The official Mikrotik router thread

You are supposed to have a parent queue so Mikrotik knows what resource it has available to deal with. So I have my telkom set at 70/40 not 100/50 as you dont get that and you can get close but its not always consistent. If I do a speedtest I get 67/38 and there was one ping from my Mikrotik that spiked from the normal 6 to 21. If I disable the queues I get 94/49 (its a good day) but the pings spike to over 400 with the high of 713.

I would much rather have consistency and sacrifice some of my available bandwidth.

1600934331297.png
 
Hey guys, need help with Load Balancing / Bonding.
I have 10mb ADSL Uncapped D-Link DSL-2750u router and capped Fixed LTE Router ZTE-MF286c, I would like to combine these connections into a hAP AC2.
All devices will connect to the hAP AC2.
Just want use both connections equally and if data runs out on the LTE, then access will still be available through ADSL.
Please advise on how or where can get steps / instructions on how to do this?
Thanks
 
ryan10 said:
Hey guys, need help with Load Balancing / Bonding.
I have 10mb ADSL Uncapped D-Link DSL-2750u router and capped Fixed LTE Router ZTE-MF286c, I would like to combine these connections into a hAP AC2.
All devices will connect to the hAP AC2.
Just want use both connections equally and if data runs out on the LTE, then access will still be available through ADSL.
Please advise on how or where can get steps / instructions on how to do this?
Thanks
Click to expand...

Give this tool a try for a starting point

https://mikrotikconfig.com/ click "load balance 2 wans"

You will have to monitor the connections for when you run out of data, probably netwatch
 
Thanks @Leno

Just want to check if this seems correct before I go ahead?
10.111.0.1 - Is the LTE Router
10.112.0.1 - Is the ADSL Router
hAP AC2 is currently configured with default QuickSet Home AP Dual, LAN IP is 192.168.7.xxx, Wireless configured.

LB1.JPG

LB2.JPG
 

Attachments

Anyone know how to set up GRE tunneling on a RB750? Friend is trying to connect to their VPN server, but windows is bitching about GRE packets not being allowed.
 
LandyMan said:
Anyone know how to set up GRE tunneling on a RB750? Friend is trying to connect to their VPN server, but windows is bitching about GRE packets not being allowed.
Click to expand...

I have this filter rule for it, although I haven't used a GRE VPN in a while:

action accept
chain forward
protocol 47 (gre)
out interface all ppp
 
Anyone up to help with guest network and vlan tags. I currently have a Hex and Cap AC with a managed netgear switch.

I would like to just tag guest traffic from cap ac.
Cap ac> switch> hex>internet


I believe I could just tag guest network and leave the rest, or will I need to tag home network as well without needing to setup the devices to accept vlans
 
Danieldan5152 said:
Anyone up to help with guest network and vlan tags. I currently have a Hex and Cap AC with a managed netgear switch.

I would like to just tag guest traffic from cap ac.
Cap ac> switch> hex>internet


I believe I could just tag guest network and leave the rest, or will I need to tag home network as well without needing to setup the devices to accept vlans
Click to expand...
You can just tag the guest traffic.

Is teh switch POE? Is that why the CAP AC is plugged into it?
 
killerbyte said:
You can just tag the guest traffic.

Is teh switch POE? Is that why the CAP AC is plugged into it?
Click to expand...
This is what I tried before

HEX side
1608976876285.png

Cap side
1608976948657.png
Including adding guest getting tagged VLAN 50 on the wireless interface

I don't understand VLAN enough to know what should be set where


ignore ports 1-2 they have their own allocations- this is what it is now because my previous attempts left me having issues so I changed it back to working state
1608977210746.png
1608977230593.png



I do a lot of network transfers and believe the hex should not be used for that part, that is why the CAP AC is in the switch.


Evo1ve said:
You could also play with the capsman datapath local forwarding option
Click to expand...
I've looked at capsman and it looks to have performance loss, I want as much performance out of my CAP AC as possible.
 
In Layman's Terms:

With Netgear, as with most devices, the Tagged Ports allows tagged traffic to traverse said port.
Untagged Ports will tagged the traffic on that port with the ID for which it is untagged traffic.
Excluded Ports will not partake in traffic associated with said VLAN on said port.

In even simpler terms:
Tagged VLAN tells the switch what to do with the tagged traffic on that port.
Untagged VLAN tells the switch what to do with untagged traffic on that port.
Exclude tells the switch what VLANs should ignore that port entirely.

Example :
Cap AC (Local Tagged 10) <-> Switch Port 15 (Tagged VLAN 10, 50)
Cap AC (Guest Tagged 50) <-> Switch Port 15 (Tagged VLAN 10, 50)

PC (Untagged VLAN 50) <-> Switch Port 2 (Untagged VLAN 50)
Android TV (Untagged VLAN 10) <-> Switch Port 3(Untagged VLAN 10)
Switch Port 4(Untagged VLAN 10) <-> NAS (Untagged VLAN 10)

Switch Port 16 (Tagged VLAN 10, 50) <-> Hex Port 2 (Tagged VLAN 10, 50)

^ In this scenario a PC and Guest WiFi is on Guest VLAN 50 and the Android TV box ( and it's NAS media library), as well as the Local WiFi is on the Local VLAN 10.

This is the simplest I can explain it. You can change things up all you want but the basics stay the same.

My personal advise is to not mix tagged and untagged data, unless the situation requires it - or do mix it, it is up to you. Some manufacturers do not play nice with others when it comes to mixed traffic, and sometimes it simply requires a little extra digging/tweaking. Nothing wrong (from non-enterprise standpoint) with mixing it either, so ...

FYI: Above example's principles holds true if you use VLAN 1 and 50.
 
Last edited:
D4N_CPT said:
In Layman's Terms:

With Netgear, as with most devices, the Tagged Ports allows tagged traffic to traverse said port.
Untagged Ports will tagged the traffic on that port with the ID for which it is untagged traffic.
Excluded Ports will not partake in traffic associated with said VLAN on said port.

In even simpler terms:
Tagged VLAN tells the switch what to do with the tagged traffic on that port.
Untagged VLAN tells the switch what to do with untagged traffic on that port.
Exclude tells the switch what VLANs should ignore that port entirely.

Example :
Cap AC (Local Tagged 10) <-> Switch Port 15 (Tagged VLAN 10, 50)
Cap AC (Guest Tagged 50) <-> Switch Port 15 (Tagged VLAN 10, 50)

PC (Untagged VLAN 50) <-> Switch Port 2 (Untagged VLAN 50)
Android TV (Untagged VLAN 10) <-> Switch Port 3(Untagged VLAN 10)
Switch Port 4(Untagged VLAN 10) <-> NAS (Untagged VLAN 10)

Switch Port 16 (Tagged VLAN 10, 50) <-> Hex Port 2 (Tagged VLAN 10, 50)

^ In this scenario a PC and Guest WiFi is on Guest VLAN 50 and the Android TV box ( and it's NAS media library), as well as the Local WiFi is on the Local VLAN 10.

This is the simplest I can explain it. You can change things up all you want but the basics stay the same.

My personal advise is to not mix tagged and untagged data, unless the situation requires it - or do mix it, it is up to you. Some manufacturers do not play nice with others when it comes to mixed traffic, and sometimes it simply requires a little extra digging/tweaking. Nothing wrong (from non-enterprise standpoint) with mixing it either, so ...

FYI: Above example's principles holds true if you use VLAN 1 and 50.
Click to expand...
So I believe, my issue is I'm doing the VLAN on the Mikrotik incorrectly, Since there seems to be like 3 ways to route vlans and I don't know which exactly, do I need firewall rules as well? on the cap or will bridge port lan and wifi ap be enough
On the hex same thing
 
Danieldan5152 said:
So I believe, my issue is I'm doing the VLAN on the Mikrotik incorrectly, Since there seems to be like 3 ways to route vlans and I don't know which exactly, do I need firewall rules as well? on the cap or will bridge port lan and wifi ap be enough
On the hex same thing
Click to expand...
You can try set vlan 50 membership ports to "tagged" on the Netgear.
On both Mikrotik's check the vlans "use service tag" is not enabled.
 
Router OS 6.48 available:

What's new in 6.48 (2020-Dec-22 11:20):

*) arm - added support for automatic CPU frequency stepping for IPQ4018/IPQ4019 devices;
*) arm - improved system stability;
*) arm - improved watchdog and kernel panic reporting in log after reboots on IPQ4018/IPQ4019 devices;
*) arm64 - improved reboot reason reporting in log;
*) bgp - fixed VPNV4 RD byte order;
*) bonding - added LACP monitoring;

long list continued here: https://mikrotik.com/download/changelogs
 
Please may I ask for your guidance I have a RB951Ui-2HnD. I have implemented a firewall rule that has locked me out of the Webconfig page, I can't seem to access via WinBox either, there is no serial connection on these devices that I know of, does anyone perhaps know if there is a way of connecting to it and deleting that rule, without a full reset?

:oops: forgot to take a backup before doing so.

https://mikrotik.com/product/RB951Ui-2HnD

I have been googling and trying different ideas for a full day now to try avoid the reset.
 
Last edited:
Kingskid said:
Please may I ask for your guidance I have a RB951Ui-2HnD. I have implemented a firewall rule that has locked me out of the Webconfig page, I can't seem to access via WinBox either, there is no serial connection on these devices that I know of, does anyone perhaps know if there is a way of connecting to it and deleting that rule, without a full reset?

:oops: forgot to take a backup before doing so.

https://mikrotik.com/product/RB951Ui-2HnD

I have been googling and trying different ideas for a full day now to try avoid the reset.
Click to expand...
With great power comes great responsibility
So much so that you can entirely lock yourself out without a reset :)
 
Kingskid said:
Please may I ask for your guidance I have a RB951Ui-2HnD. I have implemented a firewall rule that has locked me out of the Webconfig page, I can't seem to access via WinBox either, there is no serial connection on these devices that I know of, does anyone perhaps know if there is a way of connecting to it and deleting that rule, without a full reset?

:oops: forgot to take a backup before doing so.

https://mikrotik.com/product/RB951Ui-2HnD

I have been googling and trying different ideas for a full day now to try avoid the reset.
Click to expand...

Ouch.

Hopefully you have an older backup somewhere
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X