Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

FeatureSupportCommentsRelease
IPv4 Unicast RoutingHW
7.1
IPv6 Unicast RoutingCPU

IPv4 Multicast RoutingCPU

IPv6 Multicast RoutingCPU

ECMPHWMultipath routing7.1
BlackholesHW
/ip/route add dst-address=10.0.99.0/24 type=blackhole
7.1
Prohibited routesCPU
/ip/route add dst-address=10.0.99.0/24 type=prohibit 

The hardware is incapable of sending ICMP replies. Therefore the packets must go through the CPU.
Use blackhole to silently drop traffic on the hardware level.


Unreachable routesCPU /ip/route add dst-address=10.0.99.0/24 type=unreachable 
gateway=<interface_name>CPU/HW
/ip/route add dst-address=10.0.0.0/24 gateway=ether1 

This works only for directly connected networks. Since HW does not know how to send ARP requests,
CPU sends an ARP request and waits for a reply to find out a DST MAC address on the first received packet of the connection that matches a DST IP address.
After DST MAC is determined, HW entry is added and all further packets will be processed by the switch chip.

7.1
BRIDGEHWIP Routing from/to bridge interface7.1
VLANHWRouting between VLAN interfaces7.1
BondingHW
/interface/bonding
7.1
FirewallFWUsers must choose either HW-accelerated routing or firewall.
Firewall rules get processed by the CPU. Fasttrack connections get offloaded to HW.
7.1
NATFWNAT rules applied to the offloaded Fasttrack connections get processed by HW too.7.1
MLAGN/A

VRFN/A

VRRPN/A

VXLANN/A

MTUHWThe hardware supports up to 8 MTU profiles.7.1

...