- Public - talk.mikrotik.com.au

BFD /OSPF with PA-3060
by Alex Samad 09 May '17

09 May '17

Hi trying to setup OSPF with BFD between ccr1036 and PA-3060. the CCR can see the OSPF init, but fails because of BFD. I have 2 PA's and they can see each other ! when i check /routing bfd neighbor> print detail I see no rx for the PA's to the CCR. Alex

2 2

Re: [MT-AU Public] Public Digest, Vol 39, Issue 4
by Steve Hille 04 May '17

04 May '17

Hi Mike, I haven't tried yet, has anyone else faced this same issue? I'll try to roll it back if I'm on my lonesome with this one. Cheers, Steve On Thu, May 4, 2017 at 10:00 AM, <public-request(a)talk.mikrotik.com.au> wrote: > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: Mikrotik options for fast IPSEC throughput (Mike Everest) > 2. BGP convergence (Alex Samad) > 3. Re: BGP convergence (Damien Gardner Jnr) > 4. SSH in RouterOS 6.39.1 (Steve Hille) > 5. Re: SSH in RouterOS 6.39.1 (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 3 May 2017 11:56:14 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Mikrotik options for fast IPSEC throughput > Message-ID: <1b2101d2c3b0$728d50d0$57a7f270$(a)duxtel.com> > Content-Type: text/plain; charset="utf-8" > > Watch out for the RB1100AHx4 coming soon - 'dude edition' features 4 core > 1.4GHz cpu, accelerated encryption (for up to 2200mbps IPSEC) and included > 60 gig microSD storage. > > Available soon at 'you know where' ;-) > > Cheers! > > Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Chris Herrmann > > Sent: Wednesday, 3 May 2017 10:31 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] Mikrotik options for fast IPSEC throughput > > > > Hi all, cross-posting from ITPA apologies for any duplication... > > > > > > > > I have a MK RB2011UAS at home and it works a treat. But? in the real > world > > it will only handle about 16Mbps IPSEC throughput and flakes out after > that. > > This model has been brilliant because heaps of features, it works? and > it?s > > cheap. But it obviously won?t scale to 100Mit throughput, let alone 100+. > > > > > > > > So? just wondering what Mikrotik options I can look at after this model? > > > > > > > > - Will be running dual wan > > > > - Don?t need POE or Wifi > > > > - Needs to be faster than the RB2011 specifically when handling > > IPSEC. > > > > - Prefer Gbit interfaces but not required > > > > - If it?s in the same ?family? as the RB2011 that would be good > > > > > > > > It?s for a small office so not looking for anything carrier grade. But > internet > > speeds have moved on (sort of) finally? > > > > > > Cheers, > > > > > > Chris > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Message: 2 > Date: Thu, 4 May 2017 10:42:14 +1000 > From: Alex Samad <alex(a)samad.com.au> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: [MT-AU Public] BGP convergence > Message-ID: > <CAJ+Q1PWJPVW5wxNBVxNjUBw0hZuL8T+6Z1uWbRw+zBUMHsacCA@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi > > Question > > 4 routers (CCR's), each has connection to Internet vlan. each connect to a > ISP. call them a b c d. > > there is a vrrp on the internet vlan which is used as dgw. > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > I go onto router a and disable the isp link. > > I can see inbound slowly peeter off > > The interesting things is that the DGW disappears from the route table on > router A, but routers B,C,D still have all the prefixes advertised from the > ISP connected on router A, still in their routing table. > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > and sends it back to router B,C,D, they check routing table and send it > back to router A. loop . death. > > took about 3 min for the routes to be pulled from the routing table in > B,C,D. > > How can I make this/convergence work faster, can I ? > > Alex > > > ------------------------------ > > Message: 3 > Date: Thu, 4 May 2017 10:58:06 +1000 > From: Damien Gardner Jnr <rendrag(a)rendrag.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] BGP convergence > Message-ID: > <CAPrfDLU46aRrEzgdb7FuEoEx2kq-9h4=b5DnDL1=1HaC+cUMmQ@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > The way I used to get around this was to not carry a full table. Each > router would filter the accepted routes to default route, and one or two AS > hops on each ISP. Then I preferenced my cheapest transit provider as the > best default route. > > Convergence was MUCH faster :) > > On 4 May 2017 at 10:42, Alex Samad <alex(a)samad.com.au> wrote: > > > Hi > > > > Question > > > > 4 routers (CCR's), each has connection to Internet vlan. each connect to > a > > ISP. call them a b c d. > > > > there is a vrrp on the internet vlan which is used as dgw. > > > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > > > > I go onto router a and disable the isp link. > > > > I can see inbound slowly peeter off > > > > The interesting things is that the DGW disappears from the route table on > > router A, but routers B,C,D still have all the prefixes advertised from > the > > ISP connected on router A, still in their routing table. > > > > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > > and sends it back to router B,C,D, they check routing table and send it > > back to router A. loop . death. > > > > took about 3 min for the routes to be pulled from the routing table in > > B,C,D. > > > > How can I make this/convergence work faster, can I ? > > > > Alex > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > -- > > Damien Gardner Jnr > VK2TDG. Dip EE. GradIEAust > rendrag(a)rendrag.net - http://www.rendrag.net/ > -- > We rode on the winds of the rising storm, > We ran to the sounds of thunder. > We danced among the lightning bolts, > and tore the world asunder > > > ------------------------------ > > Message: 4 > Date: Thu, 4 May 2017 09:21:40 +0800 > From: Steve Hille <stevehille84(a)gmail.com> > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: > <CAB+S9V9Bs5iN+0UXkETj17KgEnTt4SzexjzyutasLS5 > cdybq1Q(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Greetings all, > > I downloaded the latest version this morning as a test on one of our > devices and now I can no longer SSH to it, I logged in with Winbox and > under IP -> Services, SSH is no longer listed but Telnet is! > > Does anyone know how I turn it back on? > > Cheers, > > Steve > > > ------------------------------ > > Message: 5 > Date: Thu, 4 May 2017 11:26:53 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: <1da901d2c475$8362e580$8a28b080$(a)duxtel.com> > Content-Type: text/plain; charset="us-ascii" > > Ouch! > > Did you try downgrade to previous version? > > Cheers, Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Steve Hille > > Sent: Thursday, 4 May 2017 11:22 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > > > > Greetings all, > > > > I downloaded the latest version this morning as a test on one of our > devices > > and now I can no longer SSH to it, I logged in with Winbox and under IP > -> > > Services, SSH is no longer listed but Telnet is! > > > > Does anyone know how I turn it back on? > > > > Cheers, > > > > Steve > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 39, Issue 4 > ************************************* >

3 2

SSH in RouterOS 6.39.1
by Steve Hille 04 May '17

04 May '17

Greetings all, I downloaded the latest version this morning as a test on one of our devices and now I can no longer SSH to it, I logged in with Winbox and under IP -> Services, SSH is no longer listed but Telnet is! Does anyone know how I turn it back on? Cheers, Steve

3 2

Mikrotik options for fast IPSEC throughput
by Chris Herrmann 03 May '17

03 May '17

Hi all, cross-posting from ITPA apologies for any duplication... I have a MK RB2011UAS at home and it works a treat. But… in the real world it will only handle about 16Mbps IPSEC throughput and flakes out after that. This model has been brilliant because heaps of features, it works… and it’s cheap. But it obviously won’t scale to 100Mit throughput, let alone 100+. So… just wondering what Mikrotik options I can look at after this model? - Will be running dual wan - Don’t need POE or Wifi - Needs to be faster than the RB2011 specifically when handling IPSEC. - Prefer Gbit interfaces but not required - If it’s in the same “family” as the RB2011 that would be good It’s for a small office so not looking for anything carrier grade. But internet speeds have moved on (sort of) finally… Cheers, Chris

4 3

Memory usage for BGP
by Alex Samad 01 May '17

01 May '17

Hi How do I tell how much memory is being used by and how much is free for BGP tables Looking at my CCR's 1072 & 1036 is it just /system resource print Alex

2 1

USB Ports on Routerboards
by Paul Julian 27 Apr '17

27 Apr '17

Hi all, has anybody successfully run more than one device off a USB port on a routerboard ? We need to connect a USB cable for a UPS and a 4G USB modem as well and just wondering if the routerboards will address more than one device on a port if we used a USB hub Thanks Paul

2 2

ISP Recommendations
by Ben Jackson - eLogik 27 Apr '17

27 Apr '17

I'm looking for some help in locating a cost effective business grade service for a customer. They are currectly with TPG on a 20/20Mbps MBE / EoC service and are not happy with the service or price. They are about to hire 14 new staff and consequently need a faster service (in the region of 40Mbps) at minimum. They are based in The Rocks, Sydney. The building isn't lit up for fibre so I was considering other options such as fixed wireless? Some direction would be great. Thanks. *BEN JACKSON* Director *M *0404 924745 *E* ben(a)elogik.com.au *W* elogik.com.au <http://www.elogik.com.au/> <http://www.elogik.com.au>

1 0

strange udp
by Alex Samad 26 Apr '17

26 Apr '17

Hi any one know what 81.198.87.240:15252 is used for by the CCR's then I found this https://forum.mikrotik.com/viewtopic.php?t=116484 This is more of an FYI. A

1 0

Mikrotik L2MTU testing
by Philip Loenneker 26 Apr '17

26 Apr '17

Hi all, I'm sure we all know that you can use ping and do-not-fragment to test the L3 MTU of a path. But can you do anything to test the L2 MTU? We have the L2 MTU on some interfaces set to 1592. L3 MTU is still set to 1500. I want to know that the L2 MTU is working as intended. Doing a MAC ping, which I thought would use L2, is still limiting it to 1500 byte packets before they are unsuccessful due to fragmentation being required. I haven't done a packet capture to test, but it seems like the MAC ping is using L3 packets, which makes sense if it needs to use ICMP so that the destination host responds. I have also tried ARP ping, but that appears to ignore the packet size. I'm hoping to do this all Mikrotik to Mikrotik, but may have to resort to using another device off the side. Any suggestions? Regards, Philip Loenneker | Network Engineer | TasmaNet

1 0

6.39rc8-
by Greg 25 Apr '17

25 Apr '17

This has bitten me on a few upgrade occasions(6.37.x>6.38.x).. There must have been an upset fan-base ? ***************** What's new in 6.39rc80 (2017-Apr-25 09:23): !) bridge - reverted bridge BPDU processing back to pre-v6.38 behaviour; (v6.40 will have another separate VLAN-aware bridge implementation); ********************** Cheers Greg

3 3