v5rc7 released

Wed Dec 29, 2010 1:31 pm

What's new in 5.0rc7 (2010-Dec-29 10:39):

*) fixed hotspot;
*) tftp - fixed problem when nobody could
connect if no ip-address were provided;
*) winbox - fixed mac ping from neighbor list;
*) fixed simple queues on little endian cpus;
*) fixed simple queues without provided dst-address;
*) fixed problem - could not update license for
old style 7 digit software-id's;
*) fixed winbox - IPv6 route could not be added;
*) ssh - allow bigger packets (fixes some disconnecting problems);
*) added support for RDC R6040 Ethernet controller;

Note 1: This is a fix-only release, all that was reported in the v5rc6 topic has been addressed. User Manager has not been changed.
Note 2: PPP support for IPV6 will be re-added in rc8

hrvoje · Wed Dec 29, 2010 2:22 pm

mwheeler · Wed Dec 29, 2010 3:36 pm

You made a slight typo, you said:

Note 2: PPP support for IPV6 will be re-added in rc8

But what you should have said was:

Note 2: PPP support for IPV6 along with dhcp6c will be added in rc8

Wed Dec 29, 2010 3:43 pm

maybe, maybe not

honzam · Wed Dec 29, 2010 8:36 pm

Why is on the web old winbox 2.2.16? http://www.mikrotik.com/download/winbox.exe
Why isnt there a new one 2.2.18? Why is it necessary to download it from the router?
Thanks

fewi · Wed Dec 29, 2010 8:48 pm

Download it from the router.

roadracer96 · Thu Dec 30, 2010 1:43 am

Im not getting a IPv6 Stateless address on my Win7 computer or my ipad.. I did on rc6 and rc5.

wispwest · Thu Dec 30, 2010 6:05 am

Is there any plan on enabling short gaurd interval on NV2 to support higher data rates for us that use it for PtP applications? NV2 seems to allow higher data rates over long distances, I would love to see the full 150 and 300Mbps data rates!

Also, it would be nice to allow the SR71-15 full TX power.

Thu Dec 30, 2010 9:13 am

Im not getting a IPv6 Stateless address on my Win7 computer or my ipad.. I did on rc6 and rc5.

Try to disable and enable IPv6 protocol on that interface in Windows 7.

luhiwu · Thu Dec 30, 2010 1:23 pm

Note 1: This is a fix-only release, all that was reported in the v5rc6 topic has been addressed. User Manager has not been changed.

It seems that no one had noticed the ethernet problem because it was on another topic, so i´m posting the message in this topic to see if it can be solved in 5.0rc8 if it is a software problem.

Regards,
Marcelo

Thu Dec 30, 2010 1:28 pm

Note 1: This is a fix-only release, all that was reported in the v5rc6 topic has been addressed. User Manager has not been changed.
It seems that no one had noticed the ethernet problem because it was on another topic, so i´m posting the message in this topic to see if it can be solved in 5.0rc8 if it is a software problem.

Regards,
Marcelo

which one?

mangust · Thu Dec 30, 2010 1:37 pm

which one?

Think he is talking about next post:

http://forum.mikrotik.com/viewtopic.php?f=1&t=47794

NetworkPro · Thu Dec 30, 2010 4:18 pm

This looks like the eth port flapping issue I reported way back.

Relax because this is just log junk accumulated from unused ports (if same issue).

Otherwise all else works (or breaks) as expected/reported.

Take care and make sure to find bugs in the more important features.
Share a success story from time to time too

roadracer96 · Thu Dec 30, 2010 4:45 pm

Im not getting a IPv6 Stateless address on my Win7 computer or my ipad.. I did on rc6 and rc5.
Try to disable and enable IPv6 protocol on that interface in Windows 7.

It is. In my office on 5.0rc6 it works. At home it worked on rc5 and 6. When I went to rc7 it stopped. On my iPhone, iPad, and on my win7 laptop. Didn't try in Linux on my laptop yet.

mrz · Thu Dec 30, 2010 8:53 pm

What is your configuration? Is it on bridge interface? What does radv logs say?

Trezona · Thu Dec 30, 2010 10:24 pm

Whats the "Safe Mode" thingy in winbox top left corner?

fewi · Thu Dec 30, 2010 11:18 pm

Whats the "Safe Mode" thingy in winbox top left corner? :)

http://wiki.mikrotik.com/wiki/Manual:Console#Safe_Mode

Now there's a GUI toggle rather than having to use the Terminal window in winbox.

roadracer96 · Fri Dec 31, 2010 12:00 am

What is your configuration? Is it on bridge interface? What does radv logs say?

Yes, bridge interface. Havent had a chance to look at the logs. Its almost NYE and I work in the hospitality industry = busy. ;D

mrz · Fri Dec 31, 2010 12:17 am

If you have a bridge then it is a known problem and may happen on some configurations. Disable/enable bridge interface and radv should start to work. Bugfix will be in RC8.

elnagar_ali · Fri Dec 31, 2010 6:47 pm

in rb 433ah after upgrade to rc 7 and firmware 2.29
ntp client notworking at startup

dormador · Fri Dec 31, 2010 6:58 pm

what about the usermanger ?
fix it or not !

NetworkPro · Fri Dec 31, 2010 7:21 pm

They stated they did not change the User Manager.

MT, if you plan to Not change it in the next release as well, please, at least revert to the last UM that is working (RC4).

elnagar_ali · Fri Dec 31, 2010 7:33 pm

in rb 433ah after upgrade to rc 7 and firmware 2.29
ntp client notworking at startup

its work now
but after 6 mint delay

FIPTech · Sat Jan 01, 2011 5:19 pm

NTP client can take as long as 15 minutes to get in sync with a NTP server. This is for full NTP mode.

If only using NTPdate client command, then getting time and date is immediate but there is no clock driftting analysis neither long term corrections.

Wich mode is using Router OS ?

tanjil · Sat Jan 01, 2011 9:57 pm

Dear suppport

i cant use user manager on rc7 ... can u pls guide me to setup these?
when i add login id=admin
it says contact support with supout file.. how to resolve?

Thanks

NetworkPro · Sat Jan 01, 2011 10:19 pm

Dear tanjil,

Use RC4 until a working UM is released.

Regards.

omidh · Sun Jan 02, 2011 7:39 pm

dear support
hi
i recently upgrade from 4.16 to 5.7rc on x86 intel Quadcore 2.8 with 2G RAM
but i 've faced with so much problem.
some of the vlan interfaces suddenly disappear most of the time and get back after a while.
how ever multicore is enable but one of the cpu usage is always 100% and never come down while other CPUs usage are about 6%.
now ping time to mikrotik is more than 1500ms and all pppoe users have problem surfing web.
i dont know what should i do. am i supposed to downgrade to 4.16?

luhiwu · Sun Jan 02, 2011 11:43 pm

Normis,

I was talking about this problem:
http://forum.mikrotik.com/viewtopic.php?f=1&t=47415
Switch is not related, no one of my 750 is running in any switchport configuration and flapping is still present.

Regards,
Marcelo

birendersinghbudhwar · Mon Jan 03, 2011 7:50 am

Hi I am experiencing a problem that after upgrading to RC7 the CCQ percentage is gone down and p throughput also gone down.

earlier the signal strength is -60 to -65 now also the same but CCQ & p throughput effected my is RB433AH.

Please comments on it if any one know how to get ride of this issue.

SNet · Mon Jan 03, 2011 3:14 pm

HI.
1. I am after upgrade from 5.0rc5 to 5.0rc7 my RB711 "test bridge":
- still don't work Hide SSID.
- stoped working Distance and CCQ but only in AP Bridge mode.
2. In 5.0rc5 sometimes when there was no traffic on wireless interfaces, wireless link was down (Ap bridge <-> Station WDS). Did you fix that problem ?

Regards,
SNet

Mon Jan 03, 2011 3:52 pm

HI.
1. I am after upgrade from 5.0rc5 to 5.0rc7 my RB711 "test bridge":
- still don't work Hide SSID.
- stoped working Distance and CCQ but only in AP Bridge mode.
2. In 5.0rc5 sometimes when there was no traffic on wireless interfaces, wireless link was down (Ap bridge <-> Station WDS). Did you fix that problem ?

Regards,
SNet

please contact support@mikrotik.com about this problem - also include the support output file when you see those problems with a detailed information on it.

WirelessRudy · Mon Jan 03, 2011 8:18 pm

Whats the "Safe Mode" thingy in winbox top left corner?
http://wiki.mikrotik.com/wiki/Manual:Console#Safe_Mode

Now there's a GUI toggle rather than having to use the Terminal window in winbox.

Hurray!! I asked for that months ago! I'm glad to see some winbox request made in the past are finally getting throug. Still a lot to go though.
And what a pitty I can't use ros5 family yet. I think it'll be another 6 months before a stable release is out...

Tue Jan 04, 2011 8:18 am

Hurray!! I asked for that months ago! I'm glad to see some winbox request made in the past are finally getting throug. Still a lot to go though.
And what a pitty I can't use ros5 family yet. I think it'll be another 6 months before a stable release is out...

Have you tried? Except that dynamic routing is still under construction - v5.x is much more usable than v4.x, at least in my experience.

It seems that no one had noticed the ethernet problem because it was on another topic, so i´m posting the message in this topic to see if it can be solved in 5.0rc8 if it is a software problem.
Regards,
Marcelo

Please, wait until MT confirms bugs before jumping to conclusions about bugs, and this is not a bug - this is typical situation when 2 devices can't get auto-negotiation right - it happens now and then with all kind of devices, you need to check your cable, put a switch in between these 2 devices or set the auto-negotiation mode manually. Sometimes this problem happens if your board is not grounded and Ethernet is partially blown. Only thing that is new software related is the log entries.

luhiwu · Tue Jan 04, 2011 3:18 pm

Please, wait until MT confirms bugs before jumping to conclusions about bugs, and this is not a bug - this is typical situation when 2 devices can't get auto-negotiation right - it happens now and then with all kind of devices, you need to check your cable, put a switch in between these 2 devices or set the auto-negotiation mode manually. Sometimes this problem happens if your board is not grounded and Ethernet is partially blown. Only thing that is new software related is the log entries.

macgaiver,
In one of the cases i´m seeing this problem, the 2 devices are RB750 with a cable of about 1 meter (already changed), both forced 100FD, one of the devices has the problem and not the other one, if it really is a negotiation problem i would expect to see the same message in both of them.
Hardware problem is possible, i just want confirmation about this being soft or hard problem. Anyways with 4.x releases it seems that device driver was not so sensitive, because it did not lose link so often (as reported by ospf errors). What really bothers me about this problem is ospf renegotiations every so often.

NetworkPro · Tue Jan 04, 2011 5:05 pm

You say you did not notice issue with 4.x - maybe because the port status was not reported the same way in those version.

What was the cable length then? Did you notice any packet loss under high load?

Please try with a longer cable, for example 5m.

Red0ktober · Tue Jan 04, 2011 8:27 pm

User Manager has not been changed.[/i]

I'm unable to log into the user manager in rc5 and rc6. I will try rc7 in a bit, but this doesn't give me hope.

Is the UM still going to be refined? I like a lot of what I see in v5, but it still needs some work. Doesn't seem like there have been any updates to it lately.

--edit--

I see there are other comments on the subject. Just know that more people are waiting! Thanks!

dawam · Tue Jan 04, 2011 9:54 pm

User Manager has not been changed.[/i]
I'm unable to log into the user manager in rc5 and rc6. I will try rc7 in a bit, but this doesn't give me hope.

Is the UM still going to be refined? I like a lot of what I see in v5, but it still needs some work. Doesn't seem like there have been any updates to it lately.

--edit--

I see there are other comments on the subject. Just know that more people are waiting! Thanks!

I have rc7 installed, I can login user manager fine

Red0ktober · Tue Jan 04, 2011 9:56 pm

Did you upgrade from previous RC or fresh install?

dawam · Tue Jan 04, 2011 10:09 pm

Did you upgrade from previous RC or fresh install?

It was from previous rc, cannot remember which one, probably rc4, that's the only one available in my laptop.

metlinux · Wed Jan 05, 2011 5:08 pm

looks like arp-ping doesn't works, both in winbox and terminal.

Freqman · Wed Jan 05, 2011 9:31 pm

Could some one confirm that RC7 NV2 does not work with station psuedobridge while bridging to a vlan? It looks like proxy ARP is not acting as it should. Also having no capability of creating virtuals on NV2 is a huge downfall for us. Bridge without using station-wds would be nice too. Any plans for these things MT Guys?

mangust · Wed Jan 05, 2011 11:33 pm

ppp-scaner ... Scan what for ???

blake · Thu Jan 06, 2011 1:38 am

ppp-scaner ... Scan what for ???

To find all of the Access Concentrators present on the broadcast domain.

Thu Jan 06, 2011 3:20 pm

metlinux,

Please, specify interface for Winbox/Console, then it should work.
v4.x and older versions reported,
interface is required for arp ping

while v5.x is not.

Red0ktober,
yes it is correct. We are aware of the issues, we are working on the fixes.
I do not have information about timeframe, when fix will be implemented.

rodneal · Sat Jan 08, 2011 8:25 pm

Hey All,
I was just on here the other day flaming MT for not providing WISP with the proper tools on the AP side to truely give highend quality service to our customers. I STILL have some issue with this BUT I have finally discovered a work-around for my latency issues!

I hope this will help other providers with the sane problem and for you who know this and didn't share it - SHAME ON YOU.

MT - there should be a place on this forum for quality work-arounds when your system does not provide complete support or at least a place for disclaimers!

To make my APs - globally and with high end loads 20-40 customers per XR2 card and 2 XR2 per RB433 - on the "Data Rates" Tab on the "Supported Rates B" I UNCHECKED the 1Mbps and 2Mbps boxes and left the other two checked. On the "Supported Rates A/G" I unchecked the 6Mbps and the 9Mbps boxes and left the others checked. On the "Basic Rates B" I ONLY checked the 5.5Mbps.
Once this happened - My AP latency IMMEDIATELY dropped from 1000ms+ latency under-load to 5-10ms latency.
This works on ALL versions of firmware and especially good on the newest RC version.
BTW - NV2 kicks ass! Not usable in all connections and still learning to do p-to-mp connections 'cause there are NO AVAILABLE EXAMPLE CONFIGS AND NOBODY and I mean NOBODY has responded to my requests for one! Including MT STAFF!

OK - I'm done being mad. Still all-in-all the MT system is the best!

BTW MT - had another board fail with that "you don't have a legit License issue" during and upgrade - sending you the supout now.

These forums have saved my ass many a time so I hope I can give back occasionally without being too much of a distraction.

Thank you All,
Rod

chadd · Sun Jan 09, 2011 12:14 am

Those settings wont work because you have no basic rate set for A/G.

Hey All,
I was just on here the other day flaming MT for not providing WISP with the proper tools on the AP side to truely give highend quality service to our customers. I STILL have some issue with this BUT I have finally discovered a work-around for my latency issues!

I hope this will help other providers with the sane problem and for you who know this and didn't share it - SHAME ON YOU.

MT - there should be a place on this forum for quality work-arounds when your system does not provide complete support or at least a place for disclaimers!

To make my APs - globally and with high end loads 20-40 customers per XR2 card and 2 XR2 per RB433 - on the "Data Rates" Tab on the "Supported Rates B" I UNCHECKED the 1Mbps and 2Mbps boxes and left the other two checked. On the "Supported Rates A/G" I unchecked the 6Mbps and the 9Mbps boxes and left the others checked. On the "Basic Rates B" I ONLY checked the 5.5Mbps.
Once this happened - My AP latency IMMEDIATELY dropped from 1000ms+ latency under-load to 5-10ms latency.
This works on ALL versions of firmware and especially good on the newest RC version.
BTW - NV2 kicks ass! Not usable in all connections and still learning to do p-to-mp connections 'cause there are NO AVAILABLE EXAMPLE CONFIGS AND NOBODY and I mean NOBODY has responded to my requests for one! Including MT STAFF!

OK - I'm done being mad. Still all-in-all the MT system is the best!

BTW MT - had another board fail with that "you don't have a legit License issue" during and upgrade - sending you the supout now.

These forums have saved my ass many a time so I hope I can give back occasionally without being too much of a distraction.

Thank you All,
Rod

Freqman · Sun Jan 09, 2011 3:08 pm

Could some one confirm that RC7 NV2 does not work with station psuedobridge while bridging to a vlan? It looks like proxy ARP is not acting as it should. Also having no capability of creating virtuals on NV2 is a huge downfall for us. Bridge without using station-wds would be nice too. Any plans for these things MT Guys?

Any one? We are needing more throughput for our AP's and NV2 looks to be the answer but I am receiving no support. I also have submitted a ticket 3 days ago with details.

rainmaker · Sun Jan 09, 2011 8:06 pm

l have Ap 433 And 5 client 433 all have 5.07rc
ap is Ap-bridge mode with nv2 and all the clients in station-wds with mode=any
the clients are able to reach the server but they can't ping any other thing on the network.
l can ping any device on the network but can not ping the mikrotiks with 5rc7 firmware.
but my laptop can ping them and any other thing on the network.
Any help.
Thanks

omega-00 · Mon Jan 10, 2011 2:00 am

Anyone else having problems with KVM in v5rc7?

Since the upgrade neither of the virtual machines I have on the test box will start up, both show status as "unsupported CPU" where they were working fine beforehand.

The CPU used is an Intel Xeon X3430.

Can anyone else confirm they're seeing similar issues with this?

janisk · Mon Jan 10, 2011 8:18 am

there is problem with KVM - if you change your settings and boot up KVM guests (at least try) on CPU, that has virtualization either turned off or not supported, KVM control remember that and will not do the check again.

For this moment you will have to reinstall that router to make KVM work again.

Mon Jan 10, 2011 11:40 am

rodneal,

BTW MT - had another board fail with that "you don't have a legit License issue" during and upgrade - sending you the supout now.

Yes, correct support output file to (support@mikrotik.com) is required to help you with the problem.

janisk · Mon Jan 10, 2011 1:00 pm

omega-00: a bit of update - we are looking into the problem. Problem about not rediscovering enabled capabilities was resolved in previous versions.

Xymox · Wed Jan 12, 2011 8:28 pm

The RB750 is reporting a 2416.9 Vdc in system health...

Ummm... this seems a bit high.

mangust · Thu Jan 13, 2011 12:11 am

1.
hmm... can't connect to demo2.mt.lv via winbox...
2.
http://forum.mikrotik.com/viewtopic.php ... =1#p243721
Is it ok (interface unknown)?

alexspils · Thu Jan 13, 2011 12:48 am

http://www.mikrotik.com/download/share/ ... 5_0rc8.npk

mschreiner · Thu Jan 13, 2011 5:07 pm

Hello,

I have rc7 installed on a RB433ah.
I am running an XR9 in NV2 with MiKrotik Clients.
23 clients on the tower.

The problem I am seeing is my active connections are dropping and they do not come back until I cycle the wireless card. As soon as I cycle it they come back for awhile and then it all happens again.

Is this a known issue that will be fixed so I do not have to run a recycle script once the connections drop?
This is affecting alot of my customers on this tower that try to game asnd it keeps booting them out.

I did downgrade this morning to 4.13 until this issue is fixed.

Has anyone else had this problem with rc7 or 5.0 period?

I just wanted to make you are aware that this problem still exists in rc7.

Thanks,
Mike

NetworkPro · Thu Jan 13, 2011 5:59 pm

mschreiner

Could this problem be power related?

Are you able to feed the card with additional power by possibly soldering fat wires?

And upgrading the power supply.. ?

Just a hunch.

mschreiner · Thu Jan 13, 2011 7:04 pm

mschreiner

Could this problem be power related?

Are you able to feed the card with additional power by possibly soldering fat wires?

And upgrading the power supply.. ?

Just a hunch.

I do not think it is power related.
We are running a 48v power supply too all of our towers.
The towers having issues are only 70, 90, 65 feet tall.

We have 2 other towers doing the same thing with less clients.
Also our competitor down the road has the same issues on their towers running rc7.
They are the ones that gave us the script to reset the wireless inteface once the clients drop.
I do not have this problem with OS v4.13

Thanks for the reply,
Mike

MlokeOne · Thu Jan 13, 2011 9:00 pm

The RB750 is reporting a 2416.9 Vdc in system health...

Ummm... this seems a bit high.

I must discharge the power related issue. My 750G dev at home at 18V standart adapter shows:
"voltage: 2416.9V". In other location is the same situation on second 750G with the originaly included power adaptor at 12V.

I thing about the algorithm of calculating the visible value?

shade · Fri Jan 14, 2011 8:13 pm

Im not getting a IPv6 Stateless address on my Win7 computer or my ipad.. I did on rc6 and rc5.
Try to disable and enable IPv6 protocol on that interface in Windows 7.
It is. In my office on 5.0rc6 it works. At home it worked on rc5 and 6. When I went to rc7 it stopped. On my iPhone, iPad, and on my win7 laptop. Didn't try in Linux on my laptop yet.

+1, I have this problem on RB750
I had similar problem before 5.0rc1 (including). When I added address it sends advertisment for first time. After few hours it stops.
I didn't tried some releases, but then I tried 5.0rc5 I noticed that problem was solved.
5.0rc5 works fine on RB750 and I use it at home and at work.

Changes in 5.0rc6 are great!, but I cannot manage IPv6 routes in winbox. radvd seems doesn't work too.

In 5.0rc7 managment of IPv6 routes is fixed, but radvd doesn't work at all. I tested this with Linux (openSUSE 11.3), I watched radvdump and with wireshark, mikrotik doesn't send any router advertisments. But it is working with 5.0rc5 with exact same config.

http://www.mikrotik.com/download/share/ ... 5_0rc8.npk

Yes, this works first time, I need few days to confirm that this works stable and doesn't stop sending of RA after some time like it was before 5.0rc5.

This is not official release ?

dschulz · Fri Jan 14, 2011 8:57 pm

Hi all,

Recently updated to v5rc7 (from 4.16). All went fine.
I tried the firmware upgrade procedure described in the wiki.
The problem is that, after reboot, the firmware remains in the old 2.27 version.

system routerboard print 
       routerboard: yes
             model: "750G"
     serial-number: "268E01AC9BD4"
  current-firmware: "2.27"
  upgrade-firmware: "2.29"

system routerboard upgrade
Do you really want to upgrade firmware? [y/n] 
y
firmware upgraded successfully, please reboot for changes to take effect!

Is this a known problem?

Also, system health is reporting a weird voltage value:

/system health> print
  voltage: 2416.9V

Cheers,

diego

neandero · Sun Jan 16, 2011 10:13 am

the problem i see is when logged into the um web interface, any new updates after logging in won't show up unless i re-log in.
updates like new user sessions, a user just logged off, a user just logged in, and so on....

example:
user aaa logged in at 12:00
user bbb logged in at 12:15

I log into UM web interface at 12:20

user ccc logged in at 12:21

I won't see user ccc logged in and active unless i log off, and re-log in.

thanks,

Mon Jan 17, 2011 8:47 am

dschulz

Check /system routerboard settings, that there is no force-backup-router=yes enabled.

dschulz · Mon Jan 17, 2011 5:50 pm

Hi sergejs, thanks for your reply.

dschulz

Check /system routerboard settings, that there is no force-backup-router=yes enabled.

I checked and it seems to me that force-backup-router setting is not currently enabled.

[admin@MikroTik] > system routerboard settings 
[admin@MikroTik] /system routerboard settings> print
    boot-device: nand-if-fail-then-ethernet
  cpu-frequency: 100MHz
  boot-protocol: bootp
    silent-boot: no
[admin@MikroTik] /system routerboard settings>

I'll try again once a new version is released.

jandafields · Tue Jan 18, 2011 5:30 am

Hi all,

Recently updated to v5rc7 (from 4.16). All went fine.
I tried the firmware upgrade procedure described in the wiki.
The problem is that, after reboot, the firmware remains in the old 2.27 version.
Code: Select all
system routerboard print 
       routerboard: yes
             model: "750G"
     serial-number: "268E01AC9BD4"
  current-firmware: "2.27"
  upgrade-firmware: "2.29"
Code: Select all
system routerboard upgrade
Do you really want to upgrade firmware? [y/n] 
y
firmware upgraded successfully, please reboot for changes to take effect!
Is this a known problem?

Also, system health is reporting a weird voltage value:
Code: Select all
/system health> print
  voltage: 2416.9V
Cheers,

diego

Keep trying it... over and over and over. I upgraded the firmware and rebooted, upgraded and rebooted, etc... at least 7 or 8 times tonight and it finally stayed at 2.29!

roadracer96 · Wed Jan 19, 2011 1:07 am

FYI on 5.0rc8 posted above..

/ip ipsec proposal
set default auth-algorithms=sha1 disabled=no enc-algorithms=aes-256 lifetime=30m name=default pfs-group=modp1024
/ip ipsec peer
add address=1.2.3.4/32:500 auth-method=rsa-signature certificate=timhome1 dh-group=modp1024 disabled=no dpd-interval=disable-dpd dpd-maximum-failures=1 enc-algorithm=aes-256 exchange-mode=main generate-policy=no hash-algorithm=sha1 lifebytes=0 \
lifetime=1h my-id-user-fqdn="" nat-traversal=no proposal-check=obey remote-certificate=fw1 send-initial-contact=yes
/ip ipsec policy
add action=encrypt disabled=no dst-address=1.2.3.4/32:any ipsec-protocols=esp level=require priority=1 proposal=default protocol=ip-encap sa-dst-address=1.2.3.4 sa-src-address=5.6.7.8 src-address=5.6.7.8/32:any tunnel=no

Doesnt work on 5.0rc8. Did on every other version of 5.0... Both powerpc and mipsbe.

The policy always shows as invalid. Dunno why.

MlokeOne · Wed Jan 19, 2011 7:53 am

I'm sorry, if i've overlooked this before in changelog, but are there some changes in ip services? If I set the address to 0.0.0.0/0, like anytime before, the service become unaviable. Now it is necessary to let the address box free and everything is ok.

THX for clarify

alexspils · Wed Jan 19, 2011 8:42 pm

roadracer96, i noticed that npk files on link i posted above updates time to time...you can try to reload, install and compare build time.demo2 has 19/01/2011...

Thu Jan 20, 2011 4:12 pm

roadracer96,
thank you very much for the report.
The problem for /ip ipsec policy is fixed, the problem was for IPv4 addresses policies, the latest version fixes that.
5.0rc8 will contain ipv6 support for IPSec by the way.

Athan · Thu Jan 20, 2011 5:00 pm

5.0rc8 will contain ipv6 support for IPSec by the way.

Great news sergejs! That's what I was expecting for. Any ETA on rc8 release?

roadracer96 · Thu Jan 20, 2011 6:21 pm

roadracer96,
thank you very much for the report.
The problem for /ip ipsec policy is fixed, the problem was for IPv4 addresses policies, the latest version fixes that.
5.0rc8 will contain ipv6 support for IPSec by the way.

Sweeeeeet.....

mindragon · Thu Jan 20, 2011 7:39 pm

http://demo2.mt.lv/ has RC8

Can't wait!

Bishop · Fri Jan 21, 2011 1:33 pm

Hello, help me please.

I have a network with three uplinks
Mikrotik version 5rc7
Hardware x86 based

/routing filter
chain=prv-in-demos prefix=0.0.0.0/0 invert-match=no action=accept set-bgp-local-pref=100
chain=prv-in-sovam prefix=0.0.0.0/0 invert-match=no action=accept set-bgp-local-pref=50
chain=prv-in-relcome prefix=0.0.0.0/0 invert-match=no action=accept set-bgp-local-pref=300 bgp-weight=10

/routing bgp peer
add address-families=ip as-override=no default-originate=never disabled=no hold-time=3m in-filter=prv-in-demos instance=DEMOS multihop=yes name=DEMOS \
    nexthop-choice=default out-filter= passive=no remote-address=1.1.1.1 remote-as=1111 remove-private-as=no route-reflect=no tcp-md5-key="" \
    ttl=default use-bfd=no
add address-families=ip as-override=no default-originate=never disabled=no hold-time=3m in-filter=prv-in-sovam instance=SOVAM multihop=yes name=SOVAM\
    nexthop-choice=force-self out-filter= passive=no remote-address=2.2.2.2 remote-as=2222 remove-private-as=no route-reflect=no \
    tcp-md5-key="" ttl=default use-bfd=no
add address-families=ip as-override=no default-originate=never disabled=no hold-time=3m in-filter=prv-in-relcome instance=RELCOME multihop=yes name=RELCOME\
    nexthop-choice=\  force-self out-filter= passive=no remote-address=3.3.3.3 remote-as=3333 remove-private-as=no route-reflect=no tcp-md5-key="" ttl=default \
    use-bfd=no

but the outgoing traffic for some reason, believes the priority channel is DEMOS with "local-pref=100"
what am I doing wrong?

mrz · Fri Jan 21, 2011 2:47 pm

The problem is that you are using different instances for each BGP peer. There should be only one instance.

Fri Jan 21, 2011 4:17 pm

Athan, we are working on it!

Athan · Fri Jan 21, 2011 4:29 pm

Athan, we are working on it!

Great; Take your time!

Bishop · Fri Jan 21, 2011 4:50 pm

The problem is that you are using different instances for each BGP peer. There should be only one instance.

In my case, each upstream provider has its own instance.
when trying to replace Instance(RouterID) peer goes into state Idle with error log : OPEN error: authentication failure

Mon Jan 24, 2011 7:50 am

Hi all,

Recently updated to v5rc7 (from 4.16). All went fine.
I tried the firmware upgrade procedure described in the wiki.
The problem is that, after reboot, the firmware remains in the old 2.27 version.
Code: Select all
system routerboard print 
       routerboard: yes
             model: "750G"
     serial-number: "268E01AC9BD4"
  current-firmware: "2.27"
  upgrade-firmware: "2.29"
Code: Select all
system routerboard upgrade
Do you really want to upgrade firmware? [y/n] 
y
firmware upgraded successfully, please reboot for changes to take effect!
Is this a known problem?

Also, system health is reporting a weird voltage value:
Code: Select all
/system health> print
  voltage: 2416.9V
Cheers,

diego

Diego, please email support if you still have this problem

darifaj · Mon Jan 24, 2011 10:30 pm

I've noticed that while using the terminal inside the winbox session and pressing tab command for command completion the behaviour is strange e.g. /system ssh user[then pressing TAB to complete the word user=] I get 'user%'. Anyone noticed this ?

sw0rdf1sh · Tue Jan 25, 2011 1:53 pm

Is there any chance of adding in later versions:
1.graphing for hotspot users connected
2.the "total" values for the graphs (including tx/rx , users as above)?

karlos · Tue Jan 25, 2011 8:50 pm

http://demo2.mt.lv/ has RC8

Can't wait!

HAHA

http://demo2.mt.lv/cfg?page=registration_table

wlan2-ap2 00:0C:42:05:03:48 no -60 9.0Mbps copy to access list

Like on our MTics, we also have low modulation even on strong signal levels when without traffic

mangust · Tue Jan 25, 2011 11:05 pm

I've noticed that while using the terminal inside the winbox session and pressing tab command for command completion the behaviour is strange e.g. /system ssh user[then pressing TAB to complete the word user=] I get 'user%'. Anyone noticed this ?

[admin@demo2.mt.lv] > /system ssh some.internet.site.name user=root
while resolving ip6: could not get answer from dns server
[admin@demo2.mt.lv] >

[admin@demo2.mt.lv] > /system ssh some.internet.site.IP user=root

SSH error
not enough permissions (9)
[admin@demo2.mt.lv] >

Winbox (demo2.mt.lv):
Tools->Telnet->SSH
Put IP and username, click connect - ssh "window" just close.

Winbox (demo2.mt.lv):
PPP->Interface->PPP Scaner
"By default" shows interface "unknown"

mangust · Wed Jan 26, 2011 6:08 pm

Winbox (IP Filter, NAT or Mangle)
Looks like this problem only for read only access. So, don't knew this is bug or not (please confirm).

1. Choose any rule.
2. "Divide" a rule line by two parts (50/50%).
3. Now, If you dobleclick on lower "half" (under red line) then you get error.

tanjil · Wed Jan 26, 2011 7:08 pm

anybody can pls tell me .. why pppoe user authenticate failed log isnt showing in Red Colour .. even if anyone give wrong passwd or MAC mismatch is not... it is very difficult to findout from log..

Thanks

janisk · Thu Jan 27, 2011 8:45 am

my suggestion would be to create pppoe topic, so you can see these logs separately. Also, these login errors is not an indication that your router might be in danger and someone is trying to hack it, it is just some service where some user possibly mistyped the password or changed device they used to use to something newer.

Remote logging and parsing the logs remotely would be most helpful in this situation.

_Sheriff_ · Mon Jan 31, 2011 3:59 pm

[admin@MT_1] /tool user-manager customer> add login=admin password=123 permissions=owner 
error - contact MikroTik support and send a supout file (2)

[admin@MT_1] /tool user-manager> export 
# jan/31/2011 12:57:53 by RouterOS 5.0rc7
# software id = 0NS7-F481
#
#error exporting /tool user-manager customer
#error exporting /tool user-manager router
#error exporting /tool user-manager user

[admin@MT_1] /system package> pr   
Flags: X - disabled 
 #   NAME                                      VERSION                                      SCHEDULED              
 0   system                                    5.0rc7                                                              
 1   wireless                                  5.0rc7                                                              
 2   user-manager                              5.0rc7                                                              
 3   ups                                       5.0rc7                                                              
 4   synchronous                               5.0rc7                                                              
 5   security                                  5.0rc7                                                              
 6   routing                                   5.0rc7                                                              
 7   routerboard                               5.0rc7                                                              
 8   ppp                                       5.0rc7                                                              
 9   ntp                                       5.0rc7                                                              
10   multicast                                 5.0rc7                                                              
11   mpls                                      5.0rc7                                                              
12   lcd                                       5.0rc7                                                              
13   kvm                                       5.0rc7                                                              
14   isdn                                      5.0rc7                                                              
15   ipv6                                      5.0rc7                                                              
16   hotspot                                   5.0rc7                                                              
17   gps                                       5.0rc7                                                              
18   dhcp                                      5.0rc7                                                              
19   calea                                     5.0rc7                                                              
20   advanced-tools                            5.0rc7

Why is this so?

jtroybailey · Mon Jan 31, 2011 4:03 pm

its a largely discussed topic that userman in version 5 is broken. I believe they are working on it.

_Sheriff_ · Mon Jan 31, 2011 4:13 pm

hard, shifts to 4.16

honzam · Mon Jan 31, 2011 9:31 pm

Constant disconnecting the client (station) with version 5.0RC7. After downgrade to 4.16 is everything OK.
supout.rif sent to support

Tue Feb 01, 2011 10:52 am

honzam, try to enable the wireless-nv2 package and check if it happens with that package as well, and if yes, it would be great if you could provide remote access to this installation so we could solve that problem.

honzam · Tue Feb 01, 2011 1:00 pm

It is not possible to turn the AP NV2. Some clients are version 3.x

Tue Feb 01, 2011 1:46 pm

I ment to enable wireless-nv2 package and not the nv2 protocol.

legba · Tue Feb 01, 2011 10:31 pm

Hi,
we upgraded to 5rc7 on x86 but we noticed that interfaces disappear and appear .
We tried to downgrade to 4.16.
I downloaded all packages - put them to the mikrotik - run /system package downgrade - the box rebooted BUT no effect.
It is still 5rc7.

Please help - how to downgrade.

Wed Feb 02, 2011 4:50 pm

what do you see in the log file after reboot?

legba · Thu Feb 03, 2011 9:19 pm

Strange.
We replaced thet x86 box with some other.
When it was not connected to the production network ( it was not running 300 pppoe sessions ) the downrade was OK.

nickb · Wed Feb 09, 2011 7:23 pm

Hey All,
I was just on here the other day flaming MT for not providing WISP with the proper tools on the AP side to truely give highend quality service to our customers. I STILL have some issue with this BUT I have finally discovered a work-around for my latency issues!

I hope this will help other providers with the sane problem and for you who know this and didn't share it - SHAME ON YOU.

MT - there should be a place on this forum for quality work-arounds when your system does not provide complete support or at least a place for disclaimers!

To make my APs - globally and with high end loads 20-40 customers per XR2 card and 2 XR2 per RB433 - on the "Data Rates" Tab on the "Supported Rates B" I UNCHECKED the 1Mbps and 2Mbps boxes and left the other two checked. On the "Supported Rates A/G" I unchecked the 6Mbps and the 9Mbps boxes and left the others checked. On the "Basic Rates B" I ONLY checked the 5.5Mbps.
Once this happened - My AP latency IMMEDIATELY dropped from 1000ms+ latency under-load to 5-10ms latency.
This works on ALL versions of firmware and especially good on the newest RC version.
BTW - NV2 kicks ass! Not usable in all connections and still learning to do p-to-mp connections 'cause there are NO AVAILABLE EXAMPLE CONFIGS AND NOBODY and I mean NOBODY has responded to my requests for one! Including MT STAFF!

OK - I'm done being mad. Still all-in-all the MT system is the best!

BTW MT - had another board fail with that "you don't have a legit License issue" during and upgrade - sending you the supout now.

These forums have saved my ass many a time so I hope I can give back occasionally without being too much of a distraction.

Thank you All,
Rod

Wait, what? You're using 2.4GHz-B/G? That's a major problem right there, if you're allowing any B-mode clients to associate or if any bad signal clients are down shifting to B mode.

In my experience in production networks if the AP radio has to shift between B and G modes it causes HUGE latency spikes and BAD performance. In the lab it seems to work OK, but when you get 20+ stations and some of them are B only, it just wrecks the whole sector. Do yourself a favor and either lock it in B mode if you need to support B clients, or lock it in G mode if all your clients support G.

Who is online