Blogs
Duplicate MAC Address Madness
Troubleshooting duplicate MAC addresses in redundant firewall HA deployments: discovering non-unique VRRP group IDs across sites caused site-to-site traffic loss, with MAC addresses appearing on unexpected switch ports during failover events.RouterOS 7.x Filtering
Implementing comprehensive BGP filtering policies on RouterOS 7.x: defining community lists for roles (customer/transit/peering), configuring route protection and RPKI validation, applying per-link inbound/outbound filters with prefix size validation and community-based localpref manipulation.Syncing RouterOS address-lists
Pull-based RouterOS address-list synchronization using dynamic webserver scripts: generating conditional add/update commands from database backend, fetching and executing scripts on multiple routers, tracking updates with timestamps, and avoiding API version compatibility issues.RPKI w/ RouterOS v7
Implementing RPKI route validation on RouterOS v7 with routinator RTR server: configuring RTR connections with preference/failover, validating routes with routing filter rules, rejecting invalid routes while preferencing valid routes, and managing ROA growth tracking.exabgp 4.x, anycast, and healthchecks
Implementing exabgp 4.x built-in healthchecks for anycasted DNS: configuring health check intervals, rise/fall thresholds, withdraw-on-down behavior for automatic route removal on service failure, and multi-address-family BGP sessions for IPv4/IPv6 anycast announcements.