Skip to content
Feb 18 / Greg

Video Guide to Configure OpenVPN in Mikrotik For Remote Offices

Use OpenVPN along with OSPF to have remote offices that dynamically create tunnels to a hub site and share routes dynamically between the two.

Create a self-signed certificate in Mikrotik:

1
2
3
4
5
6
7
8
9
10
11
/certificate
add name=ca-template common-name=myCa key-usage=key-cert-sign,crl-sign
add name=server-template common-name=server
add name=client1-template common-name=client1
add name=client2-template common-name=client2
 
/certificate 
sign ca-template ca-crl-host=192.168.88.153 name=myCa
sign server-template ca=myCa name=server
sign client1-template ca=myCa name=client1
sign client2-template ca=myCa name=client2

Diagram from video:

Questions/comments always welcome!

Feb 18 / thebrotherswisp

TheBrothersWISP 64 – CHR/Virtual Routers, MUM Spec, Your Lab



Greg, Wilson, Andrew Cox, and Mike put all those other sucker MCs to shame.

This cast we talk about:
Slack updates
CHR virtio-scsi driver/CHR additions in recent RC
Virtual routing
ASICs to CPU routing, and back to ASICs
What does your network lab look like?
Upcoming events

Help support us by becoming a patron! <==join our Slack team!
Keep contacting us: contactus (at) thebrotherswisp.com or https://facebook.com/thebrotherswisp

Click the link below to view the article!

Feb 11 / Greg

My Mobile Home Network Lab

So my lab allows me to login to a web page and power on/off all of my network gear. I also have a console server to remotely access every piece of gear. I use this lab extensively for building my Lynda and LinkedIn Learning videos. I also use it regularly for all sorts of network testing.

Everything is remotely accessible through the console server as well as remotely powered.
I have:
Cisco
– 7206 G1
– 2621XM
– 3550
– 3750G

Mikrotik:
-hap lite
-rb750

Digital logger power controlers
Avocent cyclades console server

Let me know what you guys do for your home lab!

Feb 4 / thebrotherswisp

TheBrothersWISP 63 – Mikrotik NL 80, Network Coach, Sales People



Join Tomas, Mike, and Greg as we roll the D20, and forage through our bag of holding.

This cast we talk about:
Mikrotik updates
wap-60g
hap-ac2
cap-ac
Newsletter 80
USB-powered MT
Getting a network coach.
Account manager vs. sales vs. sales support vs. sales engineer
The boring company’s flame thrower

Help support us by becoming a patron! <==join our Slack team!
Keep contacting us: contactus (at) thebrotherswisp.com or https://facebook.com/thebrotherswisp

Click the link below to view the article!

Jan 26 / Greg

OTRS To Gmail Failure

When trying to fetch email from Gmail into my OTRS install I saw the following error:

Facility:
OTRS-otrs.Console.pl-Maint::PostMaster::MailAccountFetch-19

CommunicationLog(ID:29,AccountType:-,AccountID:-,Direction:Incoming,Transport:Email,ObjectLogType:Connection,ObjectLogID:29)::Kernel::System::MailAccount::IMAP => IMAPS: Auth for user SomeRandomEmailAddress@gregsowell.com/imap.gmail.com failed!

First, log into your gmail account. Then go to “settings => forwarding and pop/imap” and enable imap.
Second, edit your account and set it to allow “less secure apps to use your account”.

You should now be able to properly fetch…good luck and happy ticketing 🙂

Jan 21 / thebrotherswisp

TheBrothersWISP 62 – WiFi Broadcast Storms, Large BGP Tables, Unifi Automation



The two best looking brothers Greg and Mike chat about networkie type things.

This cast we talk about:
Google devices disrupting home wifi
Ubiquiti Unifi Dimmers
Mikrotik hAP ac2 – AC wave 2 gear
How many routes have you gotten on a CCR?
IPv6 again…
EDNS

Help support us by becoming a patron!
Keep contacting us: contactus (at) thebrotherswisp.com or https://facebook.com/thebrotherswisp

Click the link below to view the article!

Jan 9 / Greg

Set Jumbo Frames On A Nexus 3064

It is configured system wide to 9216 with the following commands:

1
2
3
4
5
6
7
policy-map type network-qos jumbo
class type network-qos class-default
mtu 9216
exit
exit
system qos
service-policy type network-qos jumbo

Verification is a bit odd, though. If you enter a standard show interface, it won’t show the correct value:

1
2
3
4
5
6
7
8
9
10
sw02# show int e1/1
Ethernet1/1 is down (SFP not inserted)
 Dedicated Interface
  Hardware: 100/1000/10000 Ethernet, address: 547f.ee52.9a08 (bia 547f.ee52.9a08
)
  MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec
  reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA
  Port mode is access
  Full-duplex, 10 Gb/s

Notice how it has MTU displayed as “1500 bytes”.

If, however, I use the show queuing command it displays correctly:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
sw02# show queuing interface e1/1
Ethernet1/1 queuing information:
    qos-group  sched-type  oper-bandwidth
        0       WRR            100
    qos-group 0
    HW MTU: 9216 (9216 configured)
    drop-type: drop, xon: 0, xoff: 0
    Statistics:
        Ucast pkts sent over the port           : 0
        Ucast bytes sent over the port          : 0
        Mcast pkts sent over the port           : 0
        Mcast bytes sent over the port          : 0
        Ucast pkts dropped                      : 0
        Ucast bytes dropped                     : 0
        Mcast pkts dropped                      : 0
        Mcast bytes dropped                     : 0
 
    Pkts dropped by RX thresholds               : 0
    Bytes dropped by RX thresholds              : 0

Notice it shows “HW MTU: 9216”.