Webinar Mikrotik: Ruteo en nodos telecomunicacionales

Introduction to Telecommunications Routing

Welcome and Overview

• Ronald Ponce introduces the webinar, thanking attendees for joining.

• Luis Aguilar is introduced as a trainer with over 15 years of experience in MikroTik.

• The focus of the presentation will be on routing in telecommunications, specifically for Internet Service Providers (ISPs).

Structure of an ISP Network

• Luis outlines three fundamental layers in an ISP's network design: Core, Distribution, and Access.

• The Core layer is described as the central part of the network containing critical equipment like routers and firewalls.

• The Core is located within the data center, which can vary in size from large facilities to small cabinets.

Understanding Network Layers

Distribution Layer

• The Distribution layer connects the Core to various nodes or points of presence (PoPs).

• Nodes are essential for expanding coverage and providing last-mile connections to customers.

Access Layer

• The Access layer is closest to customers and includes routers and switches that facilitate communication.

• Luis emphasizes the importance of training on fiber optics offered by Fornet.

Network Topology Examples

Typical ISP Network Diagram

• A typical diagram illustrates how different layers interconnect using high-capacity links known as Backhaul links.

Wireless vs. Fiber Networks

Understanding Hybrid Topology and ISP Routing

Overview of Hybrid Topology

• The discussion begins with a visual representation of hybrid topology, illustrating the integration of fiber links and wireless services while adhering to protocols and standards.

Role of ISPs in Network Connectivity

• Emphasis is placed on the importance of routing within an ISP's network, highlighting that even small ISPs require routers for internet access.

• Routers facilitate communication between different networks, essential for connecting internal LANs to external networks like the internet.

Routing Protocols and IP Addressing

• Various routing protocols are utilized based on network requirements; Microtik devices support most standard dynamic routing protocols.

• Each organization, akin to a small or medium ISP, requires IP addresses for internet connectivity. The concept of IP addressing is compared to area codes in geographical distribution.

Structure and Functionality of ISPs

• An ISP operates as part of the larger internet ecosystem, providing connectivity through autonomous systems (AS) and managing their own routing policies.

• Users connect to the internet via public IP addresses assigned by their respective ISPs; these addresses must be unique.

Public vs. Private IP Addresses

• A distinction is made between public (unique across the internet) and private IP addresses (which can be reused in different local networks).

• Organizations like LACNIC manage public IP address allocation in Latin America; ISPs often need to contract higher-tier providers for additional public addresses.

Challenges with IPv4 Addressing

• As IPv4 addresses become scarce, ISPs may face challenges acquiring sufficient public IP blocks due to exhaustion issues.

• The transition towards IPv6 addressing is ongoing but not yet fully realized across all aspects of the internet infrastructure.

Static vs. Dynamic Routing Considerations

Understanding Routing Protocols and MikroTik

The Importance of Software in Network Management

• The speaker compares using Excel for accounting to managing networks with static routes, emphasizing that while both are possible, utilizing dedicated software or dynamic routing protocols is significantly more efficient.

Dynamic vs. Static Routing

• Dynamic routing protocols are preferred over static routes for network management as they allow routers to share information automatically, enhancing communication between interconnected routers.

Types of Routing Protocols

• Two main types of dynamic routing protocols are discussed:

• IGP (Interior Gateway Protocol): Used within an organization.

• EGP (Exterior Gateway Protocol): Facilitates information exchange between different autonomous systems.

Overview of MikroTik

• MikroTik is introduced as a Latvian manufacturer specializing in networking equipment and software since 1996, initially starting as an ISP before developing their RouterOS software.

Features and Capabilities of MikroTik Equipment

• Key capabilities highlighted include:

• Static and dynamic routing support.

• NAT (Network Address Translation).

• DNS caching.

• Firewall functionalities.

• Quality of Service (QoS).

• VPN tunneling options.

Functionality of Routers

• Routers are likened to toll booths on highways, directing data packets to their destinations based on various factors such as latency, reliability, and bandwidth availability.

Understanding Connected Routes

• A router identifies connected routes through IP addresses assigned to its interfaces. This knowledge allows it to communicate with neighboring routers without additional configuration.

Configuring Static Routes and Dynamic Protocols

• When configuring routers for remote networks, administrators must set up either static routes or enable dynamic routing protocols. The recommendation leans towards using dynamic routing for efficiency.

Practical Examples in Networking Scenarios

• An example illustrates how two PCs connected to a router can communicate without extra configuration due to the automatic recognition of connected routes by the router's table.

Challenges in ISP Networks

Static and Dynamic Routing Explained

Understanding Static Routes

• Static routes are not optimal for larger networks; they are suitable only for very small, unchanging networks.

• To create a static route in MikroTik, access the routing menu and add the destination network along with the gateway IP of a neighboring router.

• By establishing simple static routes on each router, devices can communicate across different networks.

Limitations of Static Routing

• Manually configuring static routes across numerous routers is impractical and prone to errors, especially for ISPs managing multiple networks.

• Dynamic routing protocols allow interconnected routers to share information about the best paths for packet forwarding.

Introduction to Dynamic Routing Protocols

• Routers select preferred paths based on various factors such as speed and latency, similar to choosing between a highway and a dirt road.

• BGP (Border Gateway Protocol) is essential for internet functionality; it announces IP blocks that ISPs own to the global network.

BGP Configuration Insights

• For an ISP like "ISP Fornet," enabling BGP allows them to announce their allocated IP addresses effectively.

• MikroTik routers can support extensive routing tables if configured correctly.

OSPF: A Popular Dynamic Routing Protocol

• OSPF (Open Shortest Path First), while not the only dynamic protocol available, is widely used due to its open standard compatibility with various vendors.

• OSPF uses Dijkstra's algorithm to determine the shortest path based on link costs, prioritizing lower-cost routes.

Best Practices in Dynamic Routing Setup

• It’s recommended to create a loopback interface in MikroTik for stable routing processes; this interface remains active regardless of physical connections.

• Associating this loopback interface with OSPF ensures consistent operation even if other interfaces go down.

Cost Calculation in OSPF

• The cost metric in OSPF reflects the sum of outgoing interface costs along a route, allowing redundancy through multiple pathways.

Understanding CPF and NAT Configurations

Introduction to CPF Configuration

• The concept of cost balancing in routing is introduced, where the connection-based balancing (SMP) sends packets through multiple routes if they are deemed equal in cost.

• Initial steps for configuring Microtik devices include assigning IP addresses that do not belong to the same network segment, utilizing private IP addresses as defined by standard ranges found online.

Steps for Basic CPF Setup

• The process involves creating a bridge and defining an address for UPAC on each router, followed by announcing connected networks.

• A specific code snippet is provided for configuration, emphasizing the importance of modifying it appropriately to assign instances and declare routing segments.

• With these basic configurations, CPF can effectively communicate with neighboring routers without additional settings needed for performance or security enhancements.

Understanding Network Address Translation (NAT)

• An explanation of public versus private IP addresses highlights that public addresses cannot be duplicated while private ones can be reused within local networks.

• Private IP addresses cannot route over the internet due to global policies; thus, users must navigate using their provider's public IP address.

Types of NAT Configurations

• The discussion shifts to Network Address Translation (NAT), particularly source NAT (SSN), which changes the source address of outgoing packets from a private to a public IP.

• An example illustrates how SSN works: when a device with a private IP wants to access Netflix, its request is modified at the router before reaching external servers.

Implications of Using NAT

• The masquerade rule in NAT allows multiple internal devices to share one public IP address when accessing the internet.

• This method enables efficient use of IPv4 addresses but poses risks such as being flagged by firewalls due to numerous connections originating from a single public IP.

NAT Configuration and DNS Fundamentals

Understanding Source NAT

• Source NAT allows multiple private IP addresses to share a single public IP address, which is crucial due to the scarcity and cost of public IPs.

• To configure source NAT on a firewall, create a rule in the NAT section specifying the outgoing interface and select "masquerade" as the action.

Exploring Destination NAT

• Destination NAT changes the destination address and port of incoming packets, enabling remote access to internal servers (e.g., accessing an office server from outside).

• This involves setting up port forwarding rules that direct requests aimed at a public IP on specific ports to corresponding private IP addresses.

Configuring Port Forwarding

• In MikroTik, set up destination NAT by creating rules that specify the public IP and desired port range (typically above 50,000).

• The action for these rules should redirect traffic to the actual private device's IP and port.

Importance of DNS in Networking

• DNS (Domain Name System) translates human-readable domain names into machine-readable IP addresses, facilitating web navigation.

• When a user types a domain like example.com into their browser, it queries a DNS resolver for its corresponding IP address.

How DNS Resolution Works

• The process involves multiple steps: querying local or public DNS servers, reaching root servers, TLD servers, and finally authoritative name servers for resolution.

• Caching mechanisms in DNS help speed up subsequent requests by storing previously resolved names and addresses.

Utilizing Public DNS Resolvers

• Public recursive DNS resolvers like Google’s (8.8.8.8 or 8.8.4.4) can be used for efficient name resolution.

Role of MikroTik as a DNS Resolver

• MikroTik devices can function as DNS resolvers; enabling this feature requires adjusting settings under the menu "IP > DNS" to allow remote queries.

Understanding DNS Caching and Router Functionality

The Role of DNS Caching in Routers

• When enabling the DNS cache on a router, it acts as a local DNS resolver for users within the network. However, the router must have access to a higher-level DNS resolver to function effectively.

• Initially, when a user queries a domain like facebook.com, the router does not have this information stored; it must first consult an external DNS server to retrieve the IP address.

• Once the router receives the response from the external server, it caches this information for future requests, allowing quicker responses for subsequent users querying the same domain.

Query Process with Public DNS

• If configured to use Google's public DNS directly on a PC, when visiting netflix.com, the PC sends a query to Google's server asking for Netflix's IP address.

• This query may travel significant distances (e.g., from Latin America to Miami), where Google responds with Netflix's public IP address before relaying that back to the user's PC.

Local Router as DNS Resolver

• In contrast, if using a local router as the DNS resolver, when querying Netflix's IP address, that request is sent first to the router instead of directly to an external server.

• The router then forwards this request to an external public DNS (like Google), retrieves the necessary information, and stores it in its cache for future queries.

Benefits of Local Caching

• Utilizing local caching provides faster response times for repeated queries and allows ISPs or network administrators to track visited domains through cached records.

• This capability can be crucial during regulatory inspections where authorities may request logs of accessed IP addresses.

Router Types and Their Functions

Overview of MikroTik Routers

• MikroTik routers initially focused solely on routing but have since expanded their product line. They now offer various devices including radio link equipment and switches.

Series RB vs. CCR Routers

• The RB series represents mid-range routers suitable for lower traffic nodes while CCR (Cloud Core Router) series caters to high-performance needs in ISPs with two main sub-series: 1000 and 2000 series.

Recommendations for ISPs

• For ISPs anticipating growth, investing in CCR 2000 series routers is advisable due to their enhanced performance capabilities tailored for BGP routing and IPv6 support.

Transitioning Equipment Based on Demand

Router Recommendations and BGP Routing Strategies

Overview of Recommended Equipment

• The CCR 2216 is highlighted as the top recommended router for BGP routing, offering powerful performance suitable for global routing needs.

• The equipment comes with RouterOS version 7 pre-installed, enhancing its capabilities for ISPs with robust features.

• Differences between models like CCR 2216 and 2116 include interface types (fiber vs. UTP), impacting their application in core versus edge routing.

Network Configuration Insights

• For edge routers, public IP addressing and BGP routing are essential, while core routers manage private IP addressing and internal bandwidth allocation.

• A question arises about accessing a public IP at home; it’s crucial to confirm whether the ISP provides a public or private IP address.

Handling Blacklisted IP Addresses

• If an IP is blacklisted, the first step is to check which lists it appears on using tools like MX Toolbox.

• To delist an IP, one must acknowledge previous vulnerabilities and demonstrate corrective actions taken to prevent future occurrences.

Technical Discussions on Equipment Performance

• Users discuss specific models like CCR 2004 handling significant traffic without CPU spikes, showcasing their efficiency in real-world applications.

• Issues related to client connectivity may stem from DNS problems; further investigation into configurations is necessary for resolution.

Software Version Comparisons

• The primary difference between CPF version 6 and version 7 lies in syntax changes rather than functionality; version 7 offers a more logical structure in Winbox menus.

• Recommendations for bandwidth control depend on service plans; high-capacity fiber setups may require careful management to avoid CPU overload.

Future Developments

Webinar Overview and Key Insights

Introduction to Certification and Instructor

• Luis is introduced as the official instructor for the certification, with updates to be shared through Fornet's official channels.

• The presentation slides will be made available to all clients, ensuring access to important information.

Client Management and Traffic Considerations

• A question arises regarding how many clients can be managed with a 30 11 setup; the answer depends on traffic levels and speed plans offered.

• It is noted that a 30 11 configuration is not suitable for traffic exceeding 400 Mbps; higher capacity equipment (e.g., series 2000 or 2004) may be necessary for efficient management of larger client bases.

Community Engagement and Support

• Participants are encouraged to engage in discussions, with one attendee contributing additional insights during Q&A.

• Fornet’s social media channels are highlighted as resources for ongoing communication and support.

Closing Remarks

• Appreciation is expressed towards Luis for his contributions, emphasizing the importance of knowledge sharing among business partners regarding Microti products.