- Public - talk.mikrotik.com.au

OSPF redistribute-connected in a VRF?
by Damien Gardner Jnr 30 Dec '16

30 Dec '16

Hey Folks, So my project while on my week off from work has been to build Miss 7 a PC. Which takes a lot more work than you'd first think, since I want it behind something doing a LOT of filtering :D After a lot of playing, I ended up with a Sophos UTM. Those things are very cool, and they provide a free virtual appliance license for home use, so I ran it up in Xenserver, and it's working a treat. Finished the computer yesterday, and today I sat down to quickly run a VRF up between home and the DC (where the UTM is running). The kids now have their own vlan at home, instead of being mixed in with the missus and I, and all our various devices (you know, the usual, xbox, wii, various roku players, the bathroom scales, etc ;). We already have an EOIP tunnel with a few vlans between home and the DC, so I just created one more, popped it into a VRF, and created a new OSPF instance. And then things fell apart ;) So Home Router can see DC Router and vice versa over the EOIP Vlan, OSPF comes up. And then the connected routes on each end do not show. SHOULD this work? I can do static routes if I have to, but I want to do a mesh config with two routers at each end (VM's for pure tunnelling grunt, being backed up by the CRS-109's at each end when the VM's are down), so OSPF would make things easier.. I've disabled my default OSPF instance on both ends for now to make debugging easier. My config looks like: Home End: /interface eoip add allow-fast-path=no !keepalive local-address=<HOME_RTR_IP> name=EOIP_SY3_PRIMARY remote-address=<SYD_RTR_IP> tunnel-id=1 /interface vlan add interface=EOIP_SY3_PRIMARY loop-protect-disable-time=0s loop-protect-send-interval=0s name=VLAN_EOIP_SY3_KIDS vlan-id=42 /routing ospf instance add name=ospf_kids redistribute-connected=as-type-1 redistribute-static=as-type-1 \ router-id=192.168.12.18 routing-table=KIDS /routing ospf area add area-id=1.1.1.1 instance=ospf_kids name=area_kids /ip address add address=192.168.12.18/28 interface=KIDS network=192.168.12.16 add address=192.168.10.26/30 interface=VLAN_EOIP_SY3_KIDS network=192.168.10.24 /ip route vrf add export-route-targets=65535:102 import-route-targets=65535:102 interfaces=KIDS,VLAN_EOIP_SY3_KIDS route-distin 65535:102 routing-mark=KIDS /routing ospf interface add interface=VLAN_EOIP_SY3_KIDS network-type=broadcast /routing ospf network add area=area_kids network=192.168.10.24/30 DC End: /interface eoip add allow-fast-path=no !keepalive local-address=<SYD_RTR_IP> name=EOIP_WYONG_PRIMARY remote-address=<HOME_RTR_IP> tunnel-id=1 /interface vlan add interface=EOIP_WYONG_PRIMARY name=VLAN_EOIP_WYONG_KIDS vlan-id=42 add interface=vlan41 name=vlan42_KIDS vlan-id=42 /routing ospf instance add name=ospf_kids redistribute-connected=as-type-1 redistribute-static=\ as-type-1 router-id=192.168.10.25 routing-table=KIDS /routing ospf area add area-id=1.1.1.1 instance=ospf_kids name=area_kids /ip address add address=192.168.12.34/29 interface=vlan42_KIDS network=192.168.12.32 add address=192.168.10.25/30 interface=VLAN_EOIP_WYONG_KIDS network=\ 192.168.10.24 /ip route vrf add export-route-targets=65535:102 import-route-targets=65535:102 interfaces=\ vlan42_KIDS,VLAN_EOIP_WYONG_KIDS route-distinguisher=65535:102 \ routing-mark=KIDS /routing ospf network add area=area_kids network=192.168.10.24/30 If I show the OSPF routes on the sydney end, I only see the EOIP VLAN /30, and the local /29: [someguy@MikroTik] > /routing ospf route print detail 0 instance=ospf_kids dst-address=192.168.10.24/30 state=intra-area gateway=0.0.0.0 interface=VLAN_EOIP_WYONG_KIDS cost=10 area=area_kids 1 instance=ospf_kids dst-address=192.168.12.32/29 state=imported-ext-1 gateway="" interface="" cost=20 area=external Any thoughts? I've spent basically the entire day at it, and it's just not working :/ Thanks, Damien -- Damien Gardner Jnr VK2TDG. Dip EE. GradIEAust rendrag(a)rendrag.net - http://www.rendrag.net/ -- We rode on the winds of the rising storm, We ran to the sounds of thunder. We danced among the lightning bolts, and tore the world asunder

1 2

Wireless at a Distance
by Dave Browning 23 Dec '16

23 Dec '16

Lads, Any Mikrotik device suggestions for a device we can set on a wall that’ll service WiFi clients about 40 metres away in one direction. A P2P link with a station in the middle of the serviceable area isn't an option currently, I know would be better solution. Dave Browning | Network Engineer P 07 3369 7666 Level 1, 12 Railway Tce, Milton QLD 4064 This email and any files transmitted with it contain confidential information for the exclusive use of the intended recipient. If you received this email in error please notify Sentrian Pty Ltd immediately by return email to the sender and delete the original email. We do not guarantee that this email or any attached files are free of viruses. All recipients should undertake their own virus scanning.

4 6

New switch
by Alex Samad - Yieldbroker 20 Dec '16

20 Dec '16

Hi Saw this in the last email. CRS317-1G-16S+RM (coming in 2017/Q2) Sounds interesting ... any idea of pricing and throughput ? Alex Alex Samad | Network And System Manager | Yieldbroker * +61 2 9994 2893 | ( +61 438 838 143 | * alex.samad(a)yieldbroker.com<mailto:alex.samad@yieldbroker.com> This email is confidential and intended for the addressee only. If you may have received this email in error please delete it and notify the sender immediately. Recipients should not forward, disclose, distribute or copy this e-mail or any attachments in whole or part without the express permission of the sender. Views expressed in this message are those of the individual sender, except where they are specifically stated to be those of Yieldbroker. Yieldbroker accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Yieldbroker can not guarantee the integrity of this communication and shall not be liable for e-mail which may be intercepted, corrupted, lost, spoofed, delayed, incomplete, or virus infected.

5 5

positioning filter rules
by Karl Auer 13 Dec '16

13 Dec '16

I have a script that adds filter rules. The rules are the sort that need to precede others, so I have "place- before=0" in the script. Mostly, that doesn't work. It fails with this message: the item referred by 'place-before' does not exist (11) This is demonstrably untrue. There are plenty of rules. It *seems* that if I manually print a rule listing before running my script, this error doesn't happen. That's not a useful solution... Stumped. Ideas? Regards, K. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Karl Auer (kauer(a)nullarbor.com.au) work +61 2 64957435 http://www.nullarbor.com.au mobile +61 428 957160 GPG fingerprint: 6D59 8AE6 810D 44E3 7626 7040 4DD6 F89F 3053 4774 Old fingerprint: 9DCA 0903 BCBD 0647 BCCC 2FA7 A35C 57A1 ACF9 00BB

2 2

RB1100 Rack-Mount Ears
by Ben Farmer 12 Dec '16

12 Dec '16

Hi guys, We've had a few RB's come back as of late with missing ears (I'm not sure what the techs do with them, I think they get hungry). Does anyone know of a business that sells these sorts of spares? It looks like a few in the US sell them, but I'm hoping someone local has them. Cheers! Regards, Ben Farmer

2 4

RANCID with Mikrotik Devices
by Darryl Ross 06 Dec '16

06 Dec '16

Hey All, Wondering if anyone else is using RANCID to back up Mikrotik devices? I'm having a strange issue where 7 out of my 20 devices are failing to be backed up when RANCID is run by cron, but work without complaint when run manually on the command line... The devices include a few different models (CCR, CRS, RB) but all are running 6.37.1 - as are the devices that are not failing. Other devices including Cisco, Brocade and HP-VC are all working without issue. Any insights might save my remaining hair! -Darryl

1 1

Kogan
by Dave Browning 02 Dec '16

02 Dec '16

https://www.kogan.com/au/shop/?keywords=mikrotik Dave Browning | Network Engineer P 07 3369 7666 Level 1, 12 Railway Tce, Milton QLD 4064 This email and any files transmitted with it contain confidential information for the exclusive use of the intended recipient. If you received this email in error please notify Sentrian Pty Ltd immediately by return email to the sender and delete the original email. We do not guarantee that this email or any attached files are free of viruses. All recipients should undertake their own virus scanning.

2 1

ccr connections to switches
by Alex Samad - Yieldbroker 02 Dec '16

02 Dec '16

Hi I have 6 ccr1036's in pairs of 2 LACP'ed to stacked Dell 8024F & 8132F switches.. These are about to be replaced with arista 7050sx switches in MLAG config. I have previously setup the CCr1036 as STP edge devices, so portfast and spanning tree disabled. But I have recently had 2 ccr's do death reboot cycles, crash and then reboot themselves in loops. This has cause lots of problems for my OSPF network :) I presume they have DR or BR at the times - unlucky me. I notice I with LACP there is RSTP turned on. Which got me thinking maybe I should have them configured on the switches as No portfast No span disabled And make them go through a spanning tree block , learn, forward states. Just wonder how others have their ccr's connection - especially if you have LACP connection Alex

2 2

Re: [MT-AU Public] RoMON
by Mike Everest 28 Nov '16

28 Nov '16

I use it all the time - and can report that RoMON is bloody marvellous! :-D Cheers! Mike. > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Philip Loenneker > Sent: Tuesday, 29 November 2016 9:14 AM > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Vlans query > > Steve, > > You may also want to investigate the possibility of using RoMON > (http://wiki.mikrotik.com/wiki/Manual:RoMON) to help you manage the > device at layer 2 when they are not layer 2 accessible to your PC. > > Quote: RoMON stands for "Router Management Overlay Network". RoMON > works by establishing independent MAC layer peer discovery and data > forwarding network. RoMON network operates independently from L2 or L3 > forwarding configuration. > > I haven't used this myself yet as we generally have layer 3 connectivity to our > devices, but can definitely see some use cases. > > Regards, > Philip

1 0

Vlans query
by Steve Hille 28 Nov '16

28 Nov '16

Greetings all, I have a new requirement that I can't quite square away. We use the Metal devices, normally the 2SHPN for wifi, we use Cisco routers and switches and we use Windows servers as our DHCP servers. What I want to do is have the management IP address of the Metal devices on our regular data vlan so that I have layer 2 access in case things go bad, but I want them to supply DHCP addresses to another vlan from the Windows server. Let's say VLAN 10 for data and vlan 60 for the Wifi DHCP range as an example. I don't even know if it is possible, is anyone doing anything similar to this at the moment? Cheers, Steve

3 2