- Public - talk.mikrotik.com.au

Traffic prioritisation
by Ben Williams 13 Apr '15

13 Apr '15

Hey, I've got an RB951G-2HnD (running 6.27) on my home network, and I want to do some traffic prioritisation, because my ADSL sync maxes out at 5.5mbps. I want to: - make everything that comes from the Internet to my AppleTV high priority (Netflix :) ) - make everything to phones medium priority - make everything to my PC - which is mostly used for downloading Linux distros - low priority Without limiting the bandwidth of any of them; i.e. if nothing is going to the AppleTV, the full bandwidth should be available to my PC. If the AppleTV is wanting 3mbps, it should get all of that and the traffic to my PC should be limited to whatever's left. Is that possible? I'm not much of a networking guy, and I'm sure there are proper terms to explain what I'm wanting to achieve :) (Am I talking about QoS? Is it a queues thing?) - Ben --

2 1

COA with Freeradius and Mikrotik
by Paul Julian 13 Apr '15

13 Apr '15

Hi guys, we are making some major changes to our authentication and billing and want to implement the COA feature so that any plan changes mid cycle for customers can be pushed to the LNS. I know that Mikrotik supports COA by using the inbound radius options and it should do what we want but what I can't seem to find enough information on is how the radius server actually triggers the update to be sent to the LNS, can anybody here shine any light on that for me at all ? We really want to get this going as I hate having to kick somebody off just for their queue to change, but just can't seem to connect the dots..... Thanks Paul

4 7

Graphing IPv4 vs IPv6 traffic
by Purdon, Bob 10 Apr '15

10 Apr '15

Hi All, I'm interested in comparing the volume of IPv4 and IPv6 traffic entering my home network - ideally by graphing it with Cacti. My edge router is an RB1100AHx2, with a PPPoE connection to my ISP and a couple of ports uplinking to gigabit switches. Unless I'm mistaken, there are no objects in the SNMP MIB for this. I looked at exporting flow data, but it seems flow export is only supported for IPv4. I guess at a pinch I could subtract the IPv4 volume (from the flow data) from the interface counters (IPv4+IPv6) and get something fairly close. Kind of messy though. I could probably whack in some firewall rules to simply count traffic and ssh to the router every 5 minutes to pull the numbers. Also kind of messy. Has anyone done this before? Any suggestions on a relatively simple (and reliable) way to do it that I've overlooked? Cheers.

4 6

Optimal wireless settings
by Jason Hecker (Up & Running Tech) 10 Apr '15

10 Apr '15

The other day I was on a job an noticed I was able to transfer data from my laptop to a server over Wifi at around 15MB/s. This was to an Aerohive AP in the next room. Even in the same room I have trouble getting close to 10MB/s on with my Mikrotik AP's. In general, what settings on the Mikrotik devices in AP mode will achieve the greatest throughput? Can it vary depending on the model? --

1 0

IPSEC Bugs in V6.27
by Paul Julian 31 Mar '15

31 Mar '15

Hi guys, I just wanted to advise people on this list that I found some serious bugs in 6.27 last night, eventually causing the router to get bricked and lose access altogether when I tried to downgrade it. Initially I reported problems with the lifetime value in the proposal, this will not work when set to 8 hours, and is still a problem. So another issue is that once you work around the problem of the lifetime setting the router still NAT's the outbound IPSEC traffic, even when you add the Accept rule in the NAT rule list the router insists on NATing the traffic for the tunnel. So be careful if you run IPSEC and want to upgrade to 6.27, I have found every other router seemed to run better with this version, but definitely not if you are running IPSEC. Downgrading to v6.10 bricked the router for some reason, downgrading to 6.25 resolved the IPSEC issues instantly, no reconfiguration was required so they were definitely bugs. Regards Paul

1 0

ROS 6.27 IPSEC Bug - Proposal Lifetime
by Paul Julian 31 Mar '15

31 Mar '15

Hi guys, just wondering if anybody has noticed this bug in V6.27 (latest) RouterOS. When configuring the IPSEC proposal if you set the lifetime to 8hours, or 08:00:00 it actually responds to the IPSEC proposal with a lifetime of 0. No matter what else I changed it to it responded with the correct lifetime, except for 8 hours. Unfortunately I have been working on connecting an IPSEC tunnel for a customer for the last couple of hours banging my head against the wall with this one, when I finally noticed this error when it was failing the phase 2 negotiation, it identifies that there is no matching proposal and kills the connection. Just trying to get the US to change their end now, will report it to Mikrotik as a bug I think unless anybody can identify how it can be by design ;-) Regards Paul

1 0

RouterOS rebooting over and over? Possibly BGP + ipipv6 tunnels?
by Damien Gardner Jnr 29 Mar '15

29 Mar '15

Hi Folks, Still waiting for my CCR to come back after dying, so have temporarily cloned one of my RouterOS VM's and am running four of them to accomplish the same as the CCR (and once the CCR comes back the plan is to buy three other 'tik hardware routers, once I figure out exactly what I want/need, based on the resources these VM's are using) Anyway, I seem to be having a weird problem with one of the routers. it's a slightly strange config - I have ipipv6 tunnels between the router and a debian+quagga box in the US. Two tunnels on each of my upstream providers (one for v4, one for v6, as linux does NOT want to run dual-stack over the one tunnel). Since having issues, I've pulled it back to just the two tunnels between the two routers - one for V4, one for V6. I then run BGP over both of those tunnels, and use that to advertise my prefixes in the US. It works well - provided I *don't* advertise my primary /22. My two v6 /48's and my secondary /22 are advertising fine, and work well. However within 2-3 minutes of advertising my primary /22, the router reboots. And immediately reboots. And immediately reboots. And then shuts down. I'm not sure if it's routerOS doing the shutdown, or xenserver detecting the reboot loop and forcing it down. Has anyone seen that before? There's nothing obvious in the logs right before it reboots, and on boot it simply states that the previous shutdown was unexpected. It doesn't generate a supout, so I'm guessing it's not hitting a watchdog or anything? It has me wondering if this is the same reason my CCR1009 died? As I had exactly the same config on the CCR (except it was handling three full v4 + v6 feeds, AND running the three pairs of ipipv6 tunnels plus the three pairs of send-only feeds to the US) Has me rather pulling my hair out.. Wanted to get my 'new' config with everything separate labbed up and running in production before I go and lash out on all new 'tik hardware - but if 'tik isn't going to do one of them, then I lose the awesomeness of winbox, and may as well go back to cisco gear for all of it :-p Thanks, Damien -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder

5 18

DHCPv6 PD Option 18 Etc
by Terry Sweetser 29 Mar '15

29 Mar '15

Hello Mikrotikians! Well, I'm on the learning curve with CCRs and IPv6 -- successfully have ipv6 with DHCPv6 live and handing out PDs. So, firstly, I would prefer to have all of the PDs to be "static". The clients all use option 18 to identify themselves -- bonus points for guessing it is NBN. That leaves me with the task of making the allocations static and linked to the AVC ID in the Option 18 string. How to do? -- http://about.me/terry.sweetser

3 3

Looking for experiences running 10Gbps BIDI on CCRs
by Bryan Tabb 22 Mar '15

22 Mar '15

Hi all Just wondering if anyone has played with 10 Gb BIDI SFPs in the CCRs and what your experiences are like. I'm thinking things like - Which brand worked or probably more important didn't work - Any gotcha's \ roadblocks you came across Looking at using a couple CCRs at each end of a single fibre and using l2vpns to extend network. Kind of a poor man's CWDM. Just wondering if I'm going to hit CPU limits. If im not mistaken if you bridge ports that hits the CPU? Config would look something like below Thanks Bryan /interface vpls add cisco-style=yes cisco-style-id=100 disabled=no l2mtu=1500 name=eompls-xconnect-FFF remote-peer=192.168.1.1 use-control-word=yes /interface bridge add name=bdi-xconnect-pwid-100 /interface bridge port add bridge=bdi-xconnect-pwid-100 interface=sfp1 add bridge=bdi-xconnect-pwid-100 interface=eompls-xconnect-100

1 0

Internode and weird IPV6 dynamic DNS on 750g
by James Hodgkinson 21 Mar '15

21 Mar '15

So, I’ve had a 750G since the MUM in Brisbane and it’s been great, never had a chance to set any IPV6 up on it until after I got Internode about 12 months ago. It all works pretty well, except for one niggle. Going into the DNS screen on the web interface just locks it up hard (Chrome, IE, Safari all tested), and I tend to have to kill the process for the tab and restart my session. I hadn’t checked using SSH before because DNS seemed to work OK and there weren’t any other issues, but I did tonight and what I found was … curious. I have statically set a pair of servers, my internal and GoogDNS as the external… but it seems to have picked up a few IPV6 ones dynamically? Anyone know how to stop this? I guess it’s the use-peer-dns setting on the dhcp-client that’s buggy in some way? [user@router] /ip dns> print servers: 10.0.0.2,8.8.8.8 dynamic-servers: 192.231.203.132,192.231.203.3, 2001:44b8:1::1,2001:44b8:2::2, 192.231.203.132,192.231.203.3, 2001:44b8:1::1,2001:44b8:2::2, 192.231.203.132,192.231.203.3, 2001:44b8:1::1,2001:44b8:2::2, (repeat this 158 times: 2001:44b8:1::1,2001:44b8:2::2, ) allow-remote-requests: no max-udp-packet-size: 4096 query-server-timeout: 2s query-total-timeout: 10s cache-size: 2048KiB cache-max-ttl: 1w cache-used: 79KiB Yeah, I really did count the 158 repetitions, just because. After realising the weird config I tried manually setting the IPV6 resolvers, then disabling use-peer-dns under the /ipv6 dhcp-client, then disabled/re-enabled the client and it showed a much shorter list of dynamic servers… still repeated the previous ones as above a couple of ti (without the epic repeats). Did it on the /ip dhcp-client and all the dynamics are gone as one would expect. Is this happening because of a known problem when I enabled use-peer-dns on both the IPV6 and IPV4 dhcp-clients, or is it a bug? James

2 1