- Public - talk.mikrotik.com.au

Telstra Ethernet Access Shaping Guide
by Paul Julian 27 Feb '15

27 Feb '15

Hi Guys, I thought it might be worthwhile to put some information together for Telstra Ethernet Access services based on the MEF standard. This is a loose guide based on the Telstra TSIS documentation which isn't helpful for Mikrotik so I have attempted to convert the Cisco parameters to Mikrotik based on the information in the TSIS guide and also from personal experience. Please provide feedback if you think these figures work or don't work, I'm happy to update them as we keep rolling out links and any suggestions would be welcome and be shared on this list as they can be a challenge to get right and the slower links really suffer from Telstra dropping packets if they aren't configured right. L2 Speed Mbit/s L3 speed Mbit/s Limit-at kBit/s Max-limit kBit/s Burst kBits/s Queue Type Queue Size Packets MTU Size 6 5.88 5880 5976 96 pfifo 8 1596 8 7.84 7840 7960 120 pfifo 9 1596 10 9.8 9800 9960 160 pfifo 13 1596 20 19.6 19600 19920 320 pfifo 25 1596 30 29.4 29400 29840 440 pfifo 34 1596 40 39.2 39200 39696 496 pfifo 39 1596 50 49 49000 49640 640 pfifo 50 1596 60 58.8 58800 59520 720 pfifo 56 1596 70 68.6 68600 69400 800 pfifo 63 1596 80 78.4 78400 79360 960 pfifo 75 1596 90 88.2 88200 89240 1040 pfifo 81 1596 100 98 98000 99400 1400 pfifo 110 1596 150 147 147000 148760 1760 pfifo 138 1596 200 196 196000 198080 2080 pfifo 163 1596 300 294 294000 298000 4000 pfifo 313 1596 400 392 392000 396800 4800 pfifo 376 1596 500 490 490000 496800 6800 pfifo 533 1596 600 588 588000 595200 7200 pfifo 564 1596 800 784 784000 792000 8000 pfifo 627 1596 1000 980 980000 988240 8240 pfifo 645 1596 Regards Paul

2 3

problems posting?
by Mike Everest 27 Feb '15

27 Feb '15

Hi all! I dicovered this afternoon that this list was set for maximum message size of just 40k - any email larger than 40 was being uietly discarded :-} So if you were attemtping to post, and wonder why they were not forwarded, it might be related to large content or attachments or large sig etc. I upped it to 2M, so most of it should work now - even so, I suggest that it would be nice to refrain from sending large chunks of content inside posts to the list ;) Comments are welcome! Cheers! Mike.

1 0

Re: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

All, feedback from the 'OP': >> Hi Mike, the queue length tip may well have done the trick! I reiterated that it wasn't /my/ suggestion, and that he should join us and thank the right people personally ;) Thank you from me too :-) Cheers, Mike. ---------------------------------------------------------------------------- -------- Why Choose DuxTel for all your MikroTik needs? 10 good reasons: http://duxtel.com/why_duxtel ---------------------------------------------------------------------------- -------- Follow our tweets for news and updates: http://twitter.com/duxtel > -----Original Message----- > From: Stavros Patiniotis [mailto:stavros@staff.esc.net.au] > Sent: Thursday, 26 February 2015 2:39 PM > To: Mike Everest > Subject: RE: [MT-AU Public] NBNCo wireless service triggers traffic police, > fiber services do not > > Please do summarise findings to list if you have good off-list information > :) > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Mike Everest > Sent: Thursday, 26 February 2015 1:54 PM > To: 'MikroTik Australia Public List' > Subject: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber > services do not > > Thanks for all replies, on and off list - further comments are (of course) VERY > welcome :-) > > It all makes good sense to me, and I'll pass those comments and suggestions > along. > > See you all at the MUM in May! ;) > > Regards, Mike Everest. > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0

NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

Hi All! Earlier this week, I received a report from some guys using CCR to terminate ppp sessions over NBNCo tails and reporting that although fiber services worked perfectly, customers on wireless service continually hit traffic policer with result being download speeds about 1/2 of expected max. Again this morning, I received similar report from different operator :-( haven't confirmed what routerOS version for either of them yet.. Has anyone else seen this happen? Would setting output limit at client end ease that behaviour? Any/all comments, suggestions welcome! :-} Mike.

5 6

Re: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

Hi Stavros, These guys are both doing their NBNCo 'technical onboarding' testing in Melbourne this week, and came up against this one. We saw it too, but it was across the board and not just related to wireless which kind of got me stumped. Now that I think of it, pretty much EVERYONE who goes through the NBN testing processes come up against the same problem, though anecdotally it seems to hit in slightly different ways - just wireless, only above a certain data rate, across the board... maybe it's related to different routerOS release, maybe there are differences in the NBNCo network setup at different times... In any case, I will certainly report back on findings if they report them to me :-} Often as soon as the problem is solved, it is too easy to forget about that one and just go on to the next problem without getting back to the folks who assisted. That happens to us all the time! :-D Mind you, I don't think badly of someone who does that - I am well aware of the kind of pressure that your average network dude can come under in a busy NOC environment! :) I always encourage folks to join this list, since the questions posted and comments offered are always high level and useful for probably everyone else subscribing! :) I reckon that this forum is a wonderful 'meeting of minds' for all of these kind of el'wierdo routerOS problems that come up from time to time - hope it stays that way or keeps getting better! Cheers! Mike. > -----Original Message----- > From: Stavros Patiniotis [mailto:stavros@staff.esc.net.au] > Sent: Thursday, 26 February 2015 2:39 PM > To: Mike Everest > Subject: RE: [MT-AU Public] NBNCo wireless service triggers traffic police, > fiber services do not > > Please do summarise findings to list if you have good off-list information > :) > > -----Original Message----- > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > Mike Everest > Sent: Thursday, 26 February 2015 1:54 PM > To: 'MikroTik Australia Public List' > Subject: [MT-AU Public] NBNCo wireless service triggers traffic police, fiber > services do not > > Thanks for all replies, on and off list - further comments are (of course) VERY > welcome :-) > > It all makes good sense to me, and I'll pass those comments and suggestions > along. > > See you all at the MUM in May! ;) > > Regards, Mike Everest. > > > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au

1 0

NBNCo wireless service triggers traffic police, fiber services do not
by Mike Everest 26 Feb '15

26 Feb '15

Thanks for all replies, on and off list - further comments are (of course) VERY welcome :-) It all makes good sense to me, and I'll pass those comments and suggestions along. See you all at the MUM in May! ;) Regards, Mike Everest.

1 0

Simple queues by MAC
by Paul Julian 24 Feb '15

24 Feb '15

Hi guys, I am working on a little project at the moment which requires queuing traffic based on MAC address. I want to be able to queue traffic upload and download using one simple queue, simple enough right.....I can do this with my eyes shut with an IP address by just setting the target IP in the simple queue but obviously that's no good in this situation. The problem is no matter what I do I get download matching but not upload. I have setup the usual connection mark and packet mark queues and told the connection mark queue to use a source MAC address to identify the traffic, I have tried the prerouting chain and forward chain. Example: chain=forward action=mark-connection new-connection-mark=MAC-con passthrough=yes src-mac-address=MAC chain=forward action=mark-packet new-packet-mark=MAC passthrough=no connection-mark=MAC-con name="queue" target="" parent=none packet-marks=MAC priority=8/8 queue=default/default limit-at=100M/100M max-limit=100M/100M burst-limit=0/0 burst-threshold=0/0 burst-time=0s/0s total-queue=default The way it needs to work is that upload traffic will be heading out the PPPOE interface to the net and download traffic will be going into a bridge which has 4 ethernet ports in it, then out to the PC. I really don't want to do it in queue tree as I want to keep it as simple as possible so either I am missing something stupidly obvious here or something is broken. Any Suggestions please ?? Thanks Paul

3 8

BGP Community Matching
by Nick Pratley 13 Feb '15

13 Feb '15

Hey there, I have a question regarding BGP community matching on a Mikrotik, I have the following configuration: 0 chain=peering-out bgp-communities=ASN:XXX invert-match=no action=accept set-bgp-prepend-path="" 1 chain=peering-out protocol=bgp bgp-communities=ASN:XXX,ASN:ASN invert-match=no action=accept set-bgp-prepend-path="" 2 chain=peering-out invert-match=no action=discard set-bgp-prepend-path="" I am trying to match all routes, if they have ASN:XXX in one of the communities. For example, This is matched: 0 ADb dst-address=X.X.71.0/24 gateway=X.X.137.252 gateway-status=X.X.137.252 recursive via X.X.137.17 VLAN2803 distance=200 scope=40 target-scope=30 bgp-as-path="132839" bgp-local-pref=400 bgp-origin=igp bgp-communities=ASN:XXX received-from=BDR-1-3 This is not: 0 ADb dst-address=X.X.31.0/24 gateway=221.121.137.255 gateway-status=221.121.137.255 recursive via X.X.137.17 VLAN2803 distance=200 scope=40 target-scope=30 bgp-local-pref=100 bgp-med=0 bgp-origin=igp bgp-communities=ASN:XXX,ASN:ASN received-from=SW-1-1 Any ideas? Cheers Nick

2 3

Strange routerboard behavoir
by Paul Julian 01 Feb '15

01 Feb '15

Hi guys, we have a large hotspot site which is doing some funny things and I was just wondering if anybody may have seen similar behaviour before. We have a 5Ghz backhaul network which runs flawlessly, running with a mix of SXT's and Omnitiks from a central AP out to a number of CPE's. Off the back of each CPE we run a 411 with a 2.4Ghz radio in it and an omni antenna, plugged into ether1 on each device. What happens sometimes is that we lose sight of the AP connected to a CPE, we can't ping it, however the AP shows in the neighbours list on the CPE and the Ethernet port shows as running, for all intents and purposes everything looks fine, however when you try to telnet from the CPE to the AP you can't connect, when you try and mac-telnet from the CPE to the AP it disconnects and doesn't work. After a varying period of time the connection just starts working again, the uptime of the AP is normal, i.e. it hasn't lost power or rebooted and everything just works OK....until the next time which could be hours or days, no pattern seems to exist. Has anybody encountered such issues before at all ? I have so far replaced the Ethernet joiner between the radios and also replaced the power pack and POE injectors which feed the radios. Any suggestions would be appreciated. Thanks Paul

3 7

BFD + OSPF + ROS and BFD + BGP + ROS
by Alex Samad - Yieldbroker 01 Feb '15

01 Feb '15

Hi I have asked this question on the forums but got no reply I want to run BFD and OSPF together. I have a few routers that have multiple legs of OSPF, but I can't run BFD on some legs, because I have some legacy cisco equipment that doesn't do BFD (ASA5520 8.5). Can I limit BFD to specific legs of OSPF determined network interface Can I limit BFD support on BGP by specific peers even if I have multiple peers on the same interface, last one can I have multiple BGP + BFD peers on the same interface ??? A Alex Samad | Network And System Manager | Yieldbroker * +61 2 9994 2893 | ( +61 438 838 143 | * alex.samad(a)yieldbroker.com<mailto:alex.samad@yieldbroker.com> This email is confidential and intended for the addressee only. If you may have received this email in error please delete it and notify the sender immediately. Recipients should not forward, disclose, distribute or copy this e-mail or any attachments in whole or part without the express permission of the sender. Views expressed in this message are those of the individual sender, except where they are specifically stated to be those of Yieldbroker. Yieldbroker accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. Yieldbroker can not guarantee the integrity of this communication and shall not be liable for e-mail which may be intercepted, corrupted, lost, spoofed, delayed, incomplete, or virus infected.

3 4