- Public - talk.mikrotik.com.au

issues with VRF
by Alex Samad - Yieldbroker 06 Feb '17

06 Feb '17

Hi So been doing some testing around the routing and separation of the VRF's. So I have VRF Management - ether port Private - this is a point to point with clients Public - Isp I have added the relevant interfaces to the relevant Vrf in the /ip route vrf section I have tried testing with ping to 8.8.8.8 So test machine on the Private vlan setup static route 8.8.8.8/32 via 10.10.10.10 (my new router) I do a /ip route print detail where routing-marl=private 8.8.8.8 in dst-address It only shows me the default gateway... But /tool quick snif quick ip-address=8.8.8.8 shows the icmp coming in on Private and out Public ????????? This might just be icmp packets ! Did another test from my mgmt. box setup static route Ip r a 8.8.8.8/32 via 10.20.10.10 Ping and I can see packets heading out Public But telnet 8.8.8.8 and it doesn't go anywhere In fact the reply icmp comes from the main table, looking at the ICMP .... Alex

2 2

wifi
by Alex Samad - Yieldbroker 03 Feb '17

03 Feb '17

Hi Does mikrotek have something like this The UniFi AP AC HD (UAP-AC-HD<https://unifi-hd.ubnt.com/>) is now available. Comes in at a higher price point, aimed at high density deployments. * 802.11ac Wave 2 * MU-MIMO * 2.4 GHz: 800 Mbps (4x4) * 5 GHz: 1733 Mbps (4x4) * dual gigabit ethernet, supporting link aggregation * power: 802.3at (PoE+) * datasheet: https://dl.ubnt.com/datasheets/unifi/UniFi_UAP-AC-HD_DS.pdf

2 5

Configuration Management Solutions
by Andrew Gilbett 02 Feb '17

02 Feb '17

Hi All, What is everyone using for configuration management, backup and change control? I am looking for something that is automated and provides version control... I found https://github.com/shift8nix/mtrcbackup which looks good has anyone used it or are there better tools out there? Andrew

4 3

Re: [MT-AU Public] Configuration Management Solutions
by Jeremy Hall 02 Feb '17

02 Feb '17

In addition to Rancid, you could also check out Oxidized (a modern Rancid replacement): https://github.com/ytti/oxidized It integrates with LibreNMS (also an Observium replacement!) > ---------- Forwarded message ---------- > From: Damien Gardner Jnr <rendrag(a)rendrag.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Cc: > Date: Wed, 1 Feb 2017 21:17:53 +1100 > Subject: Re: [MT-AU Public] Configuration Management Solutions > I don't know about others, but I just use rancid, as then all of my > switch/router configs are in the one place. And it integrates into > Observium nicely :) > > On 1 February 2017 at 21:16, Andrew Gilbett <andrew(a)gilbett.net> wrote: > > > Hi All, > > > > What is everyone using for configuration management, backup and change > > control? > > > > I am looking for something that is automated and provides version > > control... > > > > I found https://github.com/shift8nix/mtrcbackup which looks good has > > anyone > > used it or are there better tools out there? > > > > Andrew > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > -- > > Damien Gardner Jnr > VK2TDG. Dip EE. GradIEAust > rendrag(a)rendrag.net - http://www.rendrag.net/ > -- > We rode on the winds of the rising storm, > We ran to the sounds of thunder. > We danced among the lightning bolts, > and tore the world asunder > > > > ---------- Forwarded message ---------- > From: Andrew Cox <andrew.cox(a)brightwifi.com> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Cc: > Date: Wed, 1 Feb 2017 07:58:50 -0600 > Subject: Re: [MT-AU Public] Configuration Management Solutions > I've been getting ready to move over to Unimus now which is an "every > network device" backup system written by Tomas of the Brothers WISP group. > > - Andrew > > On 1 Feb. 2017 4:18 am, "Damien Gardner Jnr" <rendrag(a)rendrag.net> wrote: > > > I don't know about others, but I just use rancid, as then all of my > > switch/router configs are in the one place. And it integrates into > > Observium nicely :) > > > > On 1 February 2017 at 21:16, Andrew Gilbett <andrew(a)gilbett.net> wrote: > > > > > Hi All, > > > > > > What is everyone using for configuration management, backup and change > > > control? > > > > > > I am looking for something that is automated and provides version > > > control... > > > > > > I found https://github.com/shift8nix/mtrcbackup which looks good has > > > anyone > > > used it or are there better tools out there? > > > > > > Andrew > > > _______________________________________________ > > > Public mailing list > > > Public(a)talk.mikrotik.com.au > > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > mikrotik.com.au > > > > > > > > > > > -- > > > > Damien Gardner Jnr > > VK2TDG. Dip EE. GradIEAust > > rendrag(a)rendrag.net - http://www.rendrag.net/ > > -- > > We rode on the winds of the rising storm, > > We ran to the sounds of thunder. > > We danced among the lightning bolts, > > and tore the world asunder > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > >

1 0

VRF and BGP
by Alex Samad - Yieldbroker 01 Feb '17

01 Feb '17

Hi Next step. I want to setup a iBGP peer and I want all the bgp routes learn and distributed to be linked to the VRF internet Seems like I have to choices /routing bgp instance I can add an instance and use routing-table. Or I can add a /routing bgp instance vrf entry after add one to /routing bgp instance but leaving routing-table as main So I want all the BGP routes received and sent to be only from vrf internet. So which one do I use ! Pro's cons. The wiki page is not that informative Alex

2 5

scripting - old: RE: VRF - routing and default local services
by Alex Samad - Yieldbroker 29 Jan '17

29 Jan '17

Hi Yep. Trying to work out why it didn't work before. Seems like my scripts for loading the fw relies upon some if do's :if ( $hostname = "name" ) \ do={ add action=src-nat chain=srcnat src-address=192.168.0.1 to-addresses=2.7.3.6 out-interface=internet } And this seems to be failing ! When I do a put $hostname it prints blank local a [/system identity get name] ; put $a puts the name in $a. wondering if this is a change from before ? Alex -----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Philip Loenneker Sent: Monday, 30 January 2017 10:41 AM To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> Subject: Re: [MT-AU Public] VRF - routing and default local services Something that may be useful is you could have the same IP allocated in multiple VRFs. This could help with getting srcnat to do its thing before the change of VRF, if required - but it looks like you're sorted now anyway :)

1 0

VRF - routing and default local services
by Alex Samad - Yieldbroker 29 Jan '17

29 Jan '17

Hi Just continuing on my journey for multiple VRF. I have segregated of an interface for management. Using routing with vrf = Management and mangle rules to mark all packets / connections with vrf=Management. Caveat is that my default routing table must have a valid route. So when I tested telnet ccr on the management port ip from a box on the same vlan - management, I could see packets coming in and then nothing leaving Add in default route via a cross connect and suddenly packets start to flow back. Note I can send default to blackhole that doesn't work. Now my question is things like logging can I set the source address / interface . will setting the source set the interface ? Will packets pick up the mark if they have that source address - or do I need to add in a mangle that say's any with that source address has the vrf=Management Alex Alex Samad | Network And System Manager | Yieldbroker * +61 2 9994 2893 | ( +61 438 838 143 | * alex.samad(a)yieldbroker.com<mailto:alex.samad@yieldbroker.com> This email is confidential and intended for the addressee only. If you may have received this email in error please delete it and notify the sender immediately. Recipients should not forward, disclose, distribute or copy this e-mail or any attachments in whole or part without the express permission of the sender. Views expressed in this message are those of the individual sender, except where they are specifically stated to be those of Yieldbroker. Yieldbroker accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Yieldbroker can not guarantee the integrity of this communication and shall not be liable for e-mail which may be intercepted, corrupted, lost, spoofed, delayed, incomplete, or virus infected.

2 7

Telstra Mobile Options
by Paul Julian 23 Jan '17

23 Jan '17

Hi All, I know this has been talked about before and I have been playing around with some options but I was hoping I could draw on some real life experiences from others. I am trying to get a decent Telstra Mobile signal in a rural area, doing my research I can see that there is a Telstra Mobile site 31 km's away which supports 3G 850Mhz and 4G 700Mhz. There is another site which is 24km away which has 3G 850Mhz and 4G 1800Mhz on it, I think the first site would be a better line of sight then the closer one. My iPhone 6 drifts between 2-3 bars of 3G and sometimes 1 bar of 4G at the location, however data speed is pretty sad at around 1.5-2Mbit/s when it actually works. Currently I am using a Routerboard 411U with a Sierra Wireless MC8705 PCIe modem and a 7dbi omni antenna which is external, I figure it's only connecting to the 850Mhz 3G as it only supports that band out of the bands available at the towers. I have thought about using the SXTLTE model as it supports 1800Mhz but would that do the job as only one site supports 1800Mhz and I am not 100% sure which site I am actually reaching at the moment ? What would people suggest in this case ? Should I upgrade to a newer modem and stick with the existing setup and if so which one ? Should I use a better antenna ? I would appreciate any suggestions as I need to get some reliable data there and am hoping to get around 5-10Mbit/s if at all possible. Thanks Paul

5 10

BGP with multiple global route tables on RouterOS
by Philip Loenneker 22 Jan '17

22 Jan '17

Hi all, We have previously used CCRs for BGP transit peers, but found that the delay in BGP with global routes updating the routing table was slower than we would like. This was mainly due to the fact that the BGP process only runs on a single thread so even a upgrading to a CCR1072 is not going to improve it. We built a couple of CHRs with iBGP between them. They perform better because each individual core is faster than the CCR cores, but they still really struggle when there are significant changes to the route table. One of the CPU cores sits at 100% for an extended period of time while the other core sits at almost nothing, and occasionally all of the BGP peers to drop their sessions from timeouts while it is in this state. As the peers re-establish, the route table has a lot more updates to process and so we get in a bit of a vicious circle until the it can manage to get through it all. Does anyone else have experience with global route tables (preferably multiple) on RouterOS? Does anyone have any advice on how we can increase the performance? Throwing more cores at the CHRs doesn't seem like it would have much benefit, but is something we have been considering. We are open to suggestions of alternative platforms to replace or integrate with the design. Waiting for RouterOS v7 which is meant to be more multithreaded might be an option if we had an actual ETA on it.... :) Regards, Philip Loenneker | Network Engineer | TasmaNet 40-50 Innovation Drive, Dowsing Point, Tas 7010, Australia P: 03 6165 2542 | M: 0404 097 816 philip.loenneker(a)tasmanet.com.au<mailto:philip.loenneker@tasmanet.com.au> www.tasmanet.com.au<http://www.tasmanet.com.au/>

3 6

PMP Wireless Bandwidth
by Paul Julian 16 Jan '17

16 Jan '17

Hi all, We currently use a lot of Mikrotik gear for backhauls in a point to multipoint arrangement mostly with some PTP links as well. We do this as we are limited on mast space and frequency as we use the 5ghz band and PMP licensed stuff is really not possible in dense areas in which we operate. We typically bring 1 or 2 fibre connections into an area and then redistribute the bandwidth using wireless, the area is pretty busy frequency wise but we seem to have our network running nicely at the moment. We also operate under carrier licensing and take advantage of the low impact install rules, sometimes we are able to stretch that a little but that also limits what we can put on a roof within reason. We currently run on 3 frequencies in most areas, usually with a sector servicing the majority of the locations and sometimes one or two PTP links as well, it just depends on the design needed, but usually we can get away with getting to use the spectrum we need. We are starting to see NBN rolling into the areas where we cover and want to compete with our own network, we have the resources and transit and peering capacities but our wireless gear just isn't capable of delivering the bandwidth we need to aggregated backhauls to buildings that we service. I'm interested to know how other people manage this, if they have been able to, I am really not interested in providing faster than 50M plans to customers as an NBN equivalent plan, but being able to service just a handful of users at those speeds would top out any Mikrotik radio, especially on 5ghz band, or most radios that I can think of, and apart from running our own fibre or buying more I can't see any options. If we need to buy more fibre then it shoots our pricing out of reach and it would be a waste of time so I am really trying to find a way to get the most out of our wireless networks as we have quite a lot of locations we service now. Thanks Paul

2 3