<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    Estimados<br>
    <br>
    Lo del Masquerade lo he probado.<br>
    Acorde Janis y Martin de Mikrotik, sacamos los Masquerade y
    reemplazamos por src-nat.<br>
    No funciona con el alto uso de CPU ante desconexiones.<br>
    <br>
    Pero es muy simple probar, seleccioná 20 conexiones ppp, dale al '-'
    y observá el CPU.<br>
    Usando src-nat hacé lo mismo.<br>
    Luego, deshabilitá el NAT y efectuá el mismo test. Quizá con 200
    para sacudirlo. ;)<br>
    Y contanos.<br>
    Si ves lo que dice Mario, del tool-profile, el Firewall te lleva
    puesto. Hasta que anulás todo lo de NAT.<br>
    <br>
    Andrés.-<br>
    <br>
    <div class="moz-cite-prefix">El 10/1/2018 a las 13:48, Andres
      Gregori - NetPro escribió:<br>
    </div>
    <blockquote type="cite"
      cite="mid:00f601d38a32$da0588b0$8e109a10$@netpro-ar.com">
      <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
      <meta name="Generator" content="Microsoft Word 14 (filtered
        medium)">
      <!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
      <style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
        {font-family:Tahoma;
        panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
        {font-family:Gadugi;
        panose-1:2 11 5 2 4 2 4 2 2 3;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0cm;
        margin-bottom:.0001pt;
        font-size:12.0pt;
        font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.m3096589095374337139apple-style-span
        {mso-style-name:m_3096589095374337139apple-style-span;}
span.EmailStyle18
        {mso-style-type:personal-reply;
        font-family:"Calibri","sans-serif";
        color:#1F497D;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";
        mso-fareast-language:EN-US;}
@page WordSection1
        {size:612.0pt 792.0pt;
        margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
      <div class="WordSection1">
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Excelente
            info Mario …!!!<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D">Andres<o:p></o:p></span></p>
        <p class="MsoNormal"><span
style="font-size:11.0pt;font-family:&quot;Calibri&quot;,&quot;sans-serif&quot;;color:#1F497D"><o:p> </o:p></span></p>
        <p class="MsoNormal"><b><span
style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"
              lang="EN-US">From:</span></b><span
style="font-size:10.0pt;font-family:&quot;Tahoma&quot;,&quot;sans-serif&quot;"
            lang="EN-US"> <a class="moz-txt-link-abbreviated" href="mailto:lista-bounces@arnog.com.ar">lista-bounces@arnog.com.ar</a>
            [<a class="moz-txt-link-freetext" href="mailto:lista-bounces@arnog.com.ar">mailto:lista-bounces@arnog.com.ar</a>] <b>On Behalf Of </b>Ing.
            Mario Clep<br>
            <b>Sent:</b> miércoles, 10 de enero de 2018 12:08 p. m.<br>
            <b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:lista@arnog.com.ar">lista@arnog.com.ar</a><br>
            <b>Subject:</b> Re: [Lista ArNOG] Saturacion de CPU en
            Mikrotik CCR<o:p></o:p></span></p>
        <p class="MsoNormal"><o:p> </o:p></p>
        <div>
          <p class="MsoNormal">Julio, <o:p></o:p></p>
          <div>
            <p class="MsoNormal"><o:p> </o:p></p>
          </div>
          <div>
            <p class="MsoNormal">Fijate dentro de "tool &gt; profile"
              cual es el servicio que se queda al 100%, para ver por
              donde viene la mano.<o:p></o:p></p>
          </div>
          <div>
            <p class="MsoNormal"><o:p> </o:p></p>
          </div>
          <div>
            <p class="MsoNormal">Janis Megis hizo hace tiempo una charla
              en el MUM de USA, donde la llama "<a
href="https://mum.mikrotik.com/presentations/EU17/presentation_4058_1490948376.pdf"
                moz-do-not-send="true">my holy war against masquerade</a>"
              donde habla sobre las implementaciones que no estan bien
              hechas o que se podrían implementar. Entre esas cosas
              habla sobre la diferencia entre una acción de Masquerade
              vs una de SRC-NAT, y básicamente habla de que cuando se
              desconectan sesiones PPPoE con entradas almacenadas en el
              connection-tracking bajo la acción MASQUERADE, el equipo
              repasa todo el listado de entradas y borra automáticamente
              todas las que estan asociadas a dicha sesión. Esto mismo
              no lo hace si en lugar de MASQUERADE le indicas SRC-NAT a
              las reglas (siempre que estés nateando, obvio).<o:p></o:p></p>
          </div>
          <div>
            <p class="MsoNormal"><o:p> </o:p></p>
          </div>
          <div>
            <p class="MsoNormal">Ojalá sirva el dato.<o:p></o:p></p>
          </div>
          <div>
            <p class="MsoNormal"><o:p> </o:p></p>
          </div>
          <div>
            <p class="MsoNormal">Saludos!<o:p></o:p></p>
          </div>
        </div>
        <div>
          <p class="MsoNormal"><img id="_x0000_i1025"
src="https://mailfoogae.appspot.com/t?sender=abWFyaW9jbGVwQG1heGlkLmNvbS5hcg%3D%3D&amp;type=zerocontent&amp;guid=9983ceca-639f-4941-88be-bfb020f0606d"
              moz-do-not-send="true" border="0"><span
style="font-size:7.5pt;font-family:&quot;Gadugi&quot;,&quot;sans-serif&quot;;color:white">ᐧ</span><o:p></o:p></p>
        </div>
        <div>
          <p class="MsoNormal"><br clear="all">
            <o:p></o:p></p>
          <div>
            <div>
              <div>
                <div>
                  <div>
                    <div>
                      <div>
                        <div>
                          <div>
                            <div>
                              <div>
                                <div>
                                  <div>
                                    <div>
                                      <div>
                                        <div>
                                          <div>
                                            <div>
                                              <div>
                                                <div>
                                                  <div>
                                                    <div>
                                                      <div>
                                                        <p
                                                          class="MsoNormal">Saludos
                                                          y estamos en
                                                          contacto!<o:p></o:p></p>
                                                      </div>
                                                      <div>
                                                        <p
                                                          class="MsoNormal"><o:p> </o:p></p>
                                                      </div>
                                                      <div>
                                                        <table
                                                          class="MsoNormalTable"
style="width:352.5pt" cellspacing="0" cellpadding="0" width="470"
                                                          border="0">
                                                          <tbody>
                                                          <tr>
                                                          <td
                                                          style="width:7.5pt;padding:0cm
                                                          7.5pt 0cm
                                                          7.5pt"
                                                          valign="top"
                                                          width="10">
                                                          <p
                                                          class="MsoNormal"><span
style="font-size:9.5pt;color:black"><img id="_x0000_i1026"
src="https://s3.amazonaws.com/ucwebapp.wisestamp.com/8badd997-047c-4c94-91c3-79809719a3b2/LOGOMKE_trans.crop_1805x1691_838,370.preview.format_png.resize_200x.png"
                                                          alt="photo"
                                                          moz-do-not-send="true"
                                                          height="60"
                                                          width="65"
                                                          border="0"> <o:p></o:p></span></p>
                                                          </td>
                                                          <td
                                                          style="border:none;border-right:solid
                                                          #45668E
                                                          1.0pt;padding:0cm
                                                          0cm 0cm 0cm"
                                                          valign="top"><br>
                                                          </td>
                                                          <td
                                                          style="padding:0cm
                                                          7.5pt 0cm
                                                          7.5pt;font-stretch:normal"
                                                          valign="top">
                                                          <div>
                                                          <p
                                                          class="MsoNormal"><b><span
style="font-size:10.5pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#646464">Ing.
                                                          Mario Clep</span></b><span
style="font-size:10.5pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#646464"><br>
                                                          CTO, MKE
                                                          Solutions<o:p></o:p></span></p>
                                                          </div>
                                                          <div>
                                                          <p
                                                          class="MsoNormal"><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#8D8D8D"><a
href="tel:Tel:%20+54%20358%204210029" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#8D8D8D;text-decoration:none">Tel: +54 358 4210029</span></a> </span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#45668E">|</span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#8D8D8D"> <a
href="mailto:info@mkesolutions.net" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#8D8D8D;text-decoration:none">info@mkesolutions.net</span></a> </span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#45668E">|</span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#8D8D8D"> <a
href="http://www.mkesolutions.net/" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#8D8D8D;text-decoration:none">http://www.mkesolutions.net</span></a> </span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#45668E">|</span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#8D8D8D"> <a
href="http://www.academiadeentrenamientos.com/" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#8D8D8D;text-decoration:none">http://www.AcademiaDeEntrenamientos.com</span></a> </span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#45668E">|</span><span
style="font-size:10.0pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#8D8D8D"> Paraná
                                                          416, Río
                                                          Cuarto,
                                                          Córdoba,
                                                          Argentina<o:p></o:p></span></p>
                                                          </div>
                                                          <div
                                                          style="margin-top:3.75pt">
                                                          <p
                                                          class="MsoNormal"><span
style="font-size:10.5pt;font-family:&quot;Arial&quot;,&quot;sans-serif&quot;;color:#646464"><a
href="http://facebook.com/mkesolutions" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#1155CC;text-decoration:none"><img id="_x0000_i1027"
src="https://s3.amazonaws.com/images.wisestamp.com/icons_32/facebook.png"
moz-do-not-send="true" height="16" width="16" border="0"></span></a> <a
href="http://twitter.com/mkesolutions" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#1155CC;text-decoration:none"><img id="_x0000_i1028"
                                                          src="https://s3.amazonaws.com/images.wisestamp.com/icons_32/twitter.png"
moz-do-not-send="true" height="16" width="16" border="0"></span></a> <a
href="http://us.linkedin.com/in/mke-solutions" target="_blank"
                                                          moz-do-not-send="true"><span
style="color:#1155CC;text-decoration:none"><img id="_x0000_i1029"
src="https://s3.amazonaws.com/images.wisestamp.com/icons_32/linkedin.png"
moz-do-not-send="true" height="16" width="16" border="0"></span></a><o:p></o:p></span></p>
                                                          </div>
                                                          </td>
                                                          </tr>
                                                          </tbody>
                                                        </table>
                                                      </div>
                                                      <div>
                                                        <p
                                                          class="MsoNormal"><o:p> </o:p></p>
                                                      </div>
                                                      <div>
                                                        <p
                                                          class="MsoNormal">¿Interesado
                                                          en <b>Soporte
                                                          IT Mensual</b>?
                                                          <a
                                                          href="https://www.mkesolutions.net/soporte/"
target="_blank" moz-do-not-send="true">Conozca más sobre nuestro modelo
                                                          de
                                                          OutSourcing.</a><o:p></o:p></p>
                                                      </div>
                                                      <div>
                                                        <p
                                                          class="MsoNormal"><o:p> </o:p></p>
                                                      </div>
                                                    </div>
                                                  </div>
                                                </div>
                                              </div>
                                            </div>
                                          </div>
                                        </div>
                                      </div>
                                    </div>
                                  </div>
                                </div>
                              </div>
                            </div>
                          </div>
                        </div>
                      </div>
                    </div>
                  </div>
                </div>
              </div>
            </div>
          </div>
          <p class="MsoNormal"><o:p> </o:p></p>
          <div>
            <p class="MsoNormal">2018-01-10 10:55 GMT-03:00 Pablo Fritz
              &lt;<a href="mailto:pablo.fritz@nap.cabase.org.ar"
                target="_blank" moz-do-not-send="true">pablo.fritz@nap.cabase.org.ar</a>&gt;:<o:p></o:p></p>
            <div>
              <p class="MsoNormal">Hola,<o:p></o:p></p>
              <div>
                <p class="MsoNormal">Antes de buscar en problemas
                  mikrotik yo  revisaría la configuración.<o:p></o:p></p>
              </div>
              <div>
                <p class="MsoNormal">Se me ocurre lo siguiente: tenes
                  una ruta estática a null que engloba todos los ips que
                  usas (o como sea que hagas drop en mikrotik)? Si te
                  olvidas de eso, cuando un rango de ip desaparece, el
                  router no tiene una regla buena de a donde mandar el
                  tráfico de ese rango, y muchas veces se forma un loop
                  entre dos equipos que se pasan el tráfico ida y vuelta
                  hasta que expira, lo que puede darte en un enlace 100
                  veces la cantidad de tráfico que debería estar
                  descartándose.<o:p></o:p></p>
              </div>
              <div>
                <p class="MsoNormal" style="margin-bottom:12.0pt">Pablo<o:p></o:p></p>
                <div id="m_3096589095374337139AppleMailSignature">
                  <p class="MsoNormal">Sent from my <span
                      class="m3096589095374337139apple-style-span">Phone</span><o:p></o:p></p>
                </div>
                <div>
                  <div>
                    <div>
                      <p class="MsoNormal" style="margin-bottom:12.0pt"><br>
                        El 9 ene. 2018, a la(s) 15:03, &lt;<a
                          href="mailto:julio@sista.com.ar"
                          target="_blank" moz-do-not-send="true">julio@sista.com.ar</a>&gt;
                        &lt;<a href="mailto:julio@sista.com.ar"
                          target="_blank" moz-do-not-send="true">julio@sista.com.ar</a>&gt;
                        escribió:<o:p></o:p></p>
                    </div>
                    <blockquote
                      style="margin-top:5.0pt;margin-bottom:5.0pt">
                      <div>
                        <div>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hola
                            gente,  les hago una consulta..<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Estoy
                            teniendo un problema importante en mi
                            Mikrotik que se encarga de administrar
                            clientes pppoe<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Tenemos
                            varios nodos con Access Point, q dan
                            servicio inalámbrico a nuestros clientes y
                            lo que sucede es que cuando algún nodo se
                            cae ( por corte de luz, por ejemplo), el CPU
                            del Mikrotik se dispara, saturandose por
                            unos 2 minutos aproximadamente. En esos
                            momentos, el trafico general del mikrotik
                            disminuye, y a veces, también descarta otros
                            clientes pppoe, que no son del nodo caído.<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">El
                            MK es un CCR1036-12G-4S, y normalmente el
                            CPU no supera el 10 o 15% de consumo. Los
                            clientes totales son unos 1100. Y este
                            problema se hace mas significativo con nodos
                            grandes, de mas de 100 clientes.<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Esta
                            situación también sucede si, en lugar de
                            caerse el nodo, yo desactivo, en el mk,
                            servidor pppoe de esa interfaz.<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">No
                            se si a alguien mas le pasa o es algo que
                            tengo mal configurado..<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Desde
                            ya, se agradece cualquier ayuda..<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Saludos<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Julio<o:p></o:p></p>
                          <p class="MsoNormal"
                            style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
                        </div>
                      </div>
                    </blockquote>
                  </div>
                </div>
                <blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
                  <div>
                    <p class="MsoNormal">_______________________________________________<br>
                      Lista mailing list<br>
                      <a href="mailto:Lista@arnog.com.ar"
                        target="_blank" moz-do-not-send="true">Lista@arnog.com.ar</a><br>
                      <a
                        href="http://mailmancabaseinterdotnet.com.ar/mailman/listinfo/lista"
                        target="_blank" moz-do-not-send="true">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a><o:p></o:p></p>
                  </div>
                </blockquote>
              </div>
            </div>
            <p class="MsoNormal" style="margin-bottom:12.0pt"><br>
              _______________________________________________<br>
              Lista mailing list<br>
              <a href="mailto:Lista@arnog.com.ar" moz-do-not-send="true">Lista@arnog.com.ar</a><br>
              <a
                href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista"
                target="_blank" moz-do-not-send="true">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a><o:p></o:p></p>
          </div>
          <p class="MsoNormal"><o:p> </o:p></p>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Lista mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Lista@arnog.com.ar">Lista@arnog.com.ar</a>
<a class="moz-txt-link-freetext" href="http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista">http://mailmancabase.interdotnet.com.ar/mailman/listinfo/lista</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>