Hi all, Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>? The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets. Anyone using it for this? Thanks! Chris
I blindly rushed like a mad fool into using some VLANs with an RB750r3 on one site with CAPSMAN. So far so good and it's been many months. On 8 September 2017 at 14:47, Chris Herrmann <chrisherrmann7@gmail.com> wrote:
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Chris Herrmann Sent: Friday, 8 September 2017 2:47 PM To: public@talk.mikrotik.com.au Subject: [MT-AU Public] VLAN support with RB750Gr3
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster
RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd
push far more than the 16Mbps that appears to be the ceiling we get
Hi Chris, 750Gr3 is very popular for IPSEC applications, and I haven't heard any reports of VLAN problems myself - can you post links to the articles discussing those issues? Cheers, Mike. than the like to pushing
IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Chris Herrmann Sent: Friday, 8 September 2017 2:47 PM To: public@talk.mikrotik.com.au Subject: [MT-AU Public] VLAN support with RB750Gr3
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster
RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd
push far more than the 16Mbps that appears to be the ceiling we get
Oh - and are you using the switch chip vlan functionality, or routerOS virtual interface tagging? Cheers,.. than the like to pushing
IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
It looks like the new bridge system in the upcoming 6.41 firmware hides a lot of the details for setting up the underlying hardware and software specifics of bridges and VLANs so this issue is probably not something to worry about. I think the r3 is missing some VLAN features in the Mediatek hardware switch that are available in the other Atheros chips but it's probably not a showstopper. I bet most of the time hardly anyone ventured into the switch menu to fiddle with VLAN settings. On 8 September 2017 at 14:47, Chris Herrmann <chrisherrmann7@gmail.com> wrote:
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Switch chip is hardware vs. vlan interface and bridges in software - in the case of CCR, the difference is marginal where there is one CPU per interface, but in the lower end devices switch is much faster and way more efficient. I agree that it is cumbersome to work with, but in cases where you want to switch packets instead of routing them, hardware is absolutely definitely the way to do it ;-) Cheers! Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Saturday, 9 September 2017 6:41 AM To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] VLAN support with RB750Gr3
It looks like the new bridge system in the upcoming 6.41 firmware hides a lot of the details for setting up the underlying hardware and software specifics of bridges and VLANs so this issue is probably not something to worry about. I think the r3 is missing some VLAN features in the Mediatek hardware switch that are available in the other Atheros chips but it's probably not a showstopper. I bet most of the time hardly anyone ventured into the switch menu to fiddle with VLAN settings.
On 8 September 2017 at 14:47, Chris Herrmann <chrisherrmann7@gmail.com> wrote:
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
As an aside, Mike do you know if the RB3011 is going to get hardware crypto any time soon or even if it's possible? On 9 September 2017 at 13:17, Mike Everest <mike@duxtel.com> wrote:
Switch chip is hardware vs. vlan interface and bridges in software - in the case of CCR, the difference is marginal where there is one CPU per interface, but in the lower end devices switch is much faster and way more efficient.
I agree that it is cumbersome to work with, but in cases where you want to switch packets instead of routing them, hardware is absolutely definitely the way to do it ;-)
Cheers!
Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Saturday, 9 September 2017 6:41 AM To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] VLAN support with RB750Gr3
It looks like the new bridge system in the upcoming 6.41 firmware hides a lot of the details for setting up the underlying hardware and software specifics of bridges and VLANs so this issue is probably not something to worry about. I think the r3 is missing some VLAN features in the Mediatek hardware switch that are available in the other Atheros chips but it's probably not a showstopper. I bet most of the time hardly anyone ventured into the switch menu to fiddle with VLAN settings.
On 8 September 2017 at 14:47, Chris Herrmann <chrisherrmann7@gmail.com> wrote:
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
I believe that it requires a kernel upgrade to occur. So that will be in the magical V7 release I’m assuming Sent from Mail for Windows 10 From: Jason Hecker (Up & Running Tech) Sent: Tuesday, 12 September 2017 7:06 AM To: MikroTik Australia Public List Subject: Re: [MT-AU Public] VLAN support with RB750Gr3 As an aside, Mike do you know if the RB3011 is going to get hardware crypto any time soon or even if it's possible? On 9 September 2017 at 13:17, Mike Everest <mike@duxtel.com> wrote:
Switch chip is hardware vs. vlan interface and bridges in software - in the case of CCR, the difference is marginal where there is one CPU per interface, but in the lower end devices switch is much faster and way more efficient.
I agree that it is cumbersome to work with, but in cases where you want to switch packets instead of routing them, hardware is absolutely definitely the way to do it ;-)
Cheers!
Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Saturday, 9 September 2017 6:41 AM To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] VLAN support with RB750Gr3
It looks like the new bridge system in the upcoming 6.41 firmware hides a lot of the details for setting up the underlying hardware and software specifics of bridges and VLANs so this issue is probably not something to worry about. I think the r3 is missing some VLAN features in the Mediatek hardware switch that are available in the other Atheros chips but it's probably not a showstopper. I bet most of the time hardly anyone ventured into the switch menu to fiddle with VLAN settings.
On 8 September 2017 at 14:47, Chris Herrmann <chrisherrmann7@gmail.com> wrote:
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Jason, Stephen, Yes, I think that's right - there's an awful lot of new features waiting on the elusive v7 ;) Cheers, Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Stephen Schwetz Sent: Tuesday, 12 September 2017 8:34 AM To: jason@upandrunningtech.com.au; MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] VLAN support with RB750Gr3
I believe that it requires a kernel upgrade to occur. So that will be in the magical V7 release I’m assuming
Sent from Mail for Windows 10
From: Jason Hecker (Up & Running Tech) Sent: Tuesday, 12 September 2017 7:06 AM To: MikroTik Australia Public List Subject: Re: [MT-AU Public] VLAN support with RB750Gr3
As an aside, Mike do you know if the RB3011 is going to get hardware crypto any time soon or even if it's possible?
On 9 September 2017 at 13:17, Mike Everest <mike@duxtel.com> wrote:
Switch chip is hardware vs. vlan interface and bridges in software - in the case of CCR, the difference is marginal where there is one CPU per interface, but in the lower end devices switch is much faster and way more efficient.
I agree that it is cumbersome to work with, but in cases where you want to switch packets instead of routing them, hardware is absolutely definitely the way to do it ;-)
Cheers!
Mike.
-----Original Message----- From: Public [mailto:public-bounces@talk.mikrotik.com.au] On Behalf Of Jason Hecker (Up & Running Tech) Sent: Saturday, 9 September 2017 6:41 AM To: MikroTik Australia Public List <public@talk.mikrotik.com.au> Subject: Re: [MT-AU Public] VLAN support with RB750Gr3
It looks like the new bridge system in the upcoming 6.41 firmware hides a lot of the details for setting up the underlying hardware and software specifics of bridges and VLANs so this issue is probably not something to worry about. I think the r3 is missing some VLAN features in the Mediatek hardware switch that are available in the other Atheros chips but it's probably not a showstopper. I bet most of the time hardly anyone ventured into the switch menu to fiddle with VLAN settings.
On 8 September 2017 at 14:47, Chris Herrmann <chrisherrmann7@gmail.com> wrote:
Hi all,
Looking at upgrading from RB2011 to this model to improve IPSEC throughput (don't need wifi on the unit). Sounds like the RB750Gr3 is much faster than the RB2011 for this... but... I've stumbled across some posts with people describing issues using VLANs on the RB750Gr3. The posts in question didn't appear to be resolved... so I figured I'd ask here - can you use vlans safely with this unit and <latest stable software/firmware>?
The RB2011 has been working perfectly with this for years now, but we'd like to push far more than the 16Mbps that appears to be the ceiling we get pushing IPSEC packets.
Anyone using it for this?
Thanks!
Chris _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.co m.au
-- <https://www.upandrunningtech.com.au> _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
_______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
participants (4)
-
Chris Herrmann -
Jason Hecker (Up & Running Tech) -
Mike Everest -
Stephen Schwetz