[Mikrotik] MPLS TE tunnels

2018-05-19 Thread Shayne Lebrun
Say you've got two links between point A and point B. You set up each link with a traffic engineering bandwidth of 100 mb/s, which is correct, set up your traffic engineering interfaces, MPLS, and some VPLS tunnels. You then attempt to move 300 mb/s of traffic from point a to point b. What

Re: [Mikrotik] ospf init bit

2016-07-21 Thread Shayne Lebrun
ons. Point-to-point is less work to configure, so I just use that. There are two devices in a point to point configuration so I figure it feels correct to put OSPF into that mode anyway. > -Original Message- > From: Shayne Lebrun <sleb...@corebroadband.ca> > To: 'Mi

Re: [Mikrotik] ospf init bit

2016-07-21 Thread Shayne Lebrun
Kelley Sent: Thursday, July 21, 2016 2:39 PM To: 'Mikrotik discussions' Subject: Re: [Mikrotik] ospf init bit Yup ubiquiti. Thought NBMA was more for wire Terri Kelley Network Engineer 254.697.6710 Farm to Market Broadband -Original Message- From: Shayne Lebrun <sleb...@corebroadband

Re: [Mikrotik] ospf init bit

2016-07-21 Thread Shayne Lebrun
What sort of wireless link is it between the two radios? I'm going to go out on a limb and guess Ubiquiti? In any event, try NBMA. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Terri Kelley Sent: Thursday, July

Re: [Mikrotik] Using switch port as VLAN access port on an RB750G?

2016-04-21 Thread Shayne Lebrun
If you're not doing any firewalling or anything, and it sounds like you're not, make sure FastPath is turned on, your 750 is reasonably up to date with both RouterOS software and routerboard firmware, and you probably are indeed going to get wire speed, or close enough for jazz. Test it and

[Mikrotik] SNMP read from Mikrotik

2015-05-04 Thread Shayne Lebrun
Is there a way to have a script on a Mikrotik router perform an SNMP read against a remote device? -- next part -- An HTML attachment was scrubbed... URL: http://mail.butchevans.com/pipermail/mikrotik/attachments/20150504/d44a98d4/attachment.html

Re: [Mikrotik] SNMP read from Mikrotik

2015-05-04 Thread Shayne Lebrun
, 2015 at 1:58 PM, D. Ryan Spott rsp...@irongoat.net wrote: I would just do a port forward through the mikrotik to the device behind it. ryan On 5/4/15 10:57 AM, Shayne Lebrun wrote: Is there a way to have a script on a Mikrotik router perform an SNMP read against a remote device

Re: [Mikrotik] SNMP read from Mikrotik

2015-05-04 Thread Shayne Lebrun
- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Shayne Lebrun Sent: Monday, May 04, 2015 1:54 PM To: 'Mikrotik discussions' Subject: Re: [Mikrotik] SNMP read from Mikrotik Neither of those things would help a script, running on the mikrotik, do

Re: [Mikrotik] Split-horizon on CRS125

2015-02-12 Thread Shayne Lebrun
on CRS125 And what if you want to make 2 groups? X could be 2?3? Why 1?! Martín Ruiz Director técnico 902 909 858 - 669379521 www.ibersystems.es El 12/02/2015, a las 22:59, Shayne Lebrun sleb...@corebroadband.ca escribió: Pretty simple, really: /interface bridge add name=mybridge /interface

Re: [Mikrotik] Split-horizon on CRS125

2015-02-12 Thread Shayne Lebrun
Pretty simple, really: /interface bridge add name=mybridge /interface bridge port add bridge=mybridge interface=ether1 horizon=1 /interface bridge port add bridge=mybridge interface=ether2 horizon=1 /interface bridge port add bridge=mybridge interface=ether3 horizon=1 /interface bridge port add

Re: [Mikrotik] Extreme IP video...

2015-02-11 Thread Shayne Lebrun
400 meters by 400 meters, you might be better just running fiber if at all possible. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Martin Ruiz Ibersystems Sent: Tuesday, February 10, 2015 2:55 PM To: Mikrotik

Re: [Mikrotik] New Online Training

2015-02-04 Thread Shayne Lebrun
I would be. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Butch Evans Sent: Wednesday, February 4, 2015 1:30 AM To: mikrotik@mail.butchevans.com Subject: Re: [Mikrotik] New Online Training On 01/29/2015 11:16 AM,

Re: [Mikrotik] AP/Station on Point2Point Backhauls

2014-10-03 Thread Shayne Lebrun
It really depends on what kind of equipment. If you're doing any kind of sync between them, keep your masters and slaves separate; a tower with multiple PTP links should be transmitting or receiving, period. If they're unsynced, it really doesn't matter. In that case, keep your masters on the

Re: [Mikrotik] Peer-to-Peer Filtering

2014-09-28 Thread Shayne Lebrun
be surprised if it's missing a lot of PTP too as I'm sure they wanted to prevent identifying false-positives. On Sat, Sep 27, 2014 at 5:27 PM, Shayne Lebrun sleb...@corebroadband.ca wrote: Not very. It's too easy to encrypt PTP traffic, difficult to catch, without spending a hell of a lot of time

Re: [Mikrotik] Peer-to-Peer Filtering

2014-09-27 Thread Shayne Lebrun
Not very. It's too easy to encrypt PTP traffic, difficult to catch, without spending a hell of a lot of time on it. You pretty much need deep packet inspection and regular signature updates and all that other stuff. -Original Message- From: mikrotik-boun...@mail.butchevans.com

Re: [Mikrotik] H323 invalid

2014-08-08 Thread Shayne Lebrun
I can't answer your exact question, but try triggering on something else, like DSCP value. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Grand Avenue Broadband Sent: Friday, August 8, 2014 11:01 AM To: Mikrotik

[Mikrotik] VPLS help required

2014-07-21 Thread Shayne Lebrun
Can somebody who's well-versed in mikrotik MPLS/VPLS hit me up offlist with their rates for some consulting? Thanks! -- next part -- An HTML attachment was scrubbed... URL: http://mail.butchevans.com/pipermail/mikrotik/attachments/20140721/7c107051/attachment.html

Re: [Mikrotik] Throughput Problem on Mikrotik RB951

2014-07-14 Thread Shayne Lebrun
We've seen similar things; MT at customer's to MT at network edge = fast, customer speed test = not as fast. Variety of radios and frequencies, too. Variety of MTs; 493ah, 750, 2011. -Original Message- From: mikrotik-boun...@mail.butchevans.com

Re: [Mikrotik] SMs install with wrong gateways - need to NAT to get to get to them

2014-04-28 Thread Shayne Lebrun
On your Mikrotik, go IP-Web Proxy. Enable it. In your browser, set the mikrotik's IP as the web proxy. Then, talk to each SM in turn, and correct the IP settings. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of

Re: [Mikrotik] Ethernet port auto-negotiate versus manual

2014-03-24 Thread Shayne Lebrun
Auto where it works, hardcode where it doesn't. Just remember hardcoding has to happen on both sides, or no sides. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Terri Kelley Sent: Monday, March 24, 2014 11:30 AM

Re: [Mikrotik] Deleting lots of IPs from address-list

2014-02-27 Thread Shayne Lebrun
Completely ignoring your actual issue, which others have attempted to answer (try exporting the list, opening as a text file, bulk adding a remove command to the front, uploading back to the mikrotik, and running?) why not just drop incoming connections? Why store them in an address list?

Re: [Mikrotik] Deleting lots of IPs from address-list

2014-02-27 Thread Shayne Lebrun
The rest of the battle being 25% red lasers, and 25% blue lasers. Fair enough. I thought maybe you were also using those IPs to block ssh/ftp/other services, or something like that. -Original Message- From: mikrotik-boun...@mail.butchevans.com

Re: [Mikrotik] Thank you to Butch and I will pass along a helpful hint.

2014-01-19 Thread Shayne Lebrun
/system reset-config no-defaults=yes Or /system reset-config use-defaults=no I forget which version of the command is the current one. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] On Behalf Of Paul McCall Sent: Saturday,

Re: [Mikrotik] RB2011UAS-2HnD througput

2013-03-19 Thread Shayne Lebrun
What happens if you leave the cisco in bridge mode, connect a computer directly to it, and run your speed tests? The email says you've tested the cisco in L3 mode, and the cisco in L2 mode with a Mikrotik. -Original Message- From: mikrotik-boun...@mail.butchevans.com

Re: [Mikrotik] Automatic config backup

2013-02-06 Thread Shayne Lebrun
If you're using more recent versions of ROS, 5.14 or something and higher, use '/export compact file=blahblah.rsc' to get only what you actually need to apply to a new router. We use something like: /system scheduler add name=backup on-event=/export compact file=systembackup

Re: [Mikrotik] Open Access Networks

2012-07-19 Thread Shayne Lebrun
Layer 2 connections, one vlan/AP/ISP. Use whatever client isolation your APs offer. Have the client equipment act as an access port, tagging the customer's traffic as appropriate. That way, each ISP can do their own provisioning (dhcp, PPPoE, static assignments, whatever), any given VLAN can

Re: [Mikrotik] Strange FTP problem

2012-05-02 Thread Shayne Lebrun
We have fairly complicated 'standard' setups; vlans, eoip tunnels, IPs and routing settings, access, SNMP, NTP and so on. We template the standard setup; when a new router is going in, all of the various services are provisioned in a database, the template is filled in automagically with that

Re: [Mikrotik] How to test a load balancer

2012-04-23 Thread Shayne Lebrun
Put a test mikrotik box on either end, and fire up bandwidth tester with 1 TCP connections? -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Martin Ruiz Ibersystems Sent: April-23-12 12:09 PM To: Mikrotik

Re: [Mikrotik] Reduced detail export?

2012-04-05 Thread Shayne Lebrun
Just add the word 'compact' to your export command. It's sweet like sugar. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Bill Prince Sent: April-05-12 3:57 PM To: Mikrotik discussions Subject: [Mikrotik]

Re: [Mikrotik] Reduced detail export?

2012-04-05 Thread Shayne Lebrun
Well, it was added in 5.12. Seriously. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Bill Prince Sent: April-05-12 4:08 PM To: mikrotik@mail.butchevans.com Subject: Re: [Mikrotik] Reduced detail export?

[Mikrotik] EoIP tunnel stops EoIPing

2012-03-21 Thread Shayne Lebrun
Two routers, can ping each other no problem. Router one has a VLAN interface bridged to an EoIP tunnel. Router two has an EoIP tunnel bridged to a vlan interface. Tagged packets come into router one, leave router two, and vice versa. Lately, we'll see a situation where traffic does not

Re: [Mikrotik] Mikrotik Windows File server

2012-01-25 Thread Shayne Lebrun
Mikrotik is the swiss army knife of routers, no? Well, now it has basic NAS functionality. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Jacob Heider Sent: January-25-12 2:15 PM To: Mikrotik discussions

Re: [Mikrotik] System Administrator Position

2012-01-18 Thread Shayne Lebrun
But it specifically says not to call MVN or it's employees. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Butch Evans Sent: January-18-12 3:49 AM To: Mikrotik discussions Subject: Re: [Mikrotik] System

Re: [Mikrotik] System Administrator Position

2012-01-18 Thread Shayne Lebrun
obviously mean you can not follow instructions and would immediately eliminate you from the candidate pool. Casey On Wed, Jan 18, 2012 at 8:59 AM, Shayne Lebrun sleb...@corebroadband.ca wrote: But it specifically says not to call MVN or it's employees. -Original Message

Re: [Mikrotik] APC ups and mikrotik

2011-09-12 Thread Shayne Lebrun
Not without some details about what you've tried already. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of john Sent: September-12-11 9:30 AM To: Mikrotik discussions Subject: [Mikrotik] APC ups and mikrotik

Re: [Mikrotik] rb493ah and TCP speed test

2011-08-22 Thread Shayne Lebrun
Take a pair of 493AHs, stick an Ethernet cord between them, and run a test. That should get you your answer. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Josh Luthman Sent: August-22-11 3:36 AM To: Mikrotik

Re: [Mikrotik] RB750G - Traffic stops to other slave ports...

2011-07-18 Thread Shayne Lebrun
If you have a list of static IPs that you've assigned, check what dhcp leases have been handed out on the Mikrotik. If the static IPs are all in a group, don't hand that group out via DHCP. Set up a new /24 subnet, change your DHCP pool, and set up a second NAT. -Original Message-

Re: [Mikrotik] OSPF not getting neighbors

2011-07-11 Thread Shayne Lebrun
If you don't want to define them manually, you could always try 'redistribute connected routes as type 1'. But yeah, I've never tried with 0.0.0.0/0, and I'd think that would be a problem, meself. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-

Re: [Mikrotik] OSPF multiple ABRs between an area and backbone?

2011-06-30 Thread Shayne Lebrun
Awesome. Thanks! -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of can...@believewireless.net Sent: June-30-11 10:22 AM To: Mikrotik discussions Subject: Re: [Mikrotik] OSPF multiple ABRs between an area and

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-16 Thread Shayne Lebrun
If the computer isn't actively looking for settings to be assigned to it, like through a DHCP request, you cannot assign it settings. The router isn't going to create a radius request for every packet that comes in with a given mac address. -Original Message- From:

Re: [Mikrotik] Radius MAC Authentication with both DHCP and static IPs

2011-03-15 Thread Shayne Lebrun
You shouldn't have anybody set 'statically'; everybody should be DHCP, and some people will have reserved addresses that they always get. Not what you're asking, I know. :-) -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On

Re: [Mikrotik] Duplex mismatches

2010-11-04 Thread Shayne Lebrun
When you try a second device, is it using the same Ethernet cable? -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Terry Trumbo Sent: November-04-10 11:28 AM To: mikrotik@mail.butchevans.com Subject:

Re: [Mikrotik] MT strikes again - OSPF says full, but no routes

2010-06-23 Thread Shayne Lebrun
Is the link between the two routers flapping or having difficulties? OSPF, especially Mikrotik's, hates that. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Jayson Baker Sent: Wednesday, June 23, 2010 12:40

Re: [Mikrotik] Daktronics LED Sign setup

2010-06-11 Thread Shayne Lebrun
Does the sign have a gateway address defined? -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Eric Muehleisen Sent: Friday, June 11, 2010 10:00 AM To: Mikrotik discussions Subject: [Mikrotik] Daktronics LED

Re: [Mikrotik] Monitoring OSPF

2010-06-10 Thread Shayne Lebrun
,implement,standard = 0 Josh Luthman Office: 937-552-2340 Direct: 937-552-2343 1100 Wayne St Suite 1337 Troy, OH 45373 Success is not final, failure is not fatal: it is the courage to continue that counts. --- Winston Churchill On Thu, Jun 10, 2010 at 3:17 PM, Shayne Lebrun sleb

Re: [Mikrotik] Monitoring OSPF

2010-06-10 Thread Shayne Lebrun
It'd be nice if Mikrotik implemented the standard MIB-2 OSPF tree. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Jeromie Reeves Sent: Thursday, June 10, 2010 3:01 PM To: Mikrotik discussions Subject: Re:

Re: [Mikrotik] XBox

2010-06-02 Thread Shayne Lebrun
That's why we want the LAC/LNS functionality. :-) PPPoE client connects to the LAC at the tower. The LAC at the tower then opens a L2TP tunnel back to a central LNS (note that there can be more than one LNS, and the LAC can decide which one to connect to either via something like round-robin, or

Re: [Mikrotik] XBox

2010-06-02 Thread Shayne Lebrun
Again, the missing LAC/LNS functionality. You can fake it, to some extent, in Mikrotik with EoIP to allow a routed network, and a central PPPoE server. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of RickG

Re: [Mikrotik] XBox

2010-06-01 Thread Shayne Lebrun
: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Butch Evans Sent: Tuesday, June 01, 2010 1:47 PM To: Mikrotik discussions Subject: Re: [Mikrotik] XBox On Tue, 2010-06-01 at 10:58 -0400, Shayne Lebrun wrote: And for this, we wait with bated

Re: [Mikrotik] smtp delay

2010-05-13 Thread Shayne Lebrun
Ah, but many anti-spam solutions do use PTR entries, on the theory that anybody not using a proper PTR is a) illegitimate, b) a 'dynamic' user that should be sending mail through their ISP's MTA, or c) so clueless that they're a huge security risk. -Original Message- From:

Re: [Mikrotik] smtp delay

2010-05-12 Thread Shayne Lebrun
Just telnet to port 25 on the server in question and perform an SMTP transaction, command by command. You'll see exactly where the delay lies. Chances are, as others have said, it's the remote mail server doing a DNS lookup on something (your reverse address, a blacklist or spam filter list,

Re: [Mikrotik] IPMAP Equivalent in Mikrotik

2010-05-06 Thread Shayne Lebrun
You also need the 72.90.73.3 IP address assigned on ether3. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Sam Tetherow Sent: Thursday, May 06, 2010 12:30 PM To: Mikrotik discussions Subject: Re: [Mikrotik]

Re: [Mikrotik] model recommendation for WAN failover/load balance/MPLS

2010-04-01 Thread Shayne Lebrun
What he meant was, as far as the router's concerned, the VPN is an interface, much like an Ethernet port is an interface. You can apply QoS to an interface. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of Dylan

Re: [Mikrotik] zenoss

2010-03-25 Thread Shayne Lebrun
Zenoss will have standard interface mibs built in. That said, we switched from Zenoss to nagios/cacti. Between the web interface being unsuitable for things like smartphones, to having no concept of network dependencies, Zenoss just wasn't there for us quite yet. I did really appreciate the

Re: [Mikrotik] Replace X86 with Routerboard.

2010-03-08 Thread Shayne Lebrun
You might also consider a pair of 493AH or 450G or something, running VRRP, if the goal is uptime and continuity of service rather than increasing performance. -Original Message- From: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik- boun...@mail.butchevans.com] On Behalf Of

Re: [Mikrotik] RouterOS needs VPDN!

2009-11-23 Thread Shayne Lebrun
? - Mike Hammett Intelligent Computing Solutions http://www.ics-il.com -- From: Shayne Lebrun sleb...@corebroadband.ca Sent: Monday, November 16, 2009 8:04 AM To: 'Mikrotik discussions' mikrotik@mail.butchevans.com Subject: [Mikrotik

[Mikrotik] RouterOS needs VPDN!

2009-11-16 Thread Shayne Lebrun
What I'd love to see in RouterOS is VPDN. Very handy for reselling access. Customer initiates PPPoE session. Local Access Concentrator picks up this PPPoE session, and examines the realm. Based on said realm, the session is forwarded along to the appropriate 3rd party's LNS. Let say,

Re: [Mikrotik] 28v over-voltage protection - just say NO

2009-10-28 Thread Shayne Lebrun
Agreed on the 28 volt cutoff (though a RB600 will take lots more; at least 48, possibly all the way up to 56 IIRC) but we've had lots of 493s, 433s and 532s come back quite nicely after the voltage wasn't so over any more. -Original Message- From: mikrotik-boun...@mail.butchevans.com

Re: [Mikrotik] Another poll: How are you controlling access to your routers?

2009-10-27 Thread Shayne Lebrun
If you *do* have any Internet facing IP addresses, install the handy scripts that are floating around that count the number of connections on ssh, telnet and FTP, and blacklist the IPs if there are a number of connections in a short period of time. Not only does this keep the nice dictionary