- Public - talk.mikrotik.com.au

CCR rack mounting brackets
by Alex Samad - Yieldbroker 18 Nov '16

18 Nov '16

Hi Any one in Sydney have a spare set they are not going to use, that I might have . I seem to have lost a pair. Alex Alex Samad | Network And System Manager | Yieldbroker * +61 2 9994 2893 | ( +61 438 838 143 | * alex.samad(a)yieldbroker.com<mailto:alex.samad@yieldbroker.com> This email is confidential and intended for the addressee only. If you may have received this email in error please delete it and notify the sender immediately. Recipients should not forward, disclose, distribute or copy this e-mail or any attachments in whole or part without the express permission of the sender. Views expressed in this message are those of the individual sender, except where they are specifically stated to be those of Yieldbroker. Yieldbroker accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Yieldbroker can not guarantee the integrity of this communication and shall not be liable for e-mail which may be intercepted, corrupted, lost, spoofed, delayed, incomplete, or virus infected.

1 0

bgp question
by Alex Samad - Yieldbroker 14 Nov '16

14 Nov '16

I have 2 border routers that mesh connect to 2 vendor routers on their own vlan. The border routers connect to another pair of internal routers on another vlan. So bdr => vendor eBGP bdr => internal iBGP I have bgp peers connected bdr -> internal Now I am only seeing a very limited range of prefixes. 1) I think my aggregate is affecting my iBGP 2) I think my outfilter on my instance is affecting my iBGP as well I thought iBGP would be treated differently. I am thinking of instead of sharing my AS between inside and the border I create a new private AS. As I don't want to change my BGP filters Alex

4 6

Multihoming BGP - Different Sites
by Darryl Ross 30 Oct '16

30 Oct '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi All, Trying to work out a multi-homing BGP configuration where I have a router at two different locations (connected via a dedicated link) with a different provider in each location and the complication that ISP 2 must only be used for transit when ISP 1 is completely down. I am receiving only default and directly connected routes from each ISP. ISP 1 ISP 2 | | +---+ +---+ | A |---------| B | +---+ +---+ At present, I have router B set a low local preference on the default received from ISP 2 and router A set to always inject the default route into the network via OSPF. This causes all traffic to flow from B to A via the dedicated link. The issues I am having getting this working the way I want is: * The default received from each provider is not passed through the iBGP session to the to other site. Have not been able to work out how to get this to happen. * If I enable distribute-default=if-installed on router B, it takes no effect if the only default is the BGP default. It appears OSPF needs a statically defined default. * If I enable distribute-default=always on router B, it causes it to remove the OSPF default received from router A from the routing table, so I can't use distance to steer the traffic. Has anyone tried to get a setup like this working? I've tried a few things with scripts to monitor the BGP sessions and toggle static routes and OSPF config but none of them have worked satisfactorily. The only other work around I can think of is to VLAN ISP 2 back over to router A, although I would really really like to not do that (the sites are interstate from each other). The routers are involved are a CCR1072 and a CCR1036, both running 6.36. 2. Thanks Darryl -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlgVOokACgkQ/XQ6DbmPjom7QQCfWIlcI2RZmqxH/jCQhGcujq3V Y+oAn2iZgKqByn5R4KxKGfjK5jDmbcDq =QtUg -----END PGP SIGNATURE-----

4 3

Tested 4G Combinations
by Stephen 27 Oct '16

27 Oct '16

Hi all, I have a MikroTik RB951G-2HnD at the moment. I've recently moved to a new location where no ADSL or WDSL is available. This essentially leaves me with two options - satellite, or 4G. I was considering 4G for the moment at least. My question is largely twofold: 1. Has anyone got a tested USB 4G modem/card/etc that they can say definitely works well with the MikroTik? Don't want to fork out some money and find out it doesn't :) 2. Can anyone confirm a provider/plan that works well with this? I am considering Optus's "$70 My Mobile Broadband Plus" or, more reluctantly, buying their "Home Wireless Broadband" plan for 200GB a month, but, I have to then buy the Huawei E5186 modem. I couldn't find any definitive advice if we can bridge the E5186 and get the MikroTik to do the dialing. I'd rather avoid double-NAT'ing if I can. Otherwise, I guess I could pull the SIM out and stick it in a known working modem - but that seems awfully expensive for not much. Any advice would be much appreciated! Thanks, -Stephen

6 6

Question
by Alex Samad - Yieldbroker 21 Oct '16

21 Oct '16

Hi I am looking at consolidating some Virtual routers installs into physical ccr1036 (&72) Current my vm's handle public internet and private p-t-p links. My thought was to use VRF to isolate the routing tables on the new consolidated ccr's. I am presuming all the interfaces that where the old private would get tagged with a vrf tag=??? And all the internet packet would get tagged with a different vrf tag. On the router I would have these interfaces A) Internet - B) Private - C) FromInside. I want to allow C to A or B and A to C or B to C. but never A <=> B (don't want to act as a transit). On B I am using bgp to clients and on A I am using BGP to ISP's. I was going to use a private BGP AS for the private links and not to mix it with my public AS on the internet. This sounds like stock standard stuff. Any gotchas to look for ? A

3 8

PCQ Queue performance on CCR-1072
by Matt Perkins 21 Oct '16

21 Oct '16

Anybody have any idea what sort of real world performance I can expect from a CCR-1072 running PCQ between two 10 gig interfaces. Matt. -- /* Matt Perkins Direct 1300 137 379 Spectrum Networks Ptd. Ltd. Office 1300 133 299 matt(a)spectrum.com.au Level 6, 350 George Street Sydney 2000 Spectrum Networks is a member of the Communications Alliance & TIO */

3 3

VDSL modems
by Mike Everest 07 Oct '16

07 Oct '16

Hi Folks, A few months back, I asked for opinions on a good adsl modem to use a bridge for MikroTik PPPoE. With increase in prevalence of VDSL services (especially with #nbwhen ;) does anyone have some opinion of readily available and 'good' (not necessarily cheap ;) vdsl modems? Cheers! Mike.

10 14

RB1100AHx2 PSUs
by Ben Farmer 29 Sep '16

29 Sep '16

Hi guys, We've got a few RB1100AHx2's with failed PSUs we'd like to re-use, however I'm having a hard time finding spare supplies for them. Would anyone know of any supplier with compatible PSUs? Any help would be much appreciated! Regards, Ben Farmer Network Engineer www.myport.com.au Address 86 Brookes St, Fortitude Valley Q 4006 Mobile 0488 034 499 Direct 07 3177 1122 Tel 1300 733 629 Fax 07 3177 1129 Email ben.farmer(a)myport.com.au

4 4

RB3011 - ready for production use?
by Thomas Jackson 21 Sep '16

21 Sep '16

Good afternoon all, I’m doing a design for a new install where (on paper at least) a pair of RB3011s will suit the needs perfectly. An RB2011 isn’t going to have enough grunt to handle the work, but there isn’t the justification (or budget) for a CCR. With the architecture change, I’ve held off moving to the 3011 series for as long as possible. For those that are more brave than me, how are they looking in terms of show-stopping bugs now that they have been out for a while? Cheers, Thomas

3 3

Creative Mikrotik scripting - checking connectivity inside customer networks
by Philip Loenneker 06 Sep '16

06 Sep '16

Hi all, On the back of Terry's creative NBN interface management, I thought I would share an interesting "hack" I came up with last week that might be of value to list members. We provide Managed Private Network services to some customers, where they have multiple sites connected to each other. Our monitoring system does a great job of monitoring if our routers are alive and accessible on our management IP subnets, but we didn't have a way of ensuring that the inter-site links were online. These could be VPNs, EoIP tunnels, VLANs, or routed connections. We also sometimes need to know if there is an issue with their Internet connectivity. A while back, I wrote a script that would loop through a Firewall IP Address List to ping specific hosts and send an email if any were offline. However, this never made it to production for various reasons, and had issues such as producing a lot of emails. Last week I revisited the project, and was looking around to see if I could read the results via SNMP and leverage our existing monitoring platform, which added the advantage of being able to see historical data. But things like Global Variables are not available via SNMP. Enter the Bridge Interface. These interfaces are available via SNMP, and have an MTU value that can go up to 65535. With a bit of tweaking to my previous script, instead of sending an email it changes the value of the Bridge MTU. The MTU can't go below about 80, so I set it up to have an "everything is good" value of 32768, then reduced the number depending on the services offline. A colleague suggested using powers of 2 so that, with a single number, we can identify exactly which services are offline, up to 15 entries. Our monitoring platform doesn't understand bitwise numbering like that, so it requires some manual processing to work out which services are offline, but it is enough to trigger an event so that somebody takes a look. This script gets installed on one single device per customer, obviously choosing one that has high stability and connectivity to all other sites, such as a router installed in our data centre. Any feedback is welcome. My apologies if my code isn't as polished as it could be, it is still being tweaked and improved. This is working well on RouterOS v6.30.4. Regards, Philip # Bridge interface /interface bridge add mtu=32768 name=bridge-MPN-Connectivity-Check # Address list - the first number is the value assigned to the site, and will be used to adjust the MTU of the bridge /ip firewall address-list add address=8.8.8.8 comment=1,Internet list=MPN-Connectivity-Check add address=192.168.250.10 comment=2,Site2 list=MPN-Connectivity-Check add address=192.168.250.18 comment=4,Site3 list=MPN-Connectivity-Check add address=192.168.250.54 comment=8,Site4 list=MPN-Connectivity-Check add address=192.168.250.58 comment=16,Site5 list=MPN-Connectivity-Check #The script that does the work /system script add name=MPN-Connectivity-Check policy=read,write source="# Check MPN paths (VLAN, EoIP, Internet)\r\ \n\r\ \n:local tempIP;\r\ \n:local tempIPcomment;\r\ \n:local tempIParray;\r\ \n:local pingResult;\r\ \n:local errorCount 0;\r\ \n\r\ \n:put (\"Running path assurance script...\");\r\ \n\r\ \n:foreach listEntry in=[/ip firewall address-list find where list=\"MPN-Connectivity-Check\" disabled=no] do={\r\ \n :set tempIP [/ip firewall address-list get \$listEntry address]\r\ \n :set tempIPcomment [/ip firewall address-list get \$listEntry comment]\r\ \n :set tempIParray [:toarray \$tempIPcomment];\r\ \n :set pingResult [/ping \$tempIP count=1]\r\ \n :if (\$pingResult = 0) do={\r\ \n # Ping failed\r\ \n :log warning \"Ping failed to \$tempIP (\$tempIPcomment)\"\r\ \n :put \"Ping failed to \$tempIP (\$tempIPcomment)\"\r\ \n :set errorCount (\$errorCount + \$tempIParray->0)\r\ \n }\r\ \n}\r\ \n\r\ \n# You can't have values below about 80 - but that is enough to cause alarms, so set it to minimum of 80\r\ \n:if (\$errorCount>32688) do={:set errorCount 32688}\r\ \n\r\ \n# Update the MTU value regardless\r\ \n:put \"Setting alert status\";\r\ \n/interface bridge set mtu=(32768-\$errorCount) [find name=bridge-MPN-Connectivity-Check]\r\ \n" #Make it run every minute /system scheduler add interval=1m name=MPN-Connectivity-Check on-event="/system script run 0" policy=\ ftp,reboot,read,write,policy,test,password,sniff,sensitive start-time=startup To get the OID for SNMP monitoring of the new Bridge interface: /interface print [check the ID of bridge-MPN-Connectivity-Check] print oid [look for entry ID you noted before, capture OID for actual-mtu]

3 2