- Public - talk.mikrotik.com.au

Mikrotik CAPsMAN Android
by Dave Browning 17 Jun '17

17 Jun '17

Hi All, Have a 30 odd CAPsMAN deployment with the WAPac unit - It seems that Android v6 clients (to which we have 1) seem to have issues connecting. Spent a few hours on it today and if I set an ACL for the test phone I'm working with to Signal Range not set and AP/Client TX Limit to 0 it connects but bounces. It seems to prefer only want to connect to one access point which I cannot work out why - Tried removing re-adding from the phone etc. All the normal stuff but not happy. CAPsMAN device is a CCR running 6.39.2 and all the AP's are same version. Any suggestions? Cheers, Dave

2 4

Route selection
by Matthew Enger 17 Jun '17

17 Jun '17

Hello, I have three routes below: Dab 202.52.129.0/24 103.85.36.33 recursive via 103.51.112.4 vrrp 1 200 Db 202.52.129.0/24 218.100.78.11 reachable Vic-IX-Traffic 20 Db 202.52.129.0/24 218.100.78.11 reachable Vic-IX-Traffic 20 My reading of https://wiki.mikrotik.com/wiki/Manual:Route_Selection_Algorithm_in_RouterOS says that the active route should be the distance of 20, but it is selecting 200. Is this a bug or am I not reading it right? Running 6.37.5 if that helps anyone. Matthew Enger | Managing Director PO Box 3279, The Pines, Victoria, 3109 T 1300 789 299 D 03 9909 3104 M 0406 532 792 F 03 8611 7946 m.enger(a)xi.com.au | www.xi.com.au This email message and any attachments are the property of X Integration. The contents of this email are copyright and may also be confidential and/or legally privileged. They are intended solely for the addressee and it is not intended that either confidentiality or privilege be waived or lost by mistaken delivery to you. Please notify us immediately and delete this communication if received in error. Consider the environment before printing this email.

3 4

Multiple TFTP Option Set
by Dave Browning 08 Jun '17

08 Jun '17

Howdy, Has anyone been able to have multiple TFTP servers pushed out from DHCP on a Mikrotik? Option 150. Have tried 2 options on the network, single option with commas, semi-colans, spaces etc Cheers, Dave

2 1

Locking Wireless Data Rates
by Paul Julian 31 May '17

31 May '17

Hi All, I'm just wondering what people consider as best practice when working with wireless signals that fluctuate a little and associated fluctuations in data rates. I don't think I have ever really seen a typical data rate that doesn't fluctuate somewhat, but I am interested to know whether most people monitor sync speed and then lock the maximum sync speed by using the supported data rates option. For example if you have a connection which is jumping around between 130M and 144M would you lock it at 130M or just let it move around ? Whichever option you would use why do you choose this option and what are the benefits ? We have quite a lot of wireless links and traditionally we let them move around as they want, but as we starting do more QOS on our links I am starting to think about pulling them back so they don't fluctuate so that we can be more certain of what actual bandwidth we will get to a site across that link and use QOS in a better more manageable way. Thanks Paul

2 3

SSL Acceleration
by Andrew Gilbett 29 May '17

29 May '17

Hi Guys, I am wanting to know which MT devices support SSL Acceleration, if any? The purpose is for openvpn usage. Thanks Andrew

2 1

PPPoE VRF
by Dave Browning 25 May '17

25 May '17

Howdy, I've built some janky script that's applied 'on up' to a PPP profiles that puts the dynamic PPPoE interfaces into a VRF. Anyone got any better ways to do that? Any word if MT are going to add this as an option to PPP profile? Seems a fairly common use case. Cheers, Dave

3 3

BGP convergence
by Alex Samad 16 May '17

16 May '17

Hi Question 4 routers (CCR's), each has connection to Internet vlan. each connect to a ISP. call them a b c d. there is a vrrp on the internet vlan which is used as dgw. receiving full table from ISP, so somehere between 800k-1.2M prefixes. I go onto router a and disable the isp link. I can see inbound slowly peeter off The interesting things is that the DGW disappears from the route table on router A, but routers B,C,D still have all the prefixes advertised from the ISP connected on router A, still in their routing table. so packet hit the VRRP and then get routed to router A, it has a iBGP DGW and sends it back to router B,C,D, they check routing table and send it back to router A. loop . death. took about 3 min for the routes to be pulled from the routing table in B,C,D. How can I make this/convergence work faster, can I ? Alex

2 2

BFD /OSPF with PA-3060
by Alex Samad 09 May '17

09 May '17

Hi trying to setup OSPF with BFD between ccr1036 and PA-3060. the CCR can see the OSPF init, but fails because of BFD. I have 2 PA's and they can see each other ! when i check /routing bfd neighbor> print detail I see no rx for the PA's to the CCR. Alex

2 2

Re: [MT-AU Public] Public Digest, Vol 39, Issue 4
by Steve Hille 04 May '17

04 May '17

Hi Mike, I haven't tried yet, has anyone else faced this same issue? I'll try to roll it back if I'm on my lonesome with this one. Cheers, Steve On Thu, May 4, 2017 at 10:00 AM, <public-request(a)talk.mikrotik.com.au> wrote: > Send Public mailing list submissions to > public(a)talk.mikrotik.com.au > > To subscribe or unsubscribe via the World Wide Web, visit > http://talk.mikrotik.com.au/mailman/listinfo/public_talk. > mikrotik.com.au > > or, via email, send a message with subject or body 'help' to > public-request(a)talk.mikrotik.com.au > > You can reach the person managing the list at > public-owner(a)talk.mikrotik.com.au > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Public digest..." > > > Today's Topics: > > 1. Re: Mikrotik options for fast IPSEC throughput (Mike Everest) > 2. BGP convergence (Alex Samad) > 3. Re: BGP convergence (Damien Gardner Jnr) > 4. SSH in RouterOS 6.39.1 (Steve Hille) > 5. Re: SSH in RouterOS 6.39.1 (Mike Everest) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 3 May 2017 11:56:14 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] Mikrotik options for fast IPSEC throughput > Message-ID: <1b2101d2c3b0$728d50d0$57a7f270$(a)duxtel.com> > Content-Type: text/plain; charset="utf-8" > > Watch out for the RB1100AHx4 coming soon - 'dude edition' features 4 core > 1.4GHz cpu, accelerated encryption (for up to 2200mbps IPSEC) and included > 60 gig microSD storage. > > Available soon at 'you know where' ;-) > > Cheers! > > Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Chris Herrmann > > Sent: Wednesday, 3 May 2017 10:31 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] Mikrotik options for fast IPSEC throughput > > > > Hi all, cross-posting from ITPA apologies for any duplication... > > > > > > > > I have a MK RB2011UAS at home and it works a treat. But? in the real > world > > it will only handle about 16Mbps IPSEC throughput and flakes out after > that. > > This model has been brilliant because heaps of features, it works? and > it?s > > cheap. But it obviously won?t scale to 100Mit throughput, let alone 100+. > > > > > > > > So? just wondering what Mikrotik options I can look at after this model? > > > > > > > > - Will be running dual wan > > > > - Don?t need POE or Wifi > > > > - Needs to be faster than the RB2011 specifically when handling > > IPSEC. > > > > - Prefer Gbit interfaces but not required > > > > - If it?s in the same ?family? as the RB2011 that would be good > > > > > > > > It?s for a small office so not looking for anything carrier grade. But > internet > > speeds have moved on (sort of) finally? > > > > > > Cheers, > > > > > > Chris > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Message: 2 > Date: Thu, 4 May 2017 10:42:14 +1000 > From: Alex Samad <alex(a)samad.com.au> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: [MT-AU Public] BGP convergence > Message-ID: > <CAJ+Q1PWJPVW5wxNBVxNjUBw0hZuL8T+6Z1uWbRw+zBUMHsacCA@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Hi > > Question > > 4 routers (CCR's), each has connection to Internet vlan. each connect to a > ISP. call them a b c d. > > there is a vrrp on the internet vlan which is used as dgw. > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > I go onto router a and disable the isp link. > > I can see inbound slowly peeter off > > The interesting things is that the DGW disappears from the route table on > router A, but routers B,C,D still have all the prefixes advertised from the > ISP connected on router A, still in their routing table. > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > and sends it back to router B,C,D, they check routing table and send it > back to router A. loop . death. > > took about 3 min for the routes to be pulled from the routing table in > B,C,D. > > How can I make this/convergence work faster, can I ? > > Alex > > > ------------------------------ > > Message: 3 > Date: Thu, 4 May 2017 10:58:06 +1000 > From: Damien Gardner Jnr <rendrag(a)rendrag.net> > To: MikroTik Australia Public List <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] BGP convergence > Message-ID: > <CAPrfDLU46aRrEzgdb7FuEoEx2kq-9h4=b5DnDL1=1HaC+cUMmQ@mail. > gmail.com> > Content-Type: text/plain; charset=UTF-8 > > The way I used to get around this was to not carry a full table. Each > router would filter the accepted routes to default route, and one or two AS > hops on each ISP. Then I preferenced my cheapest transit provider as the > best default route. > > Convergence was MUCH faster :) > > On 4 May 2017 at 10:42, Alex Samad <alex(a)samad.com.au> wrote: > > > Hi > > > > Question > > > > 4 routers (CCR's), each has connection to Internet vlan. each connect to > a > > ISP. call them a b c d. > > > > there is a vrrp on the internet vlan which is used as dgw. > > > > receiving full table from ISP, so somehere between 800k-1.2M prefixes. > > > > > > I go onto router a and disable the isp link. > > > > I can see inbound slowly peeter off > > > > The interesting things is that the DGW disappears from the route table on > > router A, but routers B,C,D still have all the prefixes advertised from > the > > ISP connected on router A, still in their routing table. > > > > > > so packet hit the VRRP and then get routed to router A, it has a iBGP DGW > > and sends it back to router B,C,D, they check routing table and send it > > back to router A. loop . death. > > > > took about 3 min for the routes to be pulled from the routing table in > > B,C,D. > > > > How can I make this/convergence work faster, can I ? > > > > Alex > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > > -- > > Damien Gardner Jnr > VK2TDG. Dip EE. GradIEAust > rendrag(a)rendrag.net - http://www.rendrag.net/ > -- > We rode on the winds of the rising storm, > We ran to the sounds of thunder. > We danced among the lightning bolts, > and tore the world asunder > > > ------------------------------ > > Message: 4 > Date: Thu, 4 May 2017 09:21:40 +0800 > From: Steve Hille <stevehille84(a)gmail.com> > To: public(a)talk.mikrotik.com.au > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: > <CAB+S9V9Bs5iN+0UXkETj17KgEnTt4SzexjzyutasLS5 > cdybq1Q(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > Greetings all, > > I downloaded the latest version this morning as a test on one of our > devices and now I can no longer SSH to it, I logged in with Winbox and > under IP -> Services, SSH is no longer listed but Telnet is! > > Does anyone know how I turn it back on? > > Cheers, > > Steve > > > ------------------------------ > > Message: 5 > Date: Thu, 4 May 2017 11:26:53 +1000 > From: "Mike Everest" <mike(a)duxtel.com> > To: "'MikroTik Australia Public List'" <public(a)talk.mikrotik.com.au> > Subject: Re: [MT-AU Public] SSH in RouterOS 6.39.1 > Message-ID: <1da901d2c475$8362e580$8a28b080$(a)duxtel.com> > Content-Type: text/plain; charset="us-ascii" > > Ouch! > > Did you try downgrade to previous version? > > Cheers, Mike. > > > -----Original Message----- > > From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of > > Steve Hille > > Sent: Thursday, 4 May 2017 11:22 AM > > To: public(a)talk.mikrotik.com.au > > Subject: [MT-AU Public] SSH in RouterOS 6.39.1 > > > > Greetings all, > > > > I downloaded the latest version this morning as a test on one of our > devices > > and now I can no longer SSH to it, I logged in with Winbox and under IP > -> > > Services, SSH is no longer listed but Telnet is! > > > > Does anyone know how I turn it back on? > > > > Cheers, > > > > Steve > > _______________________________________________ > > Public mailing list > > Public(a)talk.mikrotik.com.au > > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > > > ------------------------------ > > Subject: Digest Footer > > _______________________________________________ > Public mailing list > Public(a)talk.mikrotik.com.au > http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au > > > ------------------------------ > > End of Public Digest, Vol 39, Issue 4 > ************************************* >

3 2

SSH in RouterOS 6.39.1
by Steve Hille 04 May '17

04 May '17

Greetings all, I downloaded the latest version this morning as a test on one of our devices and now I can no longer SSH to it, I logged in with Winbox and under IP -> Services, SSH is no longer listed but Telnet is! Does anyone know how I turn it back on? Cheers, Steve

3 2