Internet Service provider topics, Network operations, and other topics. Some topics include Mikrotik, Cisco, Arista and other configurations.
BGP sessions can drop for many reasons. Dropping a session causes BGP to withdraw the routes learned through that neighbor. If it’s unexpected, this can cause congestion or other issues. The graceful shutdown option in BGP can help mitigate this. BGP graceful shutdown lets you move traffic before taking the session down. Rather than waiting … Read more
In Part 1, we covered how to use Cloudflare Tunnel to protect MikroTik management access. We configured a connector inside the management network and used Cloudflare Access to authenticate users before allowing them to reach WebFig. The router no longer needed a public-facing management port. Most of us MikroTik administrators spend more time in WinBox … Read more
When a signed domain has a broken chain of trust, a validating resolver returns SERVFAIL. ISP operators need enough resolver data to tell that failure from an ordinary DNS outage.
I, due to recent SSH vulnerabilities in MikroTik, figured this series of articles would be relevant. The router may have strong passwords and firewall filters, but those services still receive constant login attempts from automated scanners. For years, the normal answer was a VPN with a management network. VPNs work well, but they require another … Read more
The following is from the 7.23.7 changelog. What’s new in 7.23.7 (2026-09-16): *) lte – prevent the modem firmware from being deleted for RBSXTLTE3-7, EC25-EU&KNe, EG25-G&KNe, EC25-EU&SXTsq, EG25-G&SXTsq (introduced in 7.23.6); If you have already upgraded to 7.23.6 or 7.24.3, follow these steps to restore LTE functionality on affected devices: For more details, see:https://forum.mikrotik.com/t/warning-lte-interface-stops-working-after-upgrade-to-7-23-6-7-24-3
What it looks like when an intruder tries to make your own router work against you. A note before we start: Anything in this post that could identify my network, my organization, or my router’s real hostname and IP address has been redacted or made generic. The attacker’s own infrastructure, such as IP addresses, ports, … Read more
Have you ever looked at a data center marketing slick and wondered what N, N+1, 2N, and 2(N+1) actually mean? The main thing they tell you is how many components can fail before the system drops below the capacity needed to support the load. When I evaluate a data center, I want to know what … Read more
Troubleshooting Tarana wireless customer connections means looking at RSSI, SNR, modulation, retransmissions, latency, sector utilization, and trends together.
3 Mintue read timeJustin Wilson PacketsDownRange A common problem I run into when diagnosing route issues is traffic not going across the path it’s supposed to. An established BGP session only means the routers successfully exchanged routes. It says nothing about which route your router actually installed in the forwarding table. Let’s get into some … Read more
5 minute read time.Justin Wilson j2sw.com When you configure a BGP session, one of the first questions is what routes you actually want to receive. If you have ever filled out a questionnaire with Hurricane Electric or another transit provider, they ask you what “kind” of routes you want. In this article, I plan to … Read more
4 minutes read time.Many of us ISP veterans are familiar with Point-to-Point Protocol over Ethernet (PPPoE), also referred to as Triple P O E. PPPoE is showing its age. It showed its age 15 years ago. DHCP was the simple fix for modern networks. It had less overhead and was simple. Now along comes IPoE. … Read more
