Mikrotik
MPLS-TE on Mikrotik
Important things to know when trying to test or use MPLS Traffic Engineering in a Mikrotik RouterOS 7.x network.RouterOS DHCP Scripts and RADIUS Start/Stop Surprises
RouterOS DHCP server scripting with RADIUS accounting only firing on start/stop, not renewals.RouterOS User Manager in Routed Networks
Troubleshooting RouterOS User Manager RADIUS server in routed networks: discovering that RADIUS replies sourced from loopback interfaces are rejected by clients, requiring RADIUS server to use interface IPs or non-loopback addresses for proper operation.RouterOS 7 Container Test
Testing RouterOS 7 container functionality: building static Go binary, creating Docker image, exporting and importing container on RB5009UPr+S+, configuring veth interfaces and bridge networking, with sub-5ms latency for containerized web services.Mikrotik CRS3xx Switching
MikroTik CRS3xx series switch evaluation: comparing CRS309-1G-8S+IN and CRS328-24P-4S+ models, tracking feature progression through RouterOS versions (spanning-tree, port isolation, DHCP snooping, MLAG support, VXLAN), and multi-vendor interoperability with HPE/Cisco switches.RouterOS 7.x Filtering
Implementing comprehensive BGP filtering policies on RouterOS 7.x: defining community lists for roles (customer/transit/peering), configuring route protection and RPKI validation, applying per-link inbound/outbound filters with prefix size validation and community-based localpref manipulation.Syncing RouterOS address-lists
Pull-based RouterOS address-list synchronization using dynamic webserver scripts: generating conditional add/update commands from database backend, fetching and executing scripts on multiple routers, tracking updates with timestamps, and avoiding API version compatibility issues.RPKI w/ RouterOS v7
Implementing RPKI route validation on RouterOS v7 with routinator RTR server: configuring RTR connections with preference/failover, validating routes with routing filter rules, rejecting invalid routes while preferencing valid routes, and managing ROA growth tracking.MPLS Labels Explained
Understanding MPLS label swapping vs stacking: tracing label forwarding tables across router hops showing how labels are replaced at each hop using LDP distribution, with example traceroute output demonstrating label swapping through P/PE routers to destination.Centrally Managed WiFi with MikroTik CAPsMAN
Deploying enterprise WiFi with MikroTik CAPsMAN: configuring centralized management for multiple access points, setting up channels/datapaths/security configs, choosing between local and centralized forwarding, and enabling adaptive noise immunity on Atheros chipsets.The Road to MPLS
Building MPLS Service Provider networks from scratch: implementing VPLS on MikroTik and full L3VPN on HPE Comware, configuring LDP label distribution, understanding MPLS benefits for latency reduction and QoS, and managing customer VRFs with vpnv4 BGP peering.MikroTik, VRRP, and IPv6
Configuring IPv6 first-hop redundancy with MikroTik VRRPv3: troubleshooting Router Advertisement issues where IPv6 sessions died during failover, solving by disabling RA on VLAN interfaces and configuring IPv6 ND settings for proper virtual gateway operation.BGP BLACKHOLE Community
Implementing RFC 7999 BGP BLACKHOLE community (65535:666) on MikroTik RouterOS: configuring routing filters to set blackhole route type, integrating with FastNetMon for automated DDoS mitigation, and handling provider-specific communities for upstream blackholing.MikroTik and Hairpin NAT
Configuring MikroTik hairpin NAT to access external IPs from internal network: implementing dst-nat and masquerade rules to route traffic destined for public IP back to internal reverse proxy when DNS returns external address.MikroTik SNMP Oddity
Troubleshooting MikroTik CCR1036 SNMP failure on loopback interface: packet captures reveal implementation quirk refusing to return traffic via different interface than request arrived on, requiring monitoring via closest interface IP.RFC3021: 31-Bit Prefixes on PtP Links
Using RFC3021 /31 netmasks on point-to-point links to conserve IPv4 addresses. Comparison with traditional /30 usage and device compatibility notes for Cisco and MikroTik equipment.