- Public - talk.mikrotik.com.au

Mikrotik options for fast IPSEC throughput
by Chris Herrmann 03 May '17

03 May '17

Hi all, cross-posting from ITPA apologies for any duplication... I have a MK RB2011UAS at home and it works a treat. But… in the real world it will only handle about 16Mbps IPSEC throughput and flakes out after that. This model has been brilliant because heaps of features, it works… and it’s cheap. But it obviously won’t scale to 100Mit throughput, let alone 100+. So… just wondering what Mikrotik options I can look at after this model? - Will be running dual wan - Don’t need POE or Wifi - Needs to be faster than the RB2011 specifically when handling IPSEC. - Prefer Gbit interfaces but not required - If it’s in the same “family” as the RB2011 that would be good It’s for a small office so not looking for anything carrier grade. But internet speeds have moved on (sort of) finally… Cheers, Chris

4 3

Memory usage for BGP
by Alex Samad 01 May '17

01 May '17

Hi How do I tell how much memory is being used by and how much is free for BGP tables Looking at my CCR's 1072 & 1036 is it just /system resource print Alex

2 1

USB Ports on Routerboards
by Paul Julian 27 Apr '17

27 Apr '17

Hi all, has anybody successfully run more than one device off a USB port on a routerboard ? We need to connect a USB cable for a UPS and a 4G USB modem as well and just wondering if the routerboards will address more than one device on a port if we used a USB hub Thanks Paul

2 2

ISP Recommendations
by Ben Jackson - eLogik 27 Apr '17

27 Apr '17

I'm looking for some help in locating a cost effective business grade service for a customer. They are currectly with TPG on a 20/20Mbps MBE / EoC service and are not happy with the service or price. They are about to hire 14 new staff and consequently need a faster service (in the region of 40Mbps) at minimum. They are based in The Rocks, Sydney. The building isn't lit up for fibre so I was considering other options such as fixed wireless? Some direction would be great. Thanks. *BEN JACKSON* Director *M *0404 924745 *E* ben(a)elogik.com.au *W* elogik.com.au <http://www.elogik.com.au/> <http://www.elogik.com.au>

1 0

strange udp
by Alex Samad 26 Apr '17

26 Apr '17

Hi any one know what 81.198.87.240:15252 is used for by the CCR's then I found this https://forum.mikrotik.com/viewtopic.php?t=116484 This is more of an FYI. A

1 0

Mikrotik L2MTU testing
by Philip Loenneker 26 Apr '17

26 Apr '17

Hi all, I'm sure we all know that you can use ping and do-not-fragment to test the L3 MTU of a path. But can you do anything to test the L2 MTU? We have the L2 MTU on some interfaces set to 1592. L3 MTU is still set to 1500. I want to know that the L2 MTU is working as intended. Doing a MAC ping, which I thought would use L2, is still limiting it to 1500 byte packets before they are unsuccessful due to fragmentation being required. I haven't done a packet capture to test, but it seems like the MAC ping is using L3 packets, which makes sense if it needs to use ICMP so that the destination host responds. I have also tried ARP ping, but that appears to ignore the packet size. I'm hoping to do this all Mikrotik to Mikrotik, but may have to resort to using another device off the side. Any suggestions? Regards, Philip Loenneker | Network Engineer | TasmaNet

1 0

6.39rc8-
by Greg 26 Apr '17

26 Apr '17

This has bitten me on a few upgrade occasions(6.37.x>6.38.x).. There must have been an upset fan-base ? ***************** What's new in 6.39rc80 (2017-Apr-25 09:23): !) bridge - reverted bridge BPDU processing back to pre-v6.38 behaviour; (v6.40 will have another separate VLAN-aware bridge implementation); ********************** Cheers Greg

3 3

Event driven scripts
by Alex Samad 24 Apr '17

24 Apr '17

Hi I know about the vrrp on backup / master events. Are there any ways to capture when an interface comes up. for example if an interface changes state to up I would like to run a script and if it goes off being up then run another scripts Alex

2 5

EoIP
by Jason Hecker (Up & Running Tech) 26 Mar '17

26 Mar '17

Hi Mike I was just looking at your EoIP article https://shop.duxtel.com.au/article_info.php?articles_id=45&osCsid=s28vgpuoi… and was thinking about how it relates to NV2 nowadays. My experience has shown that NV2 seems to support priorities (based on DSCP with a mangle rule) and also I can pass VLAN tagged traffic over it without any issues (I am told this wasn't always the case). With a pure PtP link is it necessary to use your supplied PtP/EoIP scripts or will NV2 do the job just fine now seeings as it seems to pass bridge ethernet frames unmolested? Jason Hecker -- <https://www.upandrunningtech.com.au>

4 4

Sierra Wireless (Telstra Aircard) 320U 4G Modem - SOLUTION
by Paul Julian 24 Mar '17

24 Mar '17

Hi All, we have been using the Sierra Wireless 320U 4G USB modem and a Mikrotik hAP routers for a while now for out of band management on our network, I remember when we first got the modems and plugged them into a routerboard that we had lots of problems getting them working, then there was the mucking about with PPP or LTE etc etc. Anyway we just bought another 20 of them for more of our sites and I faced the same issue again of not being able to get them to work, so when I finally figured out the issue I thought I would share the details here so that it benefited anybody who needed the information. So this device when plugged into a Mikrotik Router USB port will show up as an LTE interface, you shouldn't need to cold boot the device or anything once it's inserted as some people say, the interface should just appear, this is from my experience anyway on 6.35.x version of ROS with a hAP or RB2011 series. If the interface doesn't appear check to make sure you have the "Ignore DirectIP Modem" checkbox NOT ticked under System/Ports/Firmware, you need to have this unticked for it to work. Once you have the interface appearing the only other settings you need to change are to set the APN within the lte1 interface, and add a DHCP client to the Interface to get your IP address from Telstra. If you have organised it when ordering your SIM, telstra.extranet APN will give you a dynamic public IP or telstra.internet APN will give you a dynamic NAT'd private IP, we chose the former so that we could get into the routers remotely, there is no static public IP option in case you were wanting that..... Now, if you have got to this point and are saying that your device is appearing when you plug it in but doesn't get an IP or the lights do funny stuff then read on. These devices have a feature which kicks off the Telstra software installation when you plug it in, unfortunately this feature breaks the process when you plug it into a Mikrotik routerboard, so to disable that feature you need to do the following. Plug the modem into your Windows PC, install the Telstra Mobile Broadband software when it prompts you to. Once it's installed and the device has been discovered and it's ready to connect (Green Connect Now button is visible) go to the Tools menu, then Options, then Account tab, down the bottom you will see a tickbox called "Disable SWOC", tick that box, then click the Apply button, then OK to exit. Unplug the device from your PC and plug it into your Routerboard and then it should work fine. I can't include the image I have for information about the lights on the modem as attachments aren't allowed, but basically you want the power light to be solid BLUE and once it's connected to the network you want the data light to be solid GREEN, this indicates a connection to the LTE network, so faster speeds. I hope this has been useful to somebody J Regards Paul

4 4