8/18/2019 megis
1/37
1
MikroTik RouterOS v6
Whats new??
Moscow,
MUM Russia 2013
8/18/2019 megis
2/37
2
Good News Everyone!!!
RouterOS v6.x full releaseis here!!!
(available o our owloa "a#e sice 20.0$.2013%
8/18/2019 megis
3/37
3
Su""ort for &ew 'roucts
● louoreRouter, louRouterSwitch aother ew evices will be full) su""orte ol) iRouterOS v6.x
8/18/2019 megis
4/37
4
&ew *iux +erel
● RouterOS $.2$
– *iux +erel versio 2.6.3$
●
RouterOS 6.x – *iux +erel versio 3.3.$
●
-or ore etaile iforatio see/htt"/www.erel.or#
8/18/2019 megis
5/37
5
&ew 'U architecture su""ort
● v$.x there were ifferet architectures
– mipsle (R41xx, R4$xx%
– mipsbe (R4xx, R45xx, R4xx,R42011, S78, Sextat, 9roove, Metal,RS%
– ppc (R41xxx, R46xx, R4:xx%
– x86● v6.x there will be oe ore
– tile (R1xxx%
8/18/2019 megis
6/37
6
RouterOS 8ile architecture
● Ol) for R evices● 6;bit o"erati#
s)ste (ore R
8/18/2019 megis
7/37
7
&ew +erel -eatures
● &ewest iterface riversu""ort for x:6 s)stes
● "rove iterface
aa#eet ; scaleswell for u" to thousasof iterfaces a ore
● Uses less s"ace ostora#e ; wors wellwith 32Mi4 flash
8/18/2019 megis
8/37
8
@hat else is ewA●
*ifte 16 'U core liit● "rove RouterOS
"erforace o ulti;c"us)stes (u" to 20B%
● "rove Router4O
8/18/2019 megis
9/37
9
-ast 'ath●
-ast 'ath allows to forwar "acets withoutaitioal "rocessi# i the *iux +erel. ti"roves forwari# s"ees si#ificatl).
● -ast "ath reCuireets
– -ast 'ath shoul be allowe i cofi#uratio
– terface river ust have su""ort
– S"ecific cofi#uratio coitios
● urretl) RouterOS has fast "ath halers for/i"v, traffic #eerator, "ls, bri#e
● More halers will be ae i future.
8/18/2019 megis
10/37
10
&ew 8hrou#h"ut test results
8/18/2019 megis
11/37
11
8hrou#h"ut i illios ""s
8/18/2019 megis
12/37
12
8raffic 9eerator 8ool
● 8raffic 9eerator is a bawith;tool evolutio
● 8raffic 9eerator ca/
– =eterie trasfer rates, "acet loss
– =etect out;of;orer "acets
– ollect latec) a Ditter values
– Dect a re"la) E."ca" file (&F@!! i v6.1%
● G?uicH oe● -ull @ibox su""ort coi# soo
8/18/2019 megis
13/37
13
8/18/2019 megis
14/37
14
8/18/2019 megis
15/37
15
Ies, still ; 'acet -low =ia#ra("a#e 3%
8/18/2019 megis
16/37
16
8/18/2019 megis
17/37
17
8/18/2019 megis
18/37
18
8/18/2019 megis
19/37
19
?oS S)ste Rewore
● @
8/18/2019 megis
20/37
20
ha#es i 'acet -low =ia#ra
● ?ueui# "acet i several ifferet "laces i itsGlife;c)cleH causes eorous "erforacee#raatio i ulti;threai# eviroet
●
RouterOS v6.x ?oS s)ste was reesi# sothat Cueui# ha""es is sae "laceres"ectivel) to other "rocesses i the router.
● >84 G#lobal;iH, G#lobal;outH a G#lobal;totalHwas elete, a re"lace with >84 G#lobalHa "lace at the ver) e of "acetJs Glife;c)cleH i the router.
8/18/2019 megis
21/37
21
>84 i RouterOS v$
8/18/2019 megis
22/37
22
>84 i RouterOS v6
8/18/2019 megis
23/37
23
8/18/2019 megis
24/37
24
Si"le ?ueues● Si"le Cueue atchi#
al#orith u"ate
● Ler) sall overhea for"acets that iss
existi# si"le Cueues● 8o" level si"le
Cueues are owbalace betwee 'Ucores (32 Cueues xfaster tha 1 Cueue oR1036%
8/18/2019 megis
25/37
25
Si"ler Si"le ?ueues
● Gtar#et;aressesH a GiterfaceH "araetersare Doie ito oe Gtar#etH "araeter
● Gst;aressH "araeter is cha#e to GstH a
ow ca be s"ecifie as iterface as well● irectio a "2" "araeters reove
● Gtar#etH ow ust be s"ecifie o si"le Cueue
creatio● Se"arate G"riorit)H "araeter for owloa,
u"loa a total
8/18/2019 megis
26/37
26
Si"le ?ueue terface v$
8/18/2019 megis
27/37
27
Si"le ?ueue terface v6
8/18/2019 megis
28/37
28
ha#es i the -irewall
● -irewall ow have Gall;etherH,Hall;wirelessH,Hall;vlaH,Hall;"""H as "ossibilities i iterfaceatchi#
●
&ew "riorit) atcher ● &ew Gcha#e;sc"H o"tios Gfro;"riorit)H a
Gfro "riorit);to;hi#h;3;bitsH
●
&ew Ma#le
8/18/2019 megis
29/37
29
ha#es i 8uels
● SS8' ca ow force
8/18/2019 megis
30/37
30
ha#es i =>'
● hc";o"tios ow ca be s"ecifie b) ixi#ifferet ata t)"es
● hc";cliet have custo hc";o"tio feature
(exa"les at/ i" hc";cliet o"tio "rit%● =>'v cliet ow have s"ecial;classless
o"tio for a;efault;route "araeter
●
'ossibilit) to a =>' rela) a#et iforatioo"tio (O"tio :2%
● =>'v6 =&S o"tio su""ort
8/18/2019 megis
31/37
31
Other ha#es
● Slave fla# ow will show u" for iterfaces thatare i bri#e, boi# or switch #rou"
● Gex"ort co"act ow is as efault for Gex"ortH,
use ex"ort verbose to #et "revious behavior ● oecte routes becoe iactive whe
terface #oes ow.
●
ofi#urable *iux +erel o"tios i i" setti#sa i"v6 setti#s eus
● itial O"e-low su""ort
8/18/2019 megis
32/37
32
'Sec Roa @arrior
● Roa@arrior setu"s are ow su""orte
– Moe of su""ort
– "assive 'Sec "eer oe
– 7auth su""ort ( xauth 'S+ a >)bri RS
8/18/2019 megis
33/37
33
SF' 'rotocol Su""ort
● Si"le ertificate Frollet "rotocol (SF'%
● 8his "rotocol allows to/
– #et < certificate fro < server or R<
– create self;si#e certificate with te" e)
– se certificate reCuest to the server
– "rotect < o"eratios with < "ass"hrase
● More ifo at/htt"/wii.iroti.cowiiMaual/S)steertificatesPSF'
8/18/2019 megis
34/37
34
@ireless ste"%
● hoose chael with (2.$;30M>, 0.$M> ste"%
●
Su"er;chael licese is reCuire to use avacechaels K it is free of char#e (ol) si#e ocuetreCuire about "ro"er usa#e%
8/18/2019 megis
35/37
35
@ireless
8/18/2019 megis
36/37
36
● hael with ;30M>
● Fxtesio chael K
8/18/2019 megis
37/37
37
?uestios!!!