6.21.1) I also have a few VM's Things I am interested in OSPF, BGP, firewall. No wireless for me. Alex

8 17

IPv6 Prefix delegation?
by Damien Gardner Jnr 06 Nov '14

06 Nov '14

Hi Folks, Not sure if I'm doing something wrong here, but I'm having trouble getting prefix delegation to work the way I'd expect. On my old 877, it was fairly easy to do. Dialer0, i'd add ipv6 dhcp client pd ipv6-prefix rapid-commit and then the delegated prefix was available as ipv6-prefix. Then on each internal lan interface (or vlan, or whatever), I'd simply do: ipv6 address ipv6-prefix ::1:0:0:0:1/64 ipv6 enable ipv6 nd ra interval 60 and bingo, Neighbour Discovery was handing out IP's in the ::1:0:0:0:0/64 subnet (Or ::2:0:0:0:0/64 etc as defined for each interface) Trying to do that on the CRS isn't quite working right. it seems like to use the PD, I need to do something like this: /ipv6 address add from-pool=TID_PD interface=bridge-local address= ::1:0:0:0:1/64 But that results in this: 8 G 2001:8000:1000:3d00::1/64 TID_PD bridge-local yes I've played with a few virtual interfaces, and it simply assigns the subnets in ascending order - so the second one defined will be 3d01::, the next will be 3d02:: etc. Now it's not a HUGE issue, as my v6 delegation from TID isn't going to change, but it's more the principle of the thing ;) Is 'proper' defined PD usage possible on RouterOS? Thanks, Damien -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder

2 4

How to allow external traffic into a VRF?
by Damien Gardner Jnr 04 Nov '14

04 Nov '14

Hi Folks, (Sorry, this is long, and rather convoluted) I'm not sure if I'm trying to do something that I shouldn't be, but here's what I'm doing. I have a CCR1009 at SY3, acting as our core router. Dual-gig bond to our upstreams (delivered as VLAN's from three different providers), and dual-gig bond to our main switch. All customer and internal vlans live on that internal bond interface, with interfaces up on each for routing. A few of those vlans live in VRF's (backup network, management network, SAN network(s), etc), and the CCR has IP's on the vlans for those VRF's, so I can do NAT out so the devices on them have internet access. That's all good, though I do have the question - should I be able to ping the CCR IP for one of the VRF VLAN's from another subnet on our network? Can't ping the IP's inside the VRF, just the one on the CCR itself. Now I've finally replaced the flock of cisco 877W's at my home office with a CRS109 and an RB951 (Ethernet-over-Power link to the garage doesn't pass vlan tags, so I've been running GRE tunnels on the 877's, and now I'll just run an EoIP tunnel with bridged vlans). So today I've fired up an EoIP tunnel, which works nicely. I then tried extending one of the VRF's across the tunnel, and it seems to be working nicely. i.e. moved the IP address on the CCR vlan1202 to bridge_vlan1202 (which is a bridge with vlan1202 and eoip_wyong_vlan1202 in it). And then on the CRS, I created a vlan1202 on ether2-master, and on eoip_sy3, and then created bridge_vlan1202 on both interfaces, and then added bridge_vlan1202 into a new VRF, and added an IP address in. Now, I can ping from a host on the VRF at SY3, to the router at home, so Im assuming the bridging etc is working. So now, I want workstations at home to be able to route into that VRF. But not hosts in the DMZ (publicly addressable), and not hosts on our 'visitors' vlan. can I do that? If so, any suggestions on how? :) And while I'm asking.. I need to bring up two more of those VRF+VLAN combo's bridged from SY3 - and then take them from the CRS to the RB951 in the garage for easy provisioning and testing of new servers before taking them to sydney.. Is there an easier way to simply bridge from the CRS to the RB951 across an ethernet link which doesn't support vlan tags? Or do i use EoIP and config and bridge the vlans? Thanks, Damien -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder

2 3

Hotspot Server Export
by Paul Julian 04 Nov '14

04 Nov '14

Hi guys, just wondering if anybody who uses the Mikrotik Hotspot system has ever been able to successfully export the hotspot server entries ? You can export everything else it seems but the actual hotspot servers themselves. Has anybody come across a way around this ? It seems to be an issue with a full export and just the hotspot branch export. Regards Paul

2 2

Queue Priority
by Paul Julian 04 Nov '14

04 Nov '14

Hi guys, just wondering if somebody could tell me whether a single host simple queue would take priority over a more broad ranged simple queue. For example, if we had a queue which covered say 10.1.1.0/24 IP's and that queue was set to 50M, if we then created a another queue with a target of 10.1.1.5 at a speed of 10M would that client get throttled down to 10M or 50M ? I am thinking that it would probably matter which position the queue was in, but even in that case would it be the last matching target definition that took effect or the first..... I would appreciate any thoughts on this. Thanks Paul

1 0

Re: [MT-AU Public] simple, sensible modem for pppoe-passthrough bridge
by Thomas Jackson 01 Nov '14

01 Nov '14

Outlook decided to send that message before I was done with it... attempt #2... Yet another +1 for the TP-links, I have them deployed all over the place (8810 or 8817 depending on the age of the site) - I've only ever had one fail, it was a simple job of swapping it with one of the spares (we keep spares of every Mikrotik, TP-Link, etc device we use throughout the organisation - works out much cheaper than getting fast response warranties from Cisco etc, and we can often respond faster than a 3rd party would anyway - nothing beats having a spare sitting on the shelf ready to go!) -----Original Message----- From: Thomas Jackson [mailto:thomas@thomax.com.au] Sent: Sunday, 26 October 2014 11:22 AM To: 'MikroTik Australia Public List' Subject: RE: [MT-AU Public] simple, sensible modem for pppoe-passthrough bridge Yet another +1 for the TP-links, I have them deployed all over the place (8810 or 8817 depending on the age of the - I've only ever had but it was a simple job of swapping it with one of the spares (we keep spares of every Mikrotik, TP-Link etc device we use throughout the orgnaisation, -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Andrew Cox Sent: Friday, 24 October 2014 5:45 PM To: MikroTik Australia Public List Subject: Re: [MT-AU Public] simple, sensible modem for pppoe-passthrough bridge Hey Mike, TD-8840T is the bee's knees in our experience. Have deployed over 150~ of the things and only time we've ever had a problem was with one getting sandwiched between a Cisco 4948 and a server (which was dropped on it) which caused the plastic to start browning/melting and the device stopped working. Bought it back into the office and it came back up just fine :-) They cost around $20-30AUD depending on where you source them from. - Andrew On 24 October 2014 16:17, Mike Everest <mike(a)duxtel.com> wrote: > Hi Folks, > > Seeking recommendations for a good dsl modem that supports all of the > typical dsl variants that also supports a decent pppoe passthrough > bridge mode. No wireless, no multiple ethernet etc - just adsl port > and 1 ethernet port is ideal :-D > > I recently bought a couple of draytek vigor 120, and hope I don't > upset anyone by describing it as a piece of crap. I've wasted too > much time trying to get them to work like a bridge, reliably and > without losing config updates every second reboot. I have two of them > in place and almost in production (project goes live ib a couple of > weeks) at location almost 4 hours drive away, and I really want to bin > them and replace with something that I have more confidence in :-} > > Any suggestions, comments, (and abuse, if you feel the need, ;-) are > most welcome! > > Thanks, > > Mike. > > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. > au > _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

2 1