- Public - talk.mikrotik.com.au

Kernel Failures
by Paul Julian 08 Mar '17

08 Mar '17

Man what is it with kernel failures at the moment, it must be the weather, anybody else seem to be getting a few lately ?? We have seen two in two days from totally different device types, both critical devices of course.... Regards Paul

7 11

multi VRF
by Alex Samad - Yieldbroker 06 Mar '17

06 Mar '17

Hi Asking the list again, sorry my google skill on archive search is letting me down. So a quick recap ccr1036 & ccr1072 I have Interface Xfer - bridge port onto eth1, this was the interface is also up , 192.168.1.1/24 Management - vlan 8 Vendor - vlan 7 Internet - vlan 6 My default routing table is 192.168.1.0/24 Xfer Dgw 192.168.1.2 My internet I have vrf internet and I use BGP with routing tag internet Same for vendor and same for management So management routing table is basically Local attached network 10.10.10.80/24 Dgw 10.10.10.1 I have the appropriate ip route vrf and ip route rule lines and I also have mangle lines that mark inbound packets and re applies marking on the outbound packets What happens is any ICMP generate locally ... host / net unreachable are generated with src address 192.168.1.1 not the right src address for the vrf. I have tried snat lines basically saying if src address = 192.168.1.1 and out interface = management then change to the 10.10.10.80 << this doesn't work. I seem to remember somebody saying they had fixed this some how? If so can you please repost. I have chatted with support... basically they say yes bug, will not be fixed until V7 .. maybe next century ... Any one know of any work arounds ? Thanks Alex

3 2

Scripting question
by Alex Samad 06 Mar '17

06 Mar '17

Hi if I do something like this /route ospf interface :if ( [ print count-only ] > 0 ) do { <something> } when I import the script (and it runs), the number of items in print count-only get printed as well. I tried :local A [print count-only] but still it prints it when the script it run Any one know how to stop that ? A

2 2

EOIP Tunnel Drop
by Paul Julian 06 Mar '17

06 Mar '17

Hi All, we have had a few EOIP tunnels just die recently between Mikrotik Routers. Some have been running happily for years and then just stop, disable/enable makes no difference. The only way to fix the problem is to either change the tunnel ID or create a whole new interface on each end. Has anybody come across this before ? Regards Paul

2 4

Mikrotik and Priority Queues
by Paul Julian 15 Feb '17

15 Feb '17

Hi All, just looking for some real world experience from others when it comes to QOS on Mikrotik. We do a fair bit of QOS on our network already and on the whole it works pretty well, however we are looking at trying to provide two service options to customers across our network and trying to prioritise those to the EU's. We want to be able to offer a cheap high contention service the same as NBN services and a high grade business option with low contention and high service levels across our network but I am have a brain fart when it comes to thinking about how to do the prioritisation. All customers connect via PPPOE so I Was thinking maybe having a different profile and setting that in radius and then using the insert after queue feature to drop it into a priority queue, but that's about as far as I have got with it. Ultimately I will need to mark all the traffic from each customer type and prioritise it from end to end, it's just trying to identify that traffic in mangle rules which I am having an issue with. Currently we prioritise SIP traffic over everything else pretty much, we just have mangle rules which act on the prerouting chain and mark the connections and then packets, the queue tree appropriately prioritises that traffic based on the marks as the traffic leaves each interface, although one thing I am still working on is how to prioritise that traffic when you have varying levels of each, such as when sending traffic to multiple customers on a DSLAM, you just can't set an limits really.... Any thoughts would be appreciated ! Regards Paul

1 0

Re: [MT-AU Public] NBN VDSL
by Thomas Bishop 15 Feb '17

15 Feb '17

Hi Denis, With normal nbn fttp/FW/sat any old mikrotik will do the job. We use the NetComm nf4v for nbn fttn and it has been very successful bridged into mikrotik rb1100's. I believe the nf10w is similar but cheaper as well. The trick with nbn fttn is registering your modem with nbn for any faults. The NetComm's are fully compliant with nbn requirements hence why we stuck with them. On Feb 15, 2017 2:21 PM, Mike Everest <mike(a)duxtel.com> wrote: Hi Denis, I'm happy to propagate a 'rumour' that there may be an SFP module become available sometime during 2017 that supports vDSL ;) In the meantime, though, I'm sure others on this list will have a few suggestions (it's been asked at least once before - it may be worth checking the archives for prior suggestions, for comparison or aggregation with latest comments! ;) Cheers, Mike. > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Denis > Hancock > Sent: Wednesday, 15 February 2017 1:58 PM > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: [MT-AU Public] NBN VDSL > > Hi All > > We're starting to see some NBN rollout to our customers. > Preference is to have the Mikrotik do all the work, any recommendations for > VDSL modems ? > > -- > > *Denis Hancock* > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au _______________________________________________ Public mailing list Public(a)talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________ ______________________________________________________________________ This email has been scanned by the Symantec Email Security.cloud service. For more information please visit http://www.symanteccloud.com ______________________________________________________________________

2 1

CHR scaling CPU/Memory
by Philip Loenneker 15 Feb '17

15 Feb '17

Hi guys, We have a CHR with 2 CPUs which is really struggling. I haven't found any info on the Mikrotik website or forums about scaling of it. I am considering upgrading it to 8 CPUs. a) Is there a limit to what resources we can allocate to CHRs? b) Can you increase CPU count by simply shutting it down and allocating more in Vmware, or is there something else required? c) Is there anything else we need to be aware of? Regards, Philip Loenneker | Network Engineer | TasmaNet

2 3

Multiple address and VRF and local services
by Alex Samad - Yieldbroker 14 Feb '17

14 Feb '17

Hi I had a problem recently with BGP and an interface with 2 ip address say 2.7.3.2/24 5.5.5.2/24 My original BGP peer statement had update-src=<interface name>. I have now changed that to IP-address Thought this was a bit strange as the remote address was 2.7.3.6, why it would pick 5.5.5.2 over 2.6.3.2 I am not sure (maybe a vrf thing ) Now my current issue is BFD, you can't supply src address, again for some reason BFD has decided to use 5.5.5.2 as the src. And when it talks to 2.7.3.6 it thinks its down :((((( So if I remove my second address from the interface all is good, but I need/want the 2 addresses. This interface is a VLAN of a trunk (LACP), seems like I can't create 2 interfaces of the same trunk with the same vlan. My next thought was I could create a bridge and connect it to the vlan interface. 2.7.3.2/24 on the vlan 10 interface 5.5.5.2/24 on the bridge interface with port vlan10 Then (fingers crossed), I could turn off BFD on the bridge interface and leave it on for the vlan10 interface. This seems overly complicated. The real crux is that I can't set the prf src for local services ... Alex

3 3

last 2 (hopefully) vrf questions
by Alex Samad - Yieldbroker 09 Feb '17

09 Feb '17

Hi My last 2 issue with VRF's So ICMP's that a generated on the box for net unreachable and similar iCMPs have the src address of the main table So my main table is basically 192.168.0.0/24 ether1 0.0.0.0/0 via 192.168.0.2 prc-src 192.168.0.1 VRF's Management Internet Private I have /ip route vrf set up for each And I have mangles rules to mark and remark packets So what happens on any of the vrf interfaces if the ccr generates a ICMP it has a source address of 192.168.0.1 I have a snat rules to snat to each interfaces actual address, but that doesn't seem to work for these icmp's But does work if I do something like this /ping 8.8.8.8 the source gets set to my Public ip address I use mange to route 8.8.8.8 from local machine via the Public VRF. I have sent support an email, but as yet no response. I do believe that somebody said they had fixed this on the list ? My last problem for now is my main table DGW is reliant upon ether1 being up :( if its not then local packet generation stops working . My thought was to generate a bridge and attach ether1 and apply the ip to the bridge ... the bridge should always be up and thus the dgw should always be up. How are other people handling this ? I did try a dgw with gateway against another bridge interface, but that interface was in Private and it overwrote my mangle rule . Alex

1 0

CPU pegged at 100%
by Andrew Gilbett 09 Feb '17

09 Feb '17

Hi All, How can you do a "TOP" to find out what is pegging a cpu core on a CCR? I suspect it is BGP but not sure how to check. Thanks Andrew

4 5