I recently had an instance where I had to re-visit adding connection limits to a CPE running lots of connections. they were probably P2P. Here is the code we added:
/ip firewall filter
add chain=forward action=log tcp-flags =syn protocol=tcp connection-limit=100,32 log-prefix=”CONN_LIMIT:” comment=”connection limit” disabled=no
add chain=forward action=drop tcp-flags =syn protocol=tcp connection-limit=100,32 comment=”connection limit” disabled=no
What this code does is [...]
Of note from the changelog:
*) ipsec – added blowfish, twofish, and camellia encryption algorithms;
*) fixed static route removing;
*) fixed DHCP client compatibility with some DHCP servers;
*) fixed temperature monitor on RB800 and RB450G;
Get the torrent here
From the Mikrotik WIKI:
Bidirectional Forwarding Detection (BFD) is a protocol intended to detect faults in the bidirectional path between two forwarding engines, including physical interfaces, sub-interfaces, data link(s), and to the extent possible the forwarding engines themselves, with potentially very low latency. It operates independently of media, data protocols, and routing protocols.
BFD is basically a [...]
Noteable from the changelog:
*) snmp – fixed snmp version three;
*) snmp – fixed vlan interface speed;
*) hotspot – fixed radius variables in hotspot html pages;
*) removed support for xen;
*) routing – added support for BFD protocol;
*) fixed problem – MetaROUTER sometimes froze on RB4xx;
*) fixed OSPFv3 on bridge interfaces;
http://www.mikrotik.com/pdf/newsletter22.pdf
The new spectrum analyzer features look pretty handy. Currently only the RouterBoard R2N and R52N cards are supported. The newsletter has this link to the wiki: http://wiki.mikrotik.com/wiki/Spectrum_analyzer
As IPV4 space becomes more and more scarce small operators are faced how to make their IP space stretch as far as they can. One way to do this in a routed WISP environment is to do NAT translation on a per pop basis. I have put together a Visio diagram to illustrate this.
The router [...]
Main fixes would benefit anyone running BGP or OSPF on router OS.
Get the torrent from http://www.mikrotik.com/download
Straight from the Mikrotik site.
Upgrading procedure for all devices:
Update the Bootloader if using a RouterBOARD
In your RouterOS v3.25 or newer, Update your RouterOS license
Upload new RouterOS v4 packages to the router, and reboot
If you are currently running an older version of RouterOS, where license can’t be upgraded to the [...]
Recent Comments