- Public - talk.mikrotik.com.au

EOIP Tunnel Drop
by Paul Julian 06 Mar '17

06 Mar '17

Hi All, we have had a few EOIP tunnels just die recently between Mikrotik Routers. Some have been running happily for years and then just stop, disable/enable makes no difference. The only way to fix the problem is to either change the tunnel ID or create a whole new interface on each end. Has anybody come across this before ? Regards Paul

2 4

Mikrotik and Priority Queues
by Paul Julian 15 Feb '17

15 Feb '17

Hi All, just looking for some real world experience from others when it comes to QOS on Mikrotik. We do a fair bit of QOS on our network already and on the whole it works pretty well, however we are looking at trying to provide two service options to customers across our network and trying to prioritise those to the EU's. We want to be able to offer a cheap high contention service the same as NBN services and a high grade business option with low contention and high service levels across our network but I am have a brain fart when it comes to thinking about how to do the prioritisation. All customers connect via PPPOE so I Was thinking maybe having a different profile and setting that in radius and then using the insert after queue feature to drop it into a priority queue, but that's about as far as I have got with it. Ultimately I will need to mark all the traffic from each customer type and prioritise it from end to end, it's just trying to identify that traffic in mangle rules which I am having an issue with. Currently we prioritise SIP traffic over everything else pretty much, we just have mangle rules which act on the prerouting chain and mark the connections and then packets, the queue tree appropriately prioritises that traffic based on the marks as the traffic leaves each interface, although one thing I am still working on is how to prioritise that traffic when you have varying levels of each, such as when sending traffic to multiple customers on a DSLAM, you just can't set an limits really.... Any thoughts would be appreciated ! Regards Paul

1 0

Re: [MT-AU Public] NBN VDSL
by Thomas Bishop 15 Feb '17

15 Feb '17

Hi Denis, With normal nbn fttp/FW/sat any old mikrotik will do the job. We use the NetComm nf4v for nbn fttn and it has been very successful bridged into mikrotik rb1100's. I believe the nf10w is similar but cheaper as well. The trick with nbn fttn is registering your modem with nbn for any faults. The NetComm's are fully compliant with nbn requirements hence why we stuck with them. On Feb 15, 2017 2:21 PM, Mike Everest <mike(a)duxtel.com> wrote: Hi Denis, I'm happy to propagate a 'rumour' that there may be an SFP module become available sometime during 2017 that supports vDSL ;) In the meantime, though, I'm sure others on this list will have a few suggestions (it's been asked at least once before - it may be worth checking the archives for prior suggestions, for comparison or aggregation with latest comments! ;) Cheers, Mike. > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Denis > Hancock > Sent: Wednesday, 15 February 2017 1:58 PM > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: [MT-AU Public] NBN VDSL > > Hi All > > We're starting to see some NBN rollout to our customers. > Preference is to have the Mikrotik do all the work, any recommendations for > VDSL modems ? > > -- > > *Denis Hancock* > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

2 1

CHR scaling CPU/Memory
by Philip Loenneker 14 Feb '17

14 Feb '17

Hi guys, We have a CHR with 2 CPUs which is really struggling. I haven't found any info on the Mikrotik website or forums about scaling of it. I am considering upgrading it to 8 CPUs. a) Is there a limit to what resources we can allocate to CHRs? b) Can you increase CPU count by simply shutting it down and allocating more in Vmware, or is there something else required? c) Is there anything else we need to be aware of? Regards, Philip Loenneker | Network Engineer | TasmaNet

2 3

Multiple address and VRF and local services
by Alex Samad - Yieldbroker 14 Feb '17

14 Feb '17

Hi I had a problem recently with BGP and an interface with 2 ip address say 2.7.3.2/24 5.5.5.2/24 My original BGP peer statement had update-src=<interface name>. I have now changed that to IP-address Thought this was a bit strange as the remote address was 2.7.3.6, why it would pick 5.5.5.2 over 2.6.3.2 I am not sure (maybe a vrf thing ) Now my current issue is BFD, you can't supply src address, again for some reason BFD has decided to use 5.5.5.2 as the src. And when it talks to 2.7.3.6 it thinks its down :((((( So if I remove my second address from the interface all is good, but I need/want the 2 addresses. This interface is a VLAN of a trunk (LACP), seems like I can't create 2 interfaces of the same trunk with the same vlan. My next thought was I could create a bridge and connect it to the vlan interface. 2.7.3.2/24 on the vlan 10 interface 5.5.5.2/24 on the bridge interface with port vlan10 Then (fingers crossed), I could turn off BFD on the bridge interface and leave it on for the vlan10 interface. This seems overly complicated. The real crux is that I can't set the prf src for local services ... Alex

3 3

last 2 (hopefully) vrf questions
by Alex Samad - Yieldbroker 08 Feb '17

08 Feb '17

Hi My last 2 issue with VRF's So ICMP's that a generated on the box for net unreachable and similar iCMPs have the src address of the main table So my main table is basically 192.168.0.0/24 ether1 0.0.0.0/0 via 192.168.0.2 prc-src 192.168.0.1 VRF's Management Internet Private I have /ip route vrf set up for each And I have mangles rules to mark and remark packets So what happens on any of the vrf interfaces if the ccr generates a ICMP it has a source address of 192.168.0.1 I have a snat rules to snat to each interfaces actual address, but that doesn't seem to work for these icmp's But does work if I do something like this /ping 8.8.8.8 the source gets set to my Public ip address I use mange to route 8.8.8.8 from local machine via the Public VRF. I have sent support an email, but as yet no response. I do believe that somebody said they had fixed this on the list ? My last problem for now is my main table DGW is reliant upon ether1 being up :( if its not then local packet generation stops working . My thought was to generate a bridge and attach ether1 and apply the ip to the bridge ... the bridge should always be up and thus the dgw should always be up. How are other people handling this ? I did try a dgw with gateway against another bridge interface, but that interface was in Private and it overwrote my mangle rule . Alex

1 0

CPU pegged at 100%
by Andrew Gilbett 08 Feb '17

08 Feb '17

Hi All, How can you do a "TOP" to find out what is pegging a cpu core on a CCR? I suspect it is BGP but not sure how to check. Thanks Andrew

4 5

Hardware Recommendation
by Ben Jackson - eLogik 08 Feb '17

08 Feb '17

Hi, I'm needing advice on Mikrotik (or other) hardware to use in station mode to which I can connect a 2.4 / 5 Ghz (Omni) antenna and also swap out the 802.11 cards depending upon the site, i.e. some customers have 2.4Ghz g/n access points, where others may have 5Ghz n/ac access points so I want a platform that I can vary the 802.11 card to suit. The range to the access point from the station will be variable, but no more than about 100m. Line of sight may not be feasible. I have been pointed in the direction of the RB411 with an enclosure and suitable 8dbi antenna - any other takers? It also needs a Gig Ethernet port ;). Cheers, Ben Jackson eLogik m:0404 924745 e: ben(a)elogik.net w: www.elogik.com.au [image: http://www.elogik.com.au] <http://www.elogik.com.au>

5 12

just posted this to the forums - bgp issue ?
by Alex Samad - Yieldbroker 07 Feb '17

07 Feb '17

Hi Interface Internet ip address on interface 10.10.10.67/24 20.20.20.67/24 bgp peer remote address 10.10.10.68, update-source=Internet whilst doing a tcp dump on 10.10.10.68, I could see BGP packets coming from 10.10.10.67 and from 20.20.20.67 it seemed to alternate and it stopped the BGP peer connecting. the auto route create is 10.10.10.0/24 Internet prf-src 10.10.10.67 so why is the bgp peer sending from 20.20.20.67 http://forum.mikrotik.com/viewtopic.php?f=14&t=117929 A Alex Samad | Network And System Manager | Yieldbroker * +61 2 9994 2893 | ( +61 438 838 143 | * alex.samad(a)yieldbroker.com<mailto:alex.samad@yieldbroker.com> This email is confidential and intended for the addressee only. If you may have received this email in error please delete it and notify the sender immediately. Recipients should not forward, disclose, distribute or copy this e-mail or any attachments in whole or part without the express permission of the sender. Views expressed in this message are those of the individual sender, except where they are specifically stated to be those of Yieldbroker. Yieldbroker accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Yieldbroker can not guarantee the integrity of this communication and shall not be liable for e-mail which may be intercepted, corrupted, lost, spoofed, delayed, incomplete, or virus infected.

2 2

scripting
by Alex Samad - Yieldbroker 07 Feb '17

07 Feb '17

Hi I have this I a test.rsc file which I scp over and then I do /import test.rsc But it doesn't print anything for the variable # set local hostname :global hostname [/system identity get name] :if ( $hostname = "artr1" ) \ do={ :global LocalIP 192.168.0.1 :global ManagementIP 1.3.8.72 :global PublicIP 2.7.3.67 :global PrivateIP 1.3.200.10 :global RouterID 1.3.255.10 } :if ( $hostname = "artr2" ) \ do={ :global LocalIP 192.168.0.2 :global ManagementIP 1.3.8.73 :global PublicIP 2.7.3.68 :global PrivateIP 1.3.200.11 :global RouterID 1.3.255.11 } :if ( $hostname = "bextrtr1" ) \ do={ :global LocalIP 192.168.0.1 :global ManagementIP 1.3.8.70 :global PublicIP 2.7.3.69 :global PrivateIP 1.3.200.12 :global RouterID 1.3.255.12 } :if ( $hostname = "bextrtr2" ) \ do={ :global LocalIP 192.168.0.2 :global ManagementIP 1.3.8.71 :global PublicIP 2.7.3.70 :global PrivateIP 1.3.200.13 :global RouterID 1.3.255.13 } # vrrp dgw :global PublicVRRPIP 2.7.3.71 # # Validate variables # :put "Hostname: $hostname" :put "Local IP: $LocalIP" :put "Management IP: $ManagementIP" :put "Public IP: $PublicIP" :put "Private IP: $PrivateIP" :put "Routerid: $RouterID"

5 6