- Public - talk.mikrotik.com.au

SSTP - Windows to RB2011
by Purdon, Bob 07 Apr '16

07 Apr '16

Hi All, /sys

3 5

Re: [MT-AU Public] SSTP - Windows to RB2011
by Patrick Sayer 07 Apr '16

07 Apr '16

SSTP on mikrotik does not conform to the Windows standards at all. My understanding is it will not work. SSTP Mikrotik to Mikrotik works great. Try PPTP from windows to Mikrotik as this works fine (though is more often blocked by firewalls).

2 1

4G Bonding
by QCS Group - Infrastructure 01 Apr '16

01 Apr '16

Hi All, Just wondering if this is possible. We have a site that has no lines left in the exchange, the 4G in the area is horribly slow. Is there a way we can bond 2 x 4G devices to a Mikrotik? Etc one from Optus and one from Telstra? What device would I be looking at to get this happening? Thanks Marius ________________________________ Thinking of updating your phone system? Ask us about our "Cloud Based PABX" solution before you do anything. ________________________________

4 5

DDoS Mitigation?
by Terry Sweetser 30 Mar '16

30 Mar '16

Hello Mikrotikians! Just wondering what ideas and implementations people have tried to detect and block packet floods and other DOS attacks? I'm currently running 6.33 on X86 hardware and have a non-production box trying a simple PPS rate firewall filter to auto-build a list of target addresses and drop inbound traffic to the list (with a 2h expire time.) I want to go further and push the list to BGP as /32 blackhole routes to my iBGP and also upstream to the likes of VOCUS who support /32 black holing. This is also on top of a general purpose filter which is looking for invalid TCP flag combinations to just drop outright. Frustratingly, the last few DDOS attacks inbound to AS7477 have been TCP SYN/RST at high packet rates, but barely past 25Mbps of payload -- router/os has proven very susceptible to high PPS hitting a single queue (HTB and simple for 1 ip address and/or sub-interface) and turning into a turtle. -- http://about.me/terry.sweetser

7 9

3G Antennas
by Paul Julian 23 Mar '16

23 Mar '16

Hi All, we have started to roll out of 3G OOB with Routerboards, Intel NUC's and Sierra Wireless 320U USB Modems , however we have coverage issues in some MDF rooms which is to be expected. There seems to be a plethora of antenna options but we need something small and with decent gain to have a chance, we need to be able to attach it to our 6RU racks in these basements, any suggestions on a good option ? Thanks Paul

1 0

Antennas for Sierra Wireless 320U
by Paul Julian 06 Mar '16

06 Mar '16

Hi All, we are just about to deploy some routerboards with Intel NUC and 4G Modems for OOB units. As the units will mostly be installed in MDF rooms we need to boost the signal in a number of locations. Does anybody have any real world experience with any reasonably compact antennas that could be mounted on the outside of a rack which will improve the 4G signal fairly significantly ? We will be connecting them to the Sierra Wireless 320U USB dongles which have two antenna connectors so it will have to be compatible with that. I would appreciate any suggestions Thanks Paul

5 7

LNS Implementation
by QCS Group - Infrastructure 02 Mar '16

02 Mar '16

Hi All, We are going to start on selling NBN/ADSL services and thus I need to look into LNS, does Mikrotik support this yet or do I have togo with a cisco? Will be going with AAPT NWB services. Any guidance would be great. Thanks Marius ________________________________ Thinking of updating your phone system? Ask us about our "Cloud Based PABX" solution before you do anything. ________________________________

6 6

Simple Queue behavoir with mixed dynamic and static queues
by Paul Julian 23 Feb '16

23 Feb '16

Hi All, just wondering if anybody has noticed this functionality in Simple Queues before, it kind of makes sense that it does it but kind of doesn't as well. The scenario goes like this. You have a backhaul for a site, let's say it's 50M, it connects into a RB1100AHx2 for example, so you have a simple queue on that interface to keep it just under that because it's a MEF and it will drop packets like a bitch if you let it go over. This site runs PPPOE termination for a couple of users for example, so when you add your queue for the backhaul interface the other queues then come in after it once the users log in, so for some reason simple queues work in order somehow, so all my user queues below the backhaul queue somehow inherit the speed setting on the backhaul queue, it's like the queue limits are totally ignored on the user queues. If I have 50M limit on the backhaul queue and 10M limit on my user dynamic queues they all get access to more than 10M and spike up to the 50M limit of the backhaul queue. So if I move the backhaul queue to the bottom, or tell the PPP profile to put the user queues above the backhaul queue then the user queues behave correctly but the backhaul queue seems to get some random traffic and never the total for the interface. The way I setup the backhaul queue is just simply set the target to equal the backhaul interface name and set my upload and download speeds, nothing else. I have come across this issue before and the only way I could find around it was to change the backhaul queue to be a queue tree queue and use mangle rules to mark the traffic. Has anybody had this issue before ?, am I just trying to do this wrong ?, is it broken or working by design or what ?, any suggestions ?? Thanks Paul

2 3

question re vlan tagging
by kevin＠scottsip.com.au 22 Feb '16

22 Feb '16

Hey there, Can you use a mac filter to set say polycom handsets to vlan 101 and everything else to vlan 100 per say ? Regards, Kevin Scott

2 1

spid ce9 is not found
by Dave Browning 22 Feb '16

22 Feb '16

Hi All, Anyone seen this error before when trying to get IPsec working? Google comes up with nothing. “spid ce9 is not found” Cheers, Dave Dave Browning | Systems Engineer P 07 3369 7666 Level 1, 12 Railway Tce, Milton QLD 4064 This email and any files transmitted with it contain confidential information for the exclusive use of the intended recipient. If you received this email in error please notify Sentrian Pty Ltd immediately by return email to the sender and delete the original email. We do not guarantee that this email or any attached files are free of viruses. All recipients should undertake their own virus scanning.

1 0