RouterOS v5.8 released

Wed Nov 02, 2011 12:30 pm

What's new in 5.8 (2011-Nov-01 10:14):

*) snmp - fixed problem where some rows were missed
in a few tables when walking them;
*) ipv6 - added support for router address assignment from ipv6 pools;
*) routerboard - fix RB400/RB700 bootloader upgrade problem
*) radius - respond to CoA & Disconnect requests with the same ip address
it was received to;
*) improved webfig look;
*) webfig - do not allow to show secret passwords if user does not have
sensitive permission;
*) webfig - allow to customize all item names in skins;
*) updated timezone information;
*) lcd - added support for new ax93304 model and nexcom LCDs;
*) ppp - added support for ipv6 pools;
*) ppp - added support for Framed-IPv6-Pool radius attribute;
*) dhcp client - fix high CPU usage when interface is disabled;
*) snmp - trap interface filter, multiple trap targets;
*) dhcp - added server support for IPv6 prefix delegation from /ipv6 pool,
client support is also added;
*) ipsec - support authorization with raw RSA keys;
*) added ipv6 prefix pools;
*) winbox - now copied item in ordered list is added right after it's original;
*) pcq - fixed possible crash;

http://www.mikrotik.com/download.html

sadeghrafie · Wed Nov 02, 2011 12:34 pm

What about User manager Report?
In V5.7 the report doesn't work fine when insert the date period!! just work without date entry!!!

Wed Nov 02, 2011 12:35 pm

there are no changes for user manager

pedja · Wed Nov 02, 2011 12:36 pm

*) winbox - now copied item in ordered list is added right after it's original;

This one was really annoying but could not date to ask. This is the best fix in this release!

sadeghrafie · Wed Nov 02, 2011 12:40 pm

there are no changes for user manager

Hmm.... So we have to wait for future release.

Wed Nov 02, 2011 12:45 pm

there are no changes for user manager
Hmm.... So we have to wait for future release.

Did you make a report to support? what is your ticket number?

honzam · Wed Nov 02, 2011 12:54 pm

Build time 1.November and Release date 2.November. Only 1day testing. I am going to test in our network

Wed Nov 02, 2011 1:04 pm

Build time 1.November and Release date 2.November. Only 1day testing. I am going to test in our network

Those dates doesn't indicate anything, maybe previous build was running for weeks, and this build just fix some typos. All i know that previous release was 16. Sep, so time between releases was longer than usual.

Wed Nov 02, 2011 1:05 pm

Yeah right. Testing began before v5.7 was released.

Bernardo · Wed Nov 02, 2011 1:07 pm

Hi Normis,

any news on those OSPF problems, using NBMA?

1. Database description packet has different master status flag:
http://forum.mikrotik.com/viewtopic.php?f=14&t=34170

this one just happend again this morning between a RB1100 on 5.5 and a RB450 on 5.6, and caused the momentary loss of all routes.
It's really annoying.
And no, it's not the link.

2. Router is sending hellos only to one neighbor:
http://forum.mikrotik.com/viewtopic.php?f=14&t=46410

TIA

saludos
Bernardo

Wed Nov 02, 2011 1:09 pm

Did you report any of this to support? What are the ticket numbers? I will check status. If you didn't report, well, forum users here don't fix bugs.

doush · Wed Nov 02, 2011 1:24 pm

What about my bug report ?

Any fix for it ?

http://forum.mikrotik.com/viewtopic.php?f=2&t=54460

Bernardo · Wed Nov 02, 2011 1:33 pm

Did you report any of this to support? What are the ticket numbers? I will check status. If you didn't report, well, forum users here don't fix bugs.

No, I did not.
There are already lots of other postings with the same problem for quite some time now.
Even an answer from MRZ from a year ago:

http://forum.mikrotik.com/viewtopic.php?f=14&t=46410

should i report a ticket to support, or are you already working on fixing it?

We are already working on this problem

Please let me know if you'd like to get my sup files.

saludos
Bernardo

Jeeves · Wed Nov 02, 2011 1:34 pm

Great, thanks for DHCPv6. Any idea when Radius and DHCPv6 can work together?

Wed Nov 02, 2011 1:35 pm

What about my bug report ?

Any fix for it ?

http://forum.mikrotik.com/viewtopic.php?f=2&t=54460

yes, fixed

Wed Nov 02, 2011 1:41 pm

Did you report any of this to support? What are the ticket numbers? I will check status. If you didn't report, well, forum users here don't fix bugs.
No, I did not.
There are already lots of other postings with the same problem for quite some time now.
Even an answer from MRZ from a year ago:

http://forum.mikrotik.com/viewtopic.php?f=14&t=46410
should i report a ticket to support, or are you already working on fixing it?

We are already working on this problem
Please let me know if you'd like to get my sup files.

saludos
Bernardo

We are working on a OSPFv3 NBMA problem, but nothing on WDS. We need your reports, preferably now from v5.8

koob · Wed Nov 02, 2011 1:51 pm

Hello,
thanks for releasing new version. Are there any wireless/nv2 improvements ?

mwheeler · Wed Nov 02, 2011 1:57 pm

dhcpv6 client doesn't appear to work with pppoe-client interfaces, which is how my ISP (Internode) provides IPv6 addresses, and I'm not even sure if you guys support IPv6 on the PPPoE client yet.

http://ipv6.internode.on.net/access/adsl/

Having support for this would be epic.

Wed Nov 02, 2011 2:03 pm

Hello,
thanks for releasing new version. Are there any wireless/nv2 improvements ?

some small changes, nothing major, so no changelog

itatwork · Wed Nov 02, 2011 2:15 pm

dhcpv6 client doesn't appear to work with pppoe-client interfaces, which is how my ISP (Internode) provides IPv6 addresses, and I'm not even sure if you guys support IPv6 on the PPPoE client yet.

http://ipv6.internode.on.net/access/adsl/

Having support for this would be epic.

same here in NZ, was hanging out for it to work in 5.8 but doesn't look good

Bernardo · Wed Nov 02, 2011 2:19 pm

We are working on a OSPFv3 NBMA problem, but nothing on WDS. We need your reports, preferably now from v5.8

Nothing to do with WDS, just plain old OSPF NBMA with 2 neighbors on a single interface.

In my test setup hellos were not sent to one of the neighbors, i haven' t figured why yet, theoretically NBMA should work, because it's just a regular unicast traffic. If ping works then NBMA should also work.

I could be wrong, but I think a year ago there was no OSPFv3 in Routeros yet, so the posting mentioned above was, without a doubt, related to OSPF IPv4.

Anyway, time permitting, I'll update to 5.8 and send you the sup files.

saludos
Bernardo

mrz · Wed Nov 02, 2011 2:25 pm

That problem a year ago was fixed. It could be different problem with similar symptoms.

Bernardo · Wed Nov 02, 2011 2:49 pm

That problem a year ago was fixed. It could be different problem with similar symptoms.

Interesting, thanks for answering.
What was the version the fix went in?

TIA

saludos
Bernardo

mrz · Wed Nov 02, 2011 3:01 pm

It was a year ago I can't remember exact version number. If you still have similar problems with the latest version, write to support with attached supout files.

brainy · Wed Nov 02, 2011 3:09 pm

Does 5.8 contain the new routing package? We still have a Router that has crashing routing sometimes and only reboot resolves problem.

mrz · Wed Nov 02, 2011 3:13 pm

No, not yet. New routing is in development.

marko_bg · Wed Nov 02, 2011 3:19 pm

i was have kernel fauler , and router reboot, with v5.7 FW .36

i update to day to v5.8 and FW .37

i now i can not open router

router work, ther is traffic, becouse behaind this router i have more router ...

but i think this problema are RADIUS and CPU go to 100%

i have ping 200 to router

btw, RB493AH

This is production router, behind seven mountains and seven oceans

Chupaka · Wed Nov 02, 2011 3:23 pm

No, not yet. New routing is in development.

oh, is it the new routing mentioned in [Ticket#2011022366000587]?..

Wed Nov 02, 2011 3:23 pm

i was have kernel fauler , and router reboot, with v5.7 FW .36

i update to day to v5.8 and FW .37

i now i can not open router

router work, ther is traffic, becouse behaind this router i have more router ...

but i think this problema are RADIUS and CPU go to 100%

i have ping 200 to router

btw, RB493AH

This is production router, behind seven mountains and seven oceans

your post is very hard to understand. try to illustrate the problem with screenshot and supout.rif file, and send them to support

CCDKP · Wed Nov 02, 2011 3:34 pm

It looks like they fixed the bug in Winbox that prevented you from setting connection limits with UDP (added in 5.7). Awesome.

marko_bg · Wed Nov 02, 2011 3:36 pm

read mail,

i send yesterday, autosupout, and manual supout to support
still now answare ...

to day i see new v5.8 ... *) pcq - fixed possible crash;

i install v5.8 , and reboot, and RB work 10-20 minut ... then i do FW ugrade over winbox

and now i can not enter to router , and i have ping 200 whn ping router

till now when i see ping 200, and all parameter of signal are ok .. this meen CPU go 100% ... like to TCP speedtest on RB.

every how work with mikrotik over 2-3 years, must known this (PING) simptom

beocuse you do some RADIUS change (FIX) in v5.8 ... i suspect on this ... this make CPU go 100%

but i can not enter in RB , and be shure... and now we make another RB for produciot, and prepare to go on node , to change RB

btw, i cant make FW upgrade becouse this iz last RB493ah i have ... cant risk , becouse node not work ... next RB can have only tomorow.

Wed Nov 02, 2011 3:36 pm

read mail,

i send yesterday, autosupout, and manual supout to support
still now answare ...

to day i see new v5.8 ... *) pcq - fixed possible crash;

i install v5.8 , and reboot, and RB work 10-20 minut ... then i do FW ugrade over winbox

and now i can not enter to router , and i have ping 200 whn ping router

till now when i see ping 200, and all parameter of signal are ok .. this meen CPU go 100% ... like to TCP speedtest on RB.

every how work with mikrotik over 2-3 years, must known this (PING) simptom

beocuse you do some RADIUS change (FIX) in v5.8 ... i suspect on this ... this make CPU go 100%

but i can not enter in RB , and be shure... and now we make another RB for produciot, and prepare to go on node , to change RB

btw, i cant make FW upgrade becouse this iz last RB493ah i have ... cant risk , becouse node not work ... next RB can have only tomorow.

Please try to write in full sentences. Currently, your problem is not clear at all.

Wed Nov 02, 2011 3:38 pm

read mail,

your mail didn't contain any text. what should we read there?

jandafields · Wed Nov 02, 2011 3:48 pm

winbox - now copied item in ordered list is added right after it's original;

This is a GREAT feature!!!!!!!

Wed Nov 02, 2011 4:08 pm

thanks for releasing new version. Are there any wireless/nv2 improvements ?

MikroTik RouterOS version 5.9 will include very significant improvements for NV2 protocol!
Please write to support (support@mikrotik.com) to request prerelease packages for testing.

brainy · Wed Nov 02, 2011 4:18 pm

thanks for releasing new version. Are there any wireless/nv2 improvements ?
MikroTik RouterOS version 5.9 will include very significant improvements for NV2 protocol!
Please write to support (support@mikrotik.com) to request prerelease packages for testing.

Hopefully one of them is to get rid of the "control frame timeout" in clean areas

MichelePietravalle · Wed Nov 02, 2011 4:37 pm

Some updates for OSPF crashing (for example ticket [Ticket#2011090466000074] )?
Thanks,

Michele Pietravalle

Chupaka · Wed Nov 02, 2011 4:47 pm

*) updated timezone information;

could you please update it again? Europe/Minsk has outdated information

aries · Wed Nov 02, 2011 5:16 pm

What about ssh service crash?

hedele · Wed Nov 02, 2011 5:52 pm

Maybe there is also a problem involving 3G Modems in ROS 5.8 - a line of ZTE 3G cards do not work anymore in 5.8 (they used to work in 5.6 and 5.7).
So, if you're upgrading 3G-enabled units in the field, be careful - and please post your experiences here.

I have already opened a Ticket (2011110266000699) for this issue.

dbai · Wed Nov 02, 2011 5:55 pm

Any progress with well known ethernet port flapping or with unstable OSPFv3? BTW, the new "copy feature" is absolutely amazing, great idea!! Thanks!

yogii · Wed Nov 02, 2011 5:57 pm

awesome

.

next, i need IPv6 routing-mark feature.

thanks.

jandafields · Wed Nov 02, 2011 6:13 pm

Any progress with well known ethernet port flapping or with unstable OSPFv3? BTW, the new "copy feature" is absolutely amazing, great idea!! Thanks!

I don't think Mikrotik ever said anything publically about the ethernet flapping, and it is considered by some people to be caused by ESD damage.

marioclep · Wed Nov 02, 2011 7:11 pm

read mail,

i send yesterday, autosupout, and manual supout to support
still now answare ...

to day i see new v5.8 ... *) pcq - fixed possible crash;

i install v5.8 , and reboot, and RB work 10-20 minut ... then i do FW ugrade over winbox

and now i can not enter to router , and i have ping 200 whn ping router

till now when i see ping 200, and all parameter of signal are ok .. this meen CPU go 100% ... like to TCP speedtest on RB.

every how work with mikrotik over 2-3 years, must known this (PING) simptom

beocuse you do some RADIUS change (FIX) in v5.8 ... i suspect on this ... this make CPU go 100%

but i can not enter in RB , and be shure... and now we make another RB for produciot, and prepare to go on node , to change RB

btw, i cant make FW upgrade becouse this iz last RB493ah i have ... cant risk , becouse node not work ... next RB can have only tomorow.

What do you mean by "cannot enter to router"? You can't connect via winbox/ssh/telnet or you have wrong passwords for every user you had?

Regards

NetworkPro · Wed Nov 02, 2011 7:18 pm

Any progress with well known ethernet port flapping or with unstable OSPFv3? BTW, the new "copy feature" is absolutely amazing, great idea!! Thanks!
I don't think Mikrotik ever said anything publically about the ethernet flapping, and it is considered by some people to be caused by ESD damage.

On RB133 - fixed flapping by disabling Auto-Negotiation.

On RB450G - fixed similar issue by putting a switch between the devices but keep in mind that my other non-mikrotik device had BAD CAPS that I have not yet replaced.

thrower · Wed Nov 02, 2011 8:28 pm

thanks for releasing new version. Are there any wireless/nv2 improvements ?
MikroTik RouterOS version 5.9 will include very significant improvements for NV2 protocol!
Please write to support (support@mikrotik.com) to request prerelease packages for testing.

Maybe a little flash what are those improvements going to be?

cwade · Wed Nov 02, 2011 8:34 pm

So, what is the problem with downloads from the USA mirror site? I cannot download the all_packages zip archive for any of the RouterOS versions. However, I can download the equivalent file for the "legacy" 4.17 version. I can also download just the .npk and netinstall versions. Did the zip archives not get uploaded to the USA mirror?

docmarius · Wed Nov 02, 2011 9:01 pm

Ntp client provided by ntp package doesn't work in broadcast client mode.
SNTP Client provided by default setup works ok as broadcast client.

Could someone confirm this?

Beccara · Wed Nov 02, 2011 9:56 pm

dhcpv6 client doesn't appear to work with pppoe-client interfaces, which is how my ISP (Internode) provides IPv6 addresses, and I'm not even sure if you guys support IPv6 on the PPPoE client yet.

http://ipv6.internode.on.net/access/adsl/

Having support for this would be epic.
same here in NZ, was hanging out for it to work in 5.8 but doesn't look good

Same here, Again it's a case of MT releasing 1/2 a feature, It's of no use to most people until you support DHCPv6-PD over ppp

ropebih · Wed Nov 02, 2011 9:59 pm

Any chance that IGMP Proxy bug is silently resolved. Or when it ll be done?
http://forum.mikrotik.com/viewtopic.php?f=14&t=55404

WirelessRudy · Thu Nov 03, 2011 1:56 am

thanks for releasing new version. Are there any wireless/nv2 improvements ?
MikroTik RouterOS version 5.9 will include very significant improvements for NV2 protocol!
Please write to support (support@mikrotik.com) to request prerelease packages for testing.

Ok, this makes me really curious! What are these "significant improvements"? Does it ´harden´ the AP-Client network better against interference related disconnects? The wordings could make us think there was a lot wrong in the present NV2 to be improved?

Since NV2 is my focus to have it working 100% (now it is 98%) on my network in a spectrum filled with NV2 and Airmax and Canopy I really would like to know what these "significant improvements" mean. Don't tease us with the statement only, please bare us a glimpse on what is in the pipeline.

MT, can we than please also have a full improved manual on the use of the different wireless protocols and what the different log messages tell us for each protocol used and in which direction to look in the troubleshooting process depending on the log messages. It would make life a lot easier as all the different messages and their source and possible solution(s) could be summarized in one matrix.

WirelessRudy · Thu Nov 03, 2011 2:04 am

Any progress with well known ethernet port flapping or with unstable OSPFv3? BTW, the new "copy feature" is absolutely amazing, great idea!! Thanks!
I don't think Mikrotik ever said anything publically about the ethernet flapping, and it is considered by some people to be caused by ESD damage.

well, they said they can't reproduce it which then means it is non existing....

I still have the virtual port flap (connected clients don't notice anything at all, even during voip/skype calls the connection is not broken) as a real one on one of my central units. Sometimes it is away for days or even weeks and than suddenly it hits hard and port disconnects really and many times per hour.
One central has the problem at times. I fixed it by abandoning the POE port on the connected unit and uses a power take off to deliver the power to the jack and the data going to Ether2 port.
But just today after 2 weeks silence I had the port flap again 10 times during the daytime.......

All though I have the issue I still can't really put my finger on it what is exactly happening. So I am actually not even expecting MT to find a solution for it if they can't even re-produce the problem.....

I'll guess it will take some more time.....

nicuro · Thu Nov 03, 2011 2:28 am

dhcpv6 client doesn't appear to work with pppoe-client interfaces, which is how my ISP (Internode) provides IPv6 addresses, and I'm not even sure if you guys support IPv6 on the PPPoE client yet.

http://ipv6.internode.on.net/access/adsl/

Having support for this would be epic.
same here in NZ, was hanging out for it to work in 5.8 but doesn't look good
Same here, Again it's a case of MT releasing 1/2 a feature, It's of no use to most people until you support DHCPv6-PD over ppp

Same here in Romania. I'm using rcs-rds (Digi) http://www.rcs-rds.ro/internet-digi-net/testeaza-ipv6

rajo · Thu Nov 03, 2011 5:30 am

Version 5.8 breaks IPIP tunnels (on RouterBOARD 450).

We have IPIP tunnels to Cisco routers. With all versions prior to 5.8, it works. With 5.8 it breaks -- cannot establish IPIP tunnels. Had to downgrade to 5.7 to get IPIP working again.

NetworkPro · Thu Nov 03, 2011 5:58 am

At the time you noticed something wrong, did you export a supout right away to send to support ?

docmarius · Thu Nov 03, 2011 8:45 am

dhcpv6 client doesn't appear to work with pppoe-client interfaces, which is how my ISP (Internode) provides IPv6 addresses, and I'm not even sure if you guys support IPv6 on the PPPoE client yet.

As far as i have tested, it gets you a link-local address (with EUI-64 dynamic part) which is capable of carrying IPv6 traffic to my ISP. What is lacking is PD from PPPoE into an IPv6 address pool and assignment of these addresses to the local network via RA (or DHCPv6 server).
I made use of this with the following scenario: Incoming IPv6 via aiccu tunnel with PD, outgoing via PPPoE interface/link-local address to my provider, giving me some speed bust (just testing - no permanent setup - just for checking the current capabilities - so no BIIIG critics please

).

Thu Nov 03, 2011 9:14 am

About DHCPv6-PD, please test the current functionality. PPPoE support will be added next.

jaytcsd · Thu Nov 03, 2011 9:52 am

I can't ping my LAN IP after updating to 5.8.

** update ** I had accidentally dragged a filter rule out of place, it's working now.

NetworkPro · Thu Nov 03, 2011 10:24 am

Did you turn the board's power off mid-upgrade or something ?

janisk · Thu Nov 03, 2011 11:42 am

multicast received no fixes, so no changes there.

SSH server received a lot of minor fixes, so it would be advisable to update to 5.8 if you encountered on before. Also, if you still have problem in 5.8 create debug log from the router and from client you are connecting from, make supout.rif and send that to support. Also, good idea would be to check if your use is OK with default flags you are using to connect to SSH server.

NetworkPro · Thu Nov 03, 2011 11:46 am

How to make "debug log"? So far you've only asked for supouts. Or do you mean "debug log" on the non-mikrotik side?

elassal · Thu Nov 03, 2011 11:51 am

Salm alykom

i received (yesterday) RB-450G and i update from 5.5 to 5.8 (via winbox ) successfully and no problem with it .

the Trekkie thing ... when i upgrade the firmware from 2.29 to 2.37 (via winbox ) and rebooted it just took so long to reboot (for second i thought that i damage it or something ) but it appeared that i just have to wait some long pause to connect (via winbox)...!!

then i saw CPU loud 40-50% it was wared !!!

when i saw system resources i found that the CPU is only 100 MHz !!!!!!

i change it back to 680 MHz and problem solved !

PS : i kinda have 45-50 CPU temperature ... is it okay ??.... what CPU temperature i should afraid from ..?? i wish i run my CPU on 800 MHz .. any suggestions ..???

Thu Nov 03, 2011 11:55 am

50C is normal, more than 70C is probably start to worry. if you see CPU load, check "/tool profile" menu to see what is consuming it.

yes, there was a bug with 100MHz CPU in previous version of firmware, new one fixes it, you should not see it anymore.

WirelessRudy · Thu Nov 03, 2011 12:27 pm

networkpro: What happened with your post re the new port flap issue? Did you remove it? Why? Or did MT? Why?

wpeople · Thu Nov 03, 2011 12:40 pm

WebFig login still not doing Radius request, so only 'hardwired' users can login via webfig.

NetworkPro · Thu Nov 03, 2011 12:41 pm

Relax I (asked for it to be) removed it, it was not clear what the cause is. It may be cheap defective plugs + wind + other things.

hedele · Thu Nov 03, 2011 12:50 pm

Argh still no IPv6 routing marks

Pleeeeease, add IPv6 routing marks in 5.9!

janisk · Thu Nov 03, 2011 12:52 pm

How to make "debug log"? So far you've only asked for supouts. Or do you mean "debug log" on the non-mikrotik side?

set up logging of SSH server on the router:
http://wiki.mikrotik.com/wiki/Manual:Sy ... figuration

depending on your client consult manual of it on how to acquire debug information eg.openssl client has -vvvv flag

meaning very very very verbose

in case of ssh i will ask for that anyway to see maybe wrong flags are used on the client to create session and that was result of failure. Like default action is to create one session and execute one command there, if two commands are sent in, second wil fail, since session was removed on return and no more input from client expected.

bazzer · Thu Nov 03, 2011 1:33 pm

Argh still no IPv6 routing marks Pleeeeease, add IPv6 routing marks in 5.9!

I will add to the pleading.. Requests for this option seem to fall on deaf ears. Please please move it up the todo list

Thu Nov 03, 2011 1:42 pm

Argh still no IPv6 routing marks Pleeeeease, add IPv6 routing marks in 5.9!
I will add to the pleading.. Requests for this option seem to fall on deaf ears. Please please move it up the todo list

not for v5.9, but maybe in next version. serious changes in routing needed.

pavelh · Thu Nov 03, 2011 1:51 pm

RB-450G, after upgrade from 5.6 to 5.8 on all metarouters (4 metarouters running RouterOS):

execve: No such file or directory
Kernel panic - not syncing: Attempted to kill init!

The same happens even on freshly created new metarouter (fifth).

What is it?

NetworkPro · Thu Nov 03, 2011 1:59 pm

What are you using those metarouters for by the way?

mcwill · Thu Nov 03, 2011 2:03 pm

Argh still no IPv6 routing marks Pleeeeease, add IPv6 routing marks in 5.9!
I will add to the pleading.. Requests for this option seem to fall on deaf ears. Please please move it up the todo list
not for v5.9, but maybe in next version. serious changes in routing needed.

The lack of ipv6 routing control is the biggest shortcoming in the routerboard product line IMHO, so we would welcome movement on this.

Thanks.

Thu Nov 03, 2011 2:04 pm

the routing subsystem is undergoing complete overhaul, so this will come when that is finished.

Chupaka · Thu Nov 03, 2011 2:30 pm

the routing subsystem is undergoing complete overhaul, so this will come when that is finished.

niiice... v5 or v6?

Thu Nov 03, 2011 2:31 pm

not sure yet

dbai · Thu Nov 03, 2011 4:14 pm

the routing subsystem is undergoing complete overhaul, so this will come when that is finished.

It will be including improved OSPFv3?

janisk · Thu Nov 03, 2011 4:20 pm

what you want to improve there? and short answer - yes

dbai · Thu Nov 03, 2011 4:41 pm

what you want to improve there? and short answer - yes

OSPFv2 is perfectly stable, but OSPFv3 unfortunately is not. See
http://forum.mikrotik.com/viewtopic.php ... 34#p285963

adryfia · Thu Nov 03, 2011 5:30 pm

Work fine at my RB750

oeyre · Fri Nov 04, 2011 12:56 am

Any fixes for OSPF routes recieved over PPPoE links?

#2011062966000309

vdeluca · Fri Nov 04, 2011 5:26 am

sup guys,

tried to use pools for ipv6 over PPPoE, but aren't working in my case

if I set the prefix directly on user secret, it works okay..

but if I set a pool on profile, and remove the prefix at user secret, the v6 CIDR aren't routed to ppp interface by mikrotik, as it should happens.

cste005 · Fri Nov 04, 2011 8:07 am

dhcpv6 client doesn't appear to work with pppoe-client interfaces, which is how my ISP (Internode) provides IPv6 addresses, and I'm not even sure if you guys support IPv6 on the PPPoE client yet.

http://ipv6.internode.on.net/access/adsl/

Having support for this would be epic.
same here in NZ, was hanging out for it to work in 5.8 but doesn't look good
Same here, Again it's a case of MT releasing 1/2 a feature, It's of no use to most people until you support DHCPv6-PD over ppp

I'll jump on the me too bandwagon, waiting for this as well, please Mikrotik, rescue me from Cisco

pavelh · Fri Nov 04, 2011 9:05 am

What are you using those metarouters for by the way?

I have small network with 2 RB750, 1 RB450g and 4 metarouters for testing purposes (some sort of playground

) and for teaching networking...

janisk · Fri Nov 04, 2011 9:12 am

how much ram you have, try to assing 24 or 32MB of ram

Fri Nov 04, 2011 9:14 am

how much ram you have, try to assing 24 or 32MB of ram

the RB750 only has 32MB of RAM

janisk · Fri Nov 04, 2011 9:22 am

... red that like RB450G.... well, out of RAM then.

RouterOS in metarouter requires same amount of ram as normal RouterOS on hardware. small amounts of RAM assigned can cause problems.

pavelh · Fri Nov 04, 2011 10:54 am

Every Metarouter has 32 MB RAM assigned. At the moment solved by downgrade to 5.6 (5.7 omitted due to DHCP and high CPU usage bug)... And of course all metarouters are run on RB-450g (256 MB RAM, at the moment 100 MB free)

mandrade · Fri Nov 04, 2011 12:43 pm

*) updated timezone information;
could you please update it again? Europe/Minsk has outdated information

America/Bahia is outdated too, from 2011 this timezone has DST too and is equal to America/Sao_Paulo

BR

janisk · Fri Nov 04, 2011 12:57 pm

WebFig login still not doing Radius request, so only 'hardwired' users can login via webfig.

yes, only users configured on router can log in using webfig. It is on the list, no ETA yet.

lcrhea25 · Fri Nov 04, 2011 3:39 pm

Normis I got the 5.8 prerelease from you around October 5th to help with some testing on NV2. Is there any changes with this 5.8 release? Should I upgrade to it or wait for 5.9? Maybe a 5.9 prerelease.

vdeluca · Fri Nov 04, 2011 6:46 pm

sup guys,

tried to use pools for ipv6 over PPPoE, but aren't working in my case

if I set the prefix directly on user secret, it works okay..

but if I set a pool on profile, and remove the prefix at user secret, the v6 CIDR aren't routed to ppp interface by mikrotik, as it should happens.

someone else tried v6 pools ?

Copper · Fri Nov 04, 2011 9:21 pm

*) pcq - fixed possible crash;

It seems that the error is still present.
We are witnessing the router crash on ROS 5.8 x86.
(router with 400 Mbit pcq traffic)

docmarius · Sat Nov 05, 2011 12:56 am

Now that DHCP has support for IPv6, IMHO in Winbox/Webfig it should come out from the IP menu and have its own top menu entry...

About IPv6 pools... Assigning interfaces addresses from address pool seems to work ok.

shap2001 · Sat Nov 05, 2011 8:08 am

Still problem in UserManager, as I said before after rebooting the MikroTik, for a while "Time Left" and "Total Time Left" shown correctly, after 5 mins this data starts to disappearing from USER page in UserManager, I'm wondering why Mikrotik doesn't solve this BIG problem from v4.17 to v5.8! I'm disappointed!

alialrawi · Sat Nov 05, 2011 10:26 am

hello
please tell me if this version have any problem with work ???
who is try it ?

thank you

NetworkPro · Sat Nov 05, 2011 10:38 am

"No problem with work"

"I try it".

jtroybailey · Sat Nov 05, 2011 10:41 am

@shap2001

there are no changes for user manager

3bs · Sat Nov 05, 2011 11:33 am

How about igmp snooping in future releases?

mihaimikrotik · Sat Nov 05, 2011 5:44 pm

*) snmp - fixed problem where some rows were missed
in a few tables when walking them;

This one is also not fixed yet. Simple queues do not show up correctly in snmp walk.

ilius168 · Sun Nov 06, 2011 1:29 am

*) snmp - fixed problem where some rows were missed
in a few tables when walking them;

This one is also not fixed yet. Simple queues do not show up correctly in snmp walk.

+1

*sigh* not upgrading our cores still using 4.17

winet · Sun Nov 06, 2011 8:06 am

I can't ping my LAN IP after updating to 5.8.

which version u upgraded from? because i think, i have the same problem on v5.7, i still don't upgrade to v5.8 since i see there's a lot of bugs posted here.

i have weird case related to ping of LAN IP.
here's what was my simple configuration:

 router] /interface vlan> pr de
 0 R  name="VLAN-01" mtu=1500 l2mtu=1516 mac-address=00:0C:42:AE:97:4B arp=enabled vlan-id=151 interface=ether3 
      use-service-tag=no

 router] /interface bridge> pr detail 
Flags: X - disabled, R - running 
 0  R name="bridge1" mtu=1500 l2mtu=1516 arp=enabled mac-address=00:0C:42:AE:97:4B protocol-mode=none priority=0x8000 auto-mac=yes 
      admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m 

 router] /interface bridge port> pr detail 
Flags: X - disabled, I - inactive, D - dynamic 
 0    interface=VLAN-01 bridge=bridge1 priority=0x80 path-cost=1 edge=auto point-to-point=auto external-fdb=auto horizon=none 

 1    interface=ether2 bridge=bridge1 priority=0x80 path-cost=1 edge=auto point-to-point=auto external-fdb=auto horizon=none 

 router] /ip address> pr
Flags: X - disabled, I - invalid, D - dynamic 
 #   ADDRESS            NETWORK         INTERFACE                                                                                       
 0   192.168.1.220/24  192.168.17.0    ether3                                                           
 1   [public IP] [public network] bridge1

ping to 192.168.1.220 gets disconnected and connected again every for few seconds. strangely, ping to [public IP] is stable. i triple-checked that there's no IP conflict at all on the local IPs.
subsequently, i change from ether3 into ether1. the problem is solved a little bit(i still get disconnection, but very rare(perhaps once a day, rather than few times in every minute). i hope this gets fixed.

EDIT: i've been dealing with this problem for about 2-3 months, i even replaced the RB750G with a new one, still gives the same result.

dbai · Sun Nov 06, 2011 10:38 am

Winet, IP address 192.168.1.220/24 doesn't have network 192.168.17.0. There is something wrong.

winet · Sun Nov 06, 2011 10:42 am

Winet, IP address 192.168.1.220/24 doesn't have network 192.168.17.0. There is something wrong.

sorry, i copy pasted it and changing everything, only showing examples without revealing the true IPs

it is 17.220

anyway, if i put the wrong network, it won't connect at all. but in this case, it is connected for a while, and disconnected later, then again, and again.

Smrk · Sun Nov 06, 2011 1:26 pm

There is some strange ipsec proposals settings behavior in 5.8.
For example:
1) proposal added using winbox or webfig with encr. algorithms=camellia-128 results in
1 name="test" auth-algorithms=sha1 enc-algorithms="" lifetime=30m pfs-group=none
2) proposal added using terminal with enc-algorithm=blowfish results in encr. algorithms=camellia-256 in winbox/webfig
It looks like all ciphers newly added to winbox/webfig in 5.8 (blowfish, camellia-128, camellia-192, camellia-256) are affected.
Tested on RB750 and RB750G.

tenenbaum · Sun Nov 06, 2011 10:22 pm

I upgraded our router from 5.7 to 5.8 and now I get page not found at /userman

Help.

littlebill · Mon Nov 07, 2011 3:07 am

also appears usermanger and debug logs for usermanager are broke for rb750.

i can't get it to login to the web interface even with a default config and no other settings

NetworkPro · Mon Nov 07, 2011 9:10 am

Missing User Manager Package ?

Mon Nov 07, 2011 9:26 am

Missing User Manager Package ?

It's not missing. It's in the ZIP file as always.

pakjebakmeel · Mon Nov 07, 2011 9:29 am

50C is normal, more than 70C is probably start to worry. if you see CPU load, check "/tool profile" menu to see what is consuming it.

yes, there was a bug with 100MHz CPU in previous version of firmware, new one fixes it, you should not see it anymore.

Had this too after the firmware upgrade.. I was running at 680Mhz and reverted to 100Mhz after the upgrade.. Explained why I couldn't get more then 10Mb/s through

Almost blaimed my ISP.

NetworkPro · Mon Nov 07, 2011 9:39 am

My question was to the previous poster who said his usermanager was not working. He might have forgotten to put in the package and upgraded only RouterOS.

TrollMan · Mon Nov 07, 2011 12:10 pm

The latest firmware for the RB800, is that 2.30? I get that both in 5.7 and 5.8, but I can see that there are newer firmwares released after that. When a firmware is released, is it generic or device specific?

coolex · Mon Nov 07, 2011 12:13 pm

Hi,
I don't know if I can report problem with MetaRouter in version 5.8 here.

But on boards with architecture mipsbe (i try it on RB750G and RB493G) MetaRouter doesn't boot.

It's writing this:

[Ctrl-A is the prefix key]
execve: No such file or directory
Kernel panic - not syncing: Attempted to kill init!

In version 5.6 it was working.
After downgrade to version 5.7 it's working again.

Any idea?

Thx, Kuba

jandafields · Mon Nov 07, 2011 4:52 pm

The latest firmware for the RB800, is that 2.30? I get that both in 5.7 and 5.8, but I can see that there are newer firmwares released after that. When a firmware is released, is it generic or device specific?

If it isn't in the routeros package, then it isn't available. You can also go to routerboard.com and download the latest firmware for your device manually.

arpadffy · Mon Nov 07, 2011 4:53 pm

Hello,

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer

 5  R  ;;; Hurricane Electric IPv6 Tunnel Broker
       name="sit1" type="sit" mtu=1280

[admin@MikroTik] /system package> print
Flags: X - disabled
 #   NAME                                              VERSION                                              SCHEDULED
 0   calea                                             5.8
 1   ntp                                               5.8
 2   system                                            5.8
 3   advanced-tools                                    5.8
 4   hotspot                                           5.8
 5   mpls                                              5.8
 6   multicast                                         5.8
 7   ipv6                                              5.8
 8   dhcp                                              5.8
 9   ups                                               5.8
10   gps                                               5.8
11   security                                          5.8
12   routing                                           5.8
13   routerboard                                       5.8
14   lcd                                               5.8
15   ppp                                               5.8
16   user-manager                                      5.8

Have anybody experienced such a behaviour?
Later tonight I will try to switch back to v5.6 that was previously working perfect.

Any help would be appreciated.

Thank you.

Regards,
Z

cbrown · Mon Nov 07, 2011 6:52 pm

Hi,
I don't know if I can report problem with MetaRouter in version 5.8 here.

But on boards with architecture mipsbe (i try it on RB750G and RB493G) MetaRouter doesn't boot.

It's writing this:

[Ctrl-A is the prefix key]
execve: No such file or directory
Kernel panic - not syncing: Attempted to kill init!

In version 5.6 it was working.
After downgrade to version 5.7 it's working again.

Any idea?

Thx, Kuba

We ran into the same issue. We also dropped back to 5.7

CristianDeluxe · Mon Nov 07, 2011 7:56 pm

Hello,

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer

I have 2 mikrotiks with hurricane 6to4 tunnel and v5.8 and are working correctly.

littlebill · Mon Nov 07, 2011 9:31 pm

Missing User Manager Package ?

i wish, web interface comes up. just can't log into it period, everything is invalid user name and pw

even from a default config start point

jandafields · Mon Nov 07, 2011 9:34 pm

Missing User Manager Package ?

i wish, web interface comes up. just can't log into it period, everything is invalid user name and pw

even from a default config start point

Did you specifically update user manager? When you go to system->packages, does it show usermanager specifically as 5.8?

makstex · Mon Nov 07, 2011 9:50 pm

This error has stretches with the third version!
With the loss of PPP (pptp, l2tp, openvpn) connections - does not delete the IP address automatically.
If it is static, more impossible to establish a connection!

nanito3k · Mon Nov 07, 2011 10:47 pm

thanks for releasing new version. Are there any wireless/nv2 improvements ?
MikroTik RouterOS version 5.9 will include very significant improvements for NV2 protocol!
Please write to support (support@mikrotik.com) to request prerelease packages for testing.
Ok, this makes me really curious! What are these "significant improvements"? Does it ´harden´ the AP-Client network better against interference related disconnects? The wordings could make us think there was a lot wrong in the present NV2 to be improved?

Since NV2 is my focus to have it working 100% (now it is 98%) on my network in a spectrum filled with NV2 and Airmax and Canopy I really would like to know what these "significant improvements" mean. Don't tease us with the statement only, please bare us a glimpse on what is in the pipeline.

MT, can we than please also have a full improved manual on the use of the different wireless protocols and what the different log messages tell us for each protocol used and in which direction to look in the troubleshooting process depending on the log messages. It would make life a lot easier as all the different messages and their source and possible solution(s) could be summarized in one matrix.

good topic, I'd like more information about wireless enhancements and NV2

littlebill · Mon Nov 07, 2011 10:54 pm

Missing User Manager Package ?

i wish, web interface comes up. just can't log into it period, everything is invalid user name and pw

even from a default config start point
Did you specifically update user manager? When you go to system->packages, does it show usermanager specifically as 5.8?

yes, downgrading back to 4.17 and issue is completely gone. im at a loss

this is real simple once you do a default config you should be able to log in with user admin and it just doesn't happen

non of the debug logs work either to show me what the problem is

arpadffy · Tue Nov 08, 2011 10:13 am

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer
I have 2 mikrotiks with hurricane 6to4 tunnel and v5.8 and are working correctly.

I went back to v5.6 and the same router with the same config started to work again.
Obviously, there is some problem with v5.8. The packages goes through the 6to4 interface but never reaches the uplink. v5.6 and earlier releases did not have this behaviour.

Is this issue interesting to anybody? Should I send some configurations, logs somewhere for further investigation... or should I wait in silence for v5.9 in hope that it will spontaneously fix this IPv6 issue.

netrat · Tue Nov 08, 2011 11:44 am

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer
I have 2 mikrotiks with hurricane 6to4 tunnel and v5.8 and are working correctly.
I went back to v5.6 and the same router with the same config started to work again.
Obviously, there is some problem with v5.8. The packages goes through the 6to4 interface but never reaches the uplink. v5.6 and earlier releases did not have this behaviour.

Is this issue interesting to anybody? Should I send some configurations, logs somewhere for further investigation... or should I wait in silence for v5.9 in hope that it will spontaneously fix this IPv6 issue.

I have a HE ipv6 tunnel and am having no problems.

jtroybailey · Tue Nov 08, 2011 11:49 am

I am terribly sorry, but seems after upgrade to v5.8 on a RB750 the 6to4 interface does not work any longer
I have 2 mikrotiks with hurricane 6to4 tunnel and v5.8 and are working correctly.
I went back to v5.6 and the same router with the same config started to work again.
Obviously, there is some problem with v5.8. The packages goes through the 6to4 interface but never reaches the uplink. v5.6 and earlier releases did not have this behaviour.

Is this issue interesting to anybody? Should I send some configurations, logs somewhere for further investigation... or should I wait in silence for v5.9 in hope that it will spontaneously fix this IPv6 issue.

I have 5 x 6to4 tunnels up, I suggest creating a new post with as much details as possible.

winet · Tue Nov 08, 2011 5:05 pm

bugger! i got another device (RB751U-2HnD) running on similiar bug, but this time with ether1 losing packets (when bridge and VLAN activated)

EDIT: ok, it is confirmed, that the packet loss happens when the bridge and VLAN interface activated. i replaced the VLAN interface with eoip, and this packet loss is not happening again.

EDIT: i downgraded to RB751U-2HnD v5.8 into v5.6 ROS, gonna give result here, if the problem is gone.
EDIT: and it's still there

EDIT: something odd. i disabled

/ip neighbor discovery

for the bridge interface, and so far still no packet loss (it's been about 30 minutes), usually it won't take more than 5 minutes.

digicomtech · Tue Nov 08, 2011 6:15 pm

Bug in nand space display after upgrade...

[admin@mplourde] > sys resource pr
                   uptime: 4h30m42s
                  version: 5.8
              free-memory: 11348KiB
             total-memory: 29708KiB
                      cpu: MIPS 24Kc V7.4
                cpu-count: 1
            cpu-frequency: 300MHz
                 cpu-load: 6%
           free-hdd-space: 17596KiB
          total-hdd-space: 126976KiB
  write-sect-since-reboot: 4552
         write-sect-total: 10188661
               bad-blocks: 0.1%
        architecture-name: mipsbe
               board-name: RB411
                 platform: digicom
admin@mplourde] > file pr        
 # NAME                                        TYPE                                                             SIZE CREATION-TIME       
 0 routeur.generic-NOIP-3.0.auto.rsc           script                                                         12 215 jan/01/1970 19:01:01
 1 routeur.generic-NOIP-3.0.auto.log           .log file                                                         134 jan/01/1970 19:01:04
 2 log.0.txt                                   .txt file                                                      67 164 nov/08/2011 11:05:44
 3 autosupout.old.rif                          .rif file                                                     333 734 nov/03/2011 04:03:56
 4 log.1.txt                                   .txt file                                                      69 101 oct/27/2011 18:20:13
 5 autosupout.rif                              .rif file                                                     377 470 nov/03/2011 04:42:48
 6 skins                                       directory                                                             aug/13/2011 03:30:55

littlebill · Wed Nov 09, 2011 3:37 am

well i found the problem, not sure how to fix it.

the default for the 750 config

is a 192.168.88.1 main address off the eth2 port
and a dhcp server with the same info

if i change that address to 10.0.1.1
with a dhcp server that serves the same info

that is when usermanager breaks.

any idea's

i will try to prove this in a vm as well

the following config below will break usermanager.

if anyone is running vmworkstation i can provid the actual vm if interested. is there something im setting wrong?

# nov/08/2011 20:21:43 by RouterOS 5.8
# software id = K2V1-K279
#
/interface ethernet
set 0 arp=enabled auto-negotiation=yes cable-settings=default \
    disable-running-check=yes disabled=no full-duplex=yes mac-address=\
    00:0C:29:83:8C:F0 mtu=1500 name=ether1 speed=100Mbps
set 1 arp=enabled auto-negotiation=yes cable-settings=default \
    disable-running-check=yes disabled=no full-duplex=yes mac-address=\
    00:0C:29:83:8C:FA mtu=1500 name=ether2 speed=100Mbps
/interface wireless security-profiles
set default authentication-types="" eap-methods=passthrough group-ciphers=\
    aes-ccm group-key-update=5m interim-update=0s management-protection=\
    disabled mode=none name=default radius-eap-accounting=no \
    radius-mac-accounting=no radius-mac-authentication=no radius-mac-caching=\
    disabled radius-mac-format=XX:XX:XX:XX:XX:XX radius-mac-mode=as-username \
    static-algo-0=none static-algo-1=none static-algo-2=none static-algo-3=\
    none static-sta-private-algo=none static-transmit-key=key-0 \
    supplicant-identity=MikroTik tls-certificate=none tls-mode=\
    no-certificates unicast-ciphers=aes-ccm
/ip hotspot profile
set default dns-name="" hotspot-address=0.0.0.0 html-directory=hotspot \
    http-cookie-lifetime=3d http-proxy=0.0.0.0:0 login-by=cookie,http-chap \
    name=default rate-limit="" smtp-server=0.0.0.0 split-user-domain=no \
    use-radius=no
/ip hotspot user profile
set default idle-timeout=none keepalive-timeout=2m name=default shared-users=\
    1 status-autorefresh=1m transparent-proxy=no
/ip ipsec proposal
set default auth-algorithms=sha1 disabled=no enc-algorithms=3des lifetime=30m \
    name=default pfs-group=modp1024
/ip pool
add name=pool1 ranges=10.1.1.10-10.1.1.254
/ip dhcp-server
add address-pool=pool1 address-pool6="" authoritative=after-2sec-delay \
    bootp-support=static disabled=no interface=ether1 lease-time=3d name=\
    server1
/port
set 0 baud-rate=9600 data-bits=8 flow-control=none name=serial0 parity=none \
    stop-bits=1
set 1 baud-rate=9600 data-bits=8 flow-control=none name=serial1 parity=none \
    stop-bits=1
/ppp profile
set default change-tcp-mss=yes name=default only-one=default \
    remote-ipv6-prefix-pool=none use-compression=default use-encryption=\
    default use-ipv6=yes use-mpls=default use-vj-compression=default
set default-encryption change-tcp-mss=yes name=default-encryption only-one=\
    default remote-ipv6-prefix-pool=none use-compression=default \
    use-encryption=yes use-ipv6=yes use-mpls=default use-vj-compression=\
    default
/queue type
set default kind=pfifo name=default pfifo-limit=50
set ethernet-default kind=pfifo name=ethernet-default pfifo-limit=50
set wireless-default kind=sfq name=wireless-default sfq-allot=1514 \
    sfq-perturb=5
set synchronous-default kind=red name=synchronous-default red-avg-packet=1000 \
    red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
set hotspot-default kind=sfq name=hotspot-default sfq-allot=1514 sfq-perturb=\
    5
set only-hardware-queue kind=none name=only-hardware-queue
set multi-queue-ethernet-default kind=mq-pfifo mq-pfifo-limit=50 name=\
    multi-queue-ethernet-default
set default-small kind=pfifo name=default-small pfifo-limit=10
/routing bgp instance
set default as=65530 client-to-client-reflection=yes disabled=no \
    ignore-as-path-len=no name=default out-filter="" redistribute-connected=\
    no redistribute-ospf=no redistribute-other-bgp=no redistribute-rip=no \
    redistribute-static=no router-id=0.0.0.0 routing-table=""
/routing ospf instance
set default disabled=no distribute-default=never in-filter=ospf-in \
    metric-bgp=auto metric-connected=20 metric-default=1 metric-other-ospf=\
    auto metric-rip=20 metric-static=20 name=default out-filter=ospf-out \
    redistribute-bgp=no redistribute-connected=no redistribute-other-ospf=no \
    redistribute-rip=no redistribute-static=no router-id=0.0.0.0
/routing ospf area
set backbone area-id=0.0.0.0 disabled=no instance=default name=backbone type=\
    default
/routing ospf-v3 instance
set default disabled=no distribute-default=never metric-bgp=auto \
    metric-connected=20 metric-default=1 metric-other-ospf=auto metric-rip=20 \
    metric-static=20 name=default redistribute-bgp=no redistribute-connected=\
    no redistribute-other-ospf=no redistribute-rip=no redistribute-static=no \
    router-id=0.0.0.0
/routing ospf-v3 area
set backbone area-id=0.0.0.0 disabled=no instance=default name=backbone type=\
    default
/snmp
set contact="" enabled=no engine-id="" location="" trap-version=1
/snmp community
set public address=0.0.0.0/0 authentication-protocol=MD5 encryption-protocol=\
    DES name=public read-access=yes security=none write-access=no
/system logging action
set memory memory-lines=100 memory-stop-on-full=no name=memory target=memory
set disk disk-file-count=2 disk-file-name=log disk-lines-per-file=100 \
    disk-stop-on-full=no name=disk target=disk
set echo name=echo remember=yes target=echo
set remote bsd-syslog=no name=remote remote=:: remote-port=514 src-address=\
    0.0.0.0 syslog-facility=daemon syslog-severity=auto target=remote
/user group
set read name=read policy="local,telnet,ssh,reboot,read,test,winbox,password,w
    eb,sniff,sensitive,api,!ftp,!write,!policy" skin=default
set write name=write policy="local,telnet,ssh,reboot,read,write,test,winbox,pa
    ssword,web,sniff,sensitive,api,!ftp,!policy" skin=default
set full name=full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,
    winbox,password,web,sniff,sensitive,api" skin=default
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=\
    no
/interface l2tp-server server
set authentication=pap,chap,mschap1,mschap2 default-profile=\
    default-encryption enabled=no max-mru=1460 max-mtu=1460 mrru=disabled
/interface ovpn-server server
set auth=sha1,md5 certificate=none cipher=blowfish128,aes128 default-profile=\
    default enabled=no keepalive-timeout=60 mac-address=FE:07:A6:6E:29:17 \
    max-mtu=1500 mode=ip netmask=24 port=1194 require-client-certificate=no
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=default-encryption \
    enabled=no keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled
/interface sstp-server server
set authentication=pap,chap,mschap1,mschap2 certificate=none default-profile=\
    default enabled=no keepalive-timeout=60 max-mru=1500 max-mtu=1500 mrru=\
    disabled port=443 verify-client-certificate=no
/interface wireless align
set active-mode=yes audio-max=-20 audio-min=-100 audio-monitor=\
    00:00:00:00:00:00 filter-mac=00:00:00:00:00:00 frame-size=300 \
    frames-per-second=25 receive-all=no ssid-all=no
/interface wireless sniffer
set channel-time=200ms file-limit=10 file-name="" memory-limit=10 \
    multiple-channels=no only-headers=no receive-errors=no streaming-enabled=\
    no streaming-max-rate=0 streaming-server=0.0.0.0
/interface wireless snooper
set channel-time=200ms multiple-channels=yes receive-errors=no
/ip accounting
set account-local-traffic=no enabled=no threshold=256
/ip accounting web-access
set accessible-via-web=no address=0.0.0.0/0
/ip address
add address=10.1.1.1/24 comment="default configuration" disabled=no \
    interface=ether1 network=10.1.1.0
/ip dhcp-server config
set store-leases-disk=5m
/ip dhcp-server network
add address=10.1.1.0/24 dns-server=10.1.1.1 gateway=10.1.1.1 netmask=24
/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB \
    max-udp-packet-size=512
/ip dns static
add address=192.168.88.1 disabled=no name=router ttl=1d
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
    tcp-close-wait-timeout=10s tcp-established-timeout=1d \
    tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
    tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
    tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061 sip-direct-media=yes
set pptp disabled=no
/ip hotspot service-port
set ftp disabled=no ports=21
/ip neighbor discovery
set ether1 disabled=no
set ether2 disabled=no
/ip proxy
set always-from-cache=no cache-administrator=webmaster cache-hit-dscp=4 \
    cache-on-disk=no enabled=no max-cache-size=none max-client-connections=\
    600 max-fresh-time=3d max-server-connections=600 parent-proxy=0.0.0.0 \
    parent-proxy-port=0 port=8080 serialize-connections=no src-address=\
    0.0.0.0
/ip service
set telnet disabled=no port=23
set ftp disabled=no port=21
set www disabled=no port=80
set ssh disabled=no port=22
set www-ssl certificate=none disabled=yes port=443
set api disabled=yes port=8728
set winbox disabled=no port=8291
/ip socks
set connection-idle-timeout=2m enabled=no max-connections=200 port=1080
/ip ssh
set forwarding-enabled=no
/ip traffic-flow
set active-flow-timeout=30m cache-entries=4k enabled=no \
    inactive-flow-timeout=15s interfaces=all
/ip upnp
set allow-disable-external-interface=yes enabled=no show-dummy-rule=yes
/ipv6 nd
add advertise-dns=no advertise-mac-address=yes disabled=no hop-limit=\
    unspecified interface=all managed-address-configuration=no mtu=\
    unspecified other-configuration=no ra-delay=3s ra-interval=3m20s-10m \
    ra-lifetime=30m reachable-time=unspecified retransmit-interval=\
    unspecified
/ipv6 nd prefix default
set autonomous=yes preferred-lifetime=1w valid-lifetime=4w2d
/mpls
set dynamic-label-range=16-1048575 propagate-ttl=yes
/mpls interface
add disabled=no interface=all mpls-mtu=1508
/mpls ldp
set distribute-for-default-route=no enabled=no hop-limit=255 loop-detect=no \
    lsr-id=0.0.0.0 path-vector-limit=255 transport-address=0.0.0.0 \
    use-explicit-null=no
/port firmware
set directory=firmware
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/queue interface
set ether1 queue=ethernet-default
set ether2 queue=ethernet-default
/radius incoming
set accept=no port=3799
/routing bfd interface
set all disabled=no interface=all interval=0.2sec min-rx=0.2sec multiplier=5
/routing igmp-proxy
set query-interval=2m5s query-response-interval=10s quick-leave=no
/routing mme
set bidirectional-timeout=2 gateway-class=none gateway-keepalive=1m \
    gateway-selection=no-gateway origination-interval=5s preferred-gateway=\
    0.0.0.0 timeout=1m ttl=50
/routing pim
set switch-to-spt=yes switch-to-spt-bytes=0 switch-to-spt-interval=1m40s
/routing rip
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \
    metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \
    redistribute-connected=no redistribute-ospf=no redistribute-static=no \
    routing-table=main timeout-timer=3m update-timer=30s
/routing ripng
set distribute-default=never garbage-timer=2m metric-bgp=1 metric-connected=1 \
    metric-default=1 metric-ospf=1 metric-static=1 redistribute-bgp=no \
    redistribute-connected=no redistribute-ospf=no redistribute-static=no \
    timeout-timer=3m update-timer=30s
/store
add disabled=no disk=primary-master name=user-manager1 type=user-manager
add disabled=no disk=primary-master name=web-proxy1 type=web-proxy
/system clock
set time-zone-name=manual
/system clock manual
set dst-delta=+00:00 dst-end="jan/01/1970 00:00:00" dst-start=\
    "jan/01/1970 00:00:00" time-zone=+00:00
/system console
add disabled=no port=serial0 term=vt102
set [ find vcno=1 ] disabled=no term=linux
set [ find vcno=2 ] disabled=no term=linux
set [ find vcno=3 ] disabled=no term=linux
set [ find vcno=4 ] disabled=no term=linux
set [ find vcno=5 ] disabled=no term=linux
set [ find vcno=6 ] disabled=no term=linux
set [ find vcno=7 ] disabled=no term=linux
set [ find vcno=8 ] disabled=no term=linux
/system console screen
set line-count=25
/system gps
set channel=0 enabled=no set-system-time=no
/system hardware
set multi-cpu=yes
/system health
set state-after-reboot=enabled
/system identity
set name=MikroTik
/system lcd
set contrast=0 enabled=no port=parallel type=24x4
/system lcd page
set time disabled=yes display-time=5s
set resources disabled=yes display-time=5s
set uptime disabled=yes display-time=5s
set packets disabled=yes display-time=5s
set bits disabled=yes display-time=5s
set version disabled=yes display-time=5s
set identity disabled=yes display-time=5s
set ether1 disabled=yes display-time=5s
set ether2 disabled=yes display-time=5s
/system logging
add action=memory disabled=no prefix="" topics=info
add action=memory disabled=no prefix="" topics=error
add action=memory disabled=no prefix="" topics=warning
add action=echo disabled=no prefix="" topics=critical
/system note
set note="" show-at-login=yes
/system ntp client
set enabled=no mode=unicast primary-ntp=0.0.0.0 secondary-ntp=0.0.0.0
/system ntp server
set broadcast=no enabled=no manycast=yes multicast=no
/system resource irq
set 0 cpu=auto
set 1 cpu=auto
set 2 cpu=auto
set 3 cpu=auto
set 4 cpu=auto
set 5 cpu=auto
set 6 cpu=auto
set 7 cpu=auto
set 8 cpu=auto
set 9 cpu=auto
/system routerboard bios
set
/system upgrade mirror
set check-interval=1d enabled=no primary-server=0.0.0.0 secondary-server=\
    0.0.0.0 user=""
/system watchdog
set auto-send-supout=no automatic-supout=yes no-ping-delay=5m watch-address=\
    none watchdog-timer=yes
/tool bandwidth-server
set allocate-udp-ports-from=2000 authenticate=yes enabled=yes max-sessions=\
    100
/tool e-mail
set address=0.0.0.0 from=<> password="" port=25 user=""
/tool graphing
set page-refresh=300 store-every=5min
/tool mac-server
set (unknown) disabled=no interface=all
/tool mac-server ping
set enabled=yes
/tool sms
set allowed-number="" channel=0 keep-max-sms=0 receive-enabled=no
/tool sniffer
set file-limit=1000KiB file-name="" filter-stream=yes interface=all \
    memory-limit=100KiB memory-scroll=yes only-headers=no streaming-enabled=\
    no streaming-server=0.0.0.0
/tool traffic-generator
set latency-distribution-scale=10 test-id=0
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin parent=admin \
    paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no \
    permissions=owner signup-allowed=no time-zone=-00:00
/user aaa
set accounting=yes default-group=read interim-update=0s use-radius=no

littlebill · Wed Nov 09, 2011 3:58 am

actually it appears just changing the main router ip, will cause it to break.

am i missing something?

Xymox · Wed Nov 09, 2011 6:47 am

Not specifically related to 5.8 but 5.8 does do it..

If you download Winbox from the Webfig screen using WIndows 8 in either IE or Firefox when you try and run it windows 8 stop you from running it and has no option to override and run anyway.

"Windows protected your PC" "Windows Smart Screen prevented a unrecognized program from starting ...."

If you download Winbox from the web site it works fine.. Its only if you download it from Webfig.

Also... I think isaw a NTP issue with 5.8 that I did not see with 5.7.. Im running NTP client/server. My computers were not able to obtain the time from the server while it appeared to be working from Webbox. I rebooted it and that seemed to fix the issue..

MRMISSY · Wed Nov 09, 2011 11:49 pm

Still problem in UserManager, as I said before after rebooting the MikroTik, for a while "Time Left" and "Total Time Left" shown correctly, after 5 mins this data starts to disappearing from USER page in UserManager, I'm wondering why Mikrotik doesn't solve this BIG problem from v4.17 to v5.8! I'm disappointed!

same here
I'm so disappointed too

winet · Thu Nov 10, 2011 2:18 am

same here
I'm so disappointed too

and support is getting slow on replying things here too, i wonder what makes them so busy and don't care to our posts anymore. usually it won't take more than a day to get a satisfying answer, but nowadays, u won't even get a single answer even for a week.

Thu Nov 10, 2011 8:30 am

same here
I'm so disappointed too
and support is getting slow on replying things here too, i wonder what makes them so busy and don't care to our posts anymore. usually it won't take more than a day to get a satisfying answer, but nowadays, u won't even get a single answer even for a week.

the user manager has not been updated for several months now. it has already been said that development is halted. so please don't be surprised, that we don't fix the user manager problems as fast as the other things in RouterOS.

honzam · Thu Nov 10, 2011 10:12 am

Can not see health (voltage) when rb800 is powered by 56V supply. And when the power source is 48V then SNMP displays bad value 57V.
ROS 5.8
Routerboot 2.30
ticket 2011082666000329

onowojemma · Thu Nov 10, 2011 11:06 pm

Hello My good people here i just got Rb1200 but find finding difficult to create time base ticket . unlike the v4 were i can create credit and add uptime.
I would like appreciate any help on how to go about it thanks.

Fri Nov 11, 2011 9:42 am

Hello My good people here i just got Rb1200 but find finding difficult to create time base ticket . unlike the v4 were i can create credit and add uptime.
I would like appreciate any help on how to go about it thanks.

please make a new forum topic in the appropriate section

NetworkPro · Fri Nov 11, 2011 3:52 pm

The sniffer filter just made my life a whole lot easier

High 5 !

BUT ! When opened with Wireshark - still no VLAN ID is decoded properly/probably not in the cap file ?

As well sniffer filer by VLAN would be great?

NetworkPro · Sat Nov 12, 2011 12:12 am

While I am clicking on the Copy button in Bridge filter for a New rule, WinBox just quits, disappears, so I have to relaunch. Latest WinBox.exe from 5.8

NetworkPro · Sat Nov 12, 2011 4:16 am

[minor annoyance] old routing marks stay in the lists after they are removed from everywhere in the configuration. Old connection marks disappear as soon as they are removed from all rules they were in. I would like for the routing marks to disapper just like the conenction marks do. Thanks.

docmarius · Sat Nov 12, 2011 3:37 pm

+1 on routing marks issue

mramos · Sat Nov 12, 2011 6:50 pm

Hi ...

I'm dealing with some daily reboots at two 433 (AH and UAH) and I've been upgrading them to the lastest version. Kernel failure, rebooted without proper shutdown (cause = 1).

Inspecting the supout.rif I noticed this content under routerboard fields:

routerboard: yes
model: 433AH
serial-number: 28030145C900
current-firmware: 2.37
upgrade-firmware: 2.37


BIOS
bad command name bios (line 3 column 18) <==== ???

SETTINGS
           baud-rate: 115200
           boot-delay: 5s
           enter-setup-on: any-key
           boot-device: nand-if-fail-then-ethernet
           cpu-frequency: 680MHz
           boot-protocol: bootp
           enable-jumper-reset: yes
           force-backup-booter: no
           silent-boot: no

What "bad command name bios (line 3 column 18)" means ??

This brand new 433AH came with already 1.5% badblocks. Today (48h in service) it's 2.3%.

A 433UAH was replaced by this 433AH. The UAH has 0.7% badblocks so via serial console I formatted nand + 5.8 netinstall a couple of times to get rid of such 0.7% (now is 0.0%).

Anyway, I'm inspecting config script to clean it up and after that will netinstall 5.8 back to 433AH.

Regards;

steen · Sun Nov 13, 2011 12:06 am

Hello Folks!

Suddenly after several months of operation we are facing a nasty situation.

Router after router is becoming unavailable or very slow.

When managing to login on a router high CPU on FLASH is detected.

A hard reboot is only way to solve problem.

This is scary, what happens here.

Can anyone explain, or is this a new bug discovered.

NetworkPro · Sun Nov 13, 2011 12:38 am

Steen please post a screenshot of the problem and/or answer:

- what router? What exact model of hardware?
- what version of software, date in /system packages

Thank you.

Zalex · Sun Nov 13, 2011 1:08 am

sorry for my English
...it seems bug in 5.8 in e-mail sending. Confuse with area "To" and "Subject". I try to send mail, but have a log error "Error sending <MT export> invalid TO adsress", but phrase "MT export" in my "subject" area. In 5.7 it works good.

FIPTech · Sun Nov 13, 2011 2:08 am

Mikrotik, why don't you write a test suite for Router OS ?

Most bugs inside 5.8 would have been catched by a test suite.

It is anormal to see that something really simple to test like Metarouter is not working at all inside a release version.

I did advice a test suite on Oct 07, 2010 and still no better testing.

Every serious programming project has a test suite. Why Router OS don't ? Please stop developping Router OS during 2 weeks and write a test suite.

It will be better for you and for your clients.

NetworkPro · Sun Nov 13, 2011 3:11 am

Removing a bridge that has a PPPoE Server on it causes interfase statistic to not be show in WinBox so a router restart was needed.

FIPTech · Sun Nov 13, 2011 3:42 am

IPv6 dynamic bindings cannot be removed

IPv6 ND do not work anymore if IPv6 interface address is changed. Needs rebooting.

Ipv6 address on PPPoE interface cannot be enabled. Needs reboot.

Disabling an IPv6 address on an interface do not fully disable it. -> IPv6 PD DHCP client does not work on this interface before rebooting.

aries · Mon Nov 14, 2011 7:36 pm

I agree with FIPTech.
Why Mikrotik calls 5.x version - stable? It is development version. Each version - new surprises!
It is becoming difficult to trust Mikrotik anymore.

It would be very nice to have not only - Change log, but also to have - known isues.

Thanks.

glucz · Mon Nov 14, 2011 11:56 pm

This error has stretches with the third version!
With the loss of PPP (pptp, l2tp, openvpn) connections - does not delete the IP address automatically.
If it is static, more impossible to establish a connection!

Don't feel bad about this. This problem has been in RouterOS since 3.x You can write a simple script to delete all IPs that are attached to invalid interfaces ... something like /ip address remove [/ip address find invalid] . Check your queues also. You may have some mopping up to do there as well. Schedule the script to run every minute.

mramos · Tue Nov 15, 2011 2:56 am

Hi ...

5.8 routerboard package have 2.37 firmware on it. At RB433AH & UAH there's V 2.38 fwf. Is there any changelog for fw versions?

And the default "ethernet-default" queue was replaced by "only-hardware-queue" - queue type = none - selected by default when netinstalled but not when upgrading from an earlier version. Benefits?

Regards;

wispwest · Tue Nov 15, 2011 4:40 am

Didn't have time to read through all the posts, but here are a few things. Sucks performance is decreasing with newer firmwares.

- With 5.8, P Throughput has dropped horribly. Though its just a mis-calculation. On all my PtP links, P Throughput is about 50-80% lower than it should be. Running a bandwidth test through the link proves this. Example, a P Throughput of 30,000kbps, will put 60-70,000kbps.

- NV2 performance. Lot's of links now stuck with low data rates, such as 130/18mb.

- NV2 signal strength is notably weaker than Nstreme. Why? Nstreme -67, NV2 goes to -74db. This may have happened in earlier FW release.

Has anyone else noticed these plus other "wireless" performance drops? I love Mikrotik and want to keep them for all my routing and PtP's, I just don't understand why things get worse with newer "improved" firmwares....

rpingar · Tue Nov 15, 2011 10:44 am

Didn't have time to read through all the posts, but here are a few things. Sucks performance is decreasing with newer firmwares.

- With 5.8, P Throughput has dropped horribly. Though its just a mis-calculation. On all my PtP links, P Throughput is about 50-80% lower than it should be. Running a bandwidth test through the link proves this. Example, a P Throughput of 30,000kbps, will put 60-70,000kbps.

- NV2 performance. Lot's of links now stuck with low data rates, such as 130/18mb.

- NV2 signal strength is notably weaker than Nstreme. Why? Nstreme -67, NV2 goes to -74db. This may have happened in earlier FW release.

Has anyone else noticed these plus other "wireless" performance drops? I love Mikrotik and want to keep them for all my routing and PtP's, I just don't understand why things get worse with newer "improved" firmwares....

5.9 will be a big step in advance about nv2, impressing performaces.

Regards
Ros

NetworkPro · Tue Nov 15, 2011 11:34 am

Removing a bridge that has a PPPoE Server on it causes interfase statistic to not be show in WinBox so a router restart was needed.

Similar thing happened when I touched a QinQ VLAN that is under a normal VLAN. I tried to change the QinQ (service tag) vlan id from 1 to 111 and router was !@#$ed. I managed to get in somehow through one of the interfaces and issue a restart after which the QinQ tag was still 1 and I just changed it to 111 and all is fine since then.

There is a PPPoE server on the normal VLAN and one on the QinQ vlan as well.

This is a x86 P4 3.0GHz with HT, with RPS off and with IRQs as "auto" assigned. The VLANs are on an Intel PRO/1000.

dbai · Tue Nov 15, 2011 3:12 pm

Another bug: switching on or switching off of item 'Advertise' for IPv6 address causes disfunction of this address (like Disable). After change you need to disable and enable address, then everything is fine.

mramos · Tue Nov 15, 2011 4:08 pm

Well ...

Last night I upgraded all APs to 5.8 - and - the firmware to 2.38. Untill then was a mixture of 5.6 & 5.7.

What I noticed is a huge improvement at the speed CPEs connect and authenticate.

At the same time, weak signals on a RB411AR UFL (R52n as AP), RB433 (R52n as AP), RB433 (R52Hn as AP), RB433UAH (R52nM X 2 as AP) that until 5.7 + 2.37 fwf range from -78 to -82 under rain ... making almost impossible to acess CPE GUI (e.g Nano2Loco, Nano2 LocoM & Bullet2).

Now ... mainly after 3.8 fwf ... with signals from -80 to -87 tx/rx is easy to access CPEs GUI. Stronger (regular) signals no problem at all.

All APs are 20 or 10MHz, only G, legacy speed algorithm, configured G speeds, hw retries = 5, noise reduction ap&client mode, manual distance.

Since 3AM no more drops/reboots and it's raining cats&dogs.

Regards;

NetworkPro · Tue Nov 15, 2011 4:14 pm

I don't understand the line "At the same time ..."

Is it good, better now with 5.8?

mramos · Tue Nov 15, 2011 4:25 pm

I don't understand the line "At the same time ..."Is it good, better now with 5.8?

Yes ... much better.

Those marginal signals CPEs for instance, sometimes I need to gain access to them to trimm one parameter or another (e.g. change CPE speed algorithm from EWMA to conservative on UBNTs CPEs) was almost impossible, GUI lasts too long for complete loading. Or even to check if ETH cables was connected when clients complained about navigation.

Today ... those signals are weaker than dry days (it's pouring rain), some of them decreased 3 to 6dB ... reaching -85 ... -87) I access those CPEs GUIs easily.

The last weeks under 5.6/5.7 and a mixture of firmwares was a nightmare. Now after almost 10 hours no alarms, checking weaker CPEs from time to time to be sure I'm not dreaming lol.

Even the NLOs Nstreme 900MHz links are solid.

Finger crossed for now.

Regards;

chrismarine · Tue Nov 15, 2011 10:37 pm

Another bug ,i have one RB 600 64mb ram with daughterboard 502 and 6xcm9 cards ,after upgrade router os from 4.16 to 5.8 ,if the tx power in 5ghz mode is between 0-10 has no transmiting signal difference ,it seems to be default 10
firmware version 2.27

NetworkPro · Wed Nov 16, 2011 4:37 pm

Removing a bridge that has a PPPoE Server on it causes interfase statistic to not be show in WinBox so a router restart was needed.
Similar thing happened when I touched a QinQ VLAN that is under a normal VLAN. I tried to change the QinQ (service tag) vlan id from 1 to 111 and router was !@#$ed. I managed to get in somehow through one of the interfaces and issue a restart after which the QinQ tag was still 1 and I just changed it to 111 and all is fine since then.

There is a PPPoE server on the normal VLAN and one on the QinQ vlan as well.

This is a x86 P4 3.0GHz with HT, with RPS off and with IRQs as "auto" assigned. The VLANs are on an Intel PRO/1000.

Actually the issue here could be that there is a second trunk port going to a RouterBOARD which is trying to bridge all VLANs (with heavy filters as the idea). It could have caused frame floods as discussed here http://forum.mikrotik.com/viewtopic.php?p=78775#p78775 and here http://forum.mikrotik.com/viewtopic.php?f=2&t=26644 Because the bridge on that board contained not just all VLANs which are tagged, but the eth interface as well to try and include the untagged "VLAN" in the bridge. But the x86 router was affected - it has an eth with no VLANs and it was not accessible through that either. - a process had crashed and I had to send someone on site to reboot it.

steen · Thu Nov 17, 2011 11:24 pm

Steen please post a screenshot of the problem and/or answer:

- what router? What exact model of hardware?
- what version of software, date in /system packages

Thank you.

So far: RB333, RB600, RB450G
With ROS5.6 and the latest firmware that where actual at that time.
3 Wireless Accesspoint for nv2
RB450G only router

NetworkPro · Thu Nov 17, 2011 11:39 pm

Hello Folks!

Suddenly after several months of operation we are facing a nasty situation.

Router after router is becoming unavailable or very slow.

When managing to login on a router high CPU on FLASH is detected.

A hard reboot is only way to solve problem.

This is scary, what happens here.

Can anyone explain, or is this a new bug discovered.

One way to try and find out is to take supout.rif before reboot and send to support.

rodneal · Fri Nov 18, 2011 2:51 am

OK - I'll bite - where do we get v5.9?
Rod

parrini · Fri Nov 18, 2011 5:21 am

I don't understand the line "At the same time ..."Is it good, better now with 5.8?
Yes ... much better.

Those marginal signals CPEs for instance, sometimes I need to gain access to them to trimm one parameter or another (e.g. change CPE speed algorithm from EWMA to conservative on UBNTs CPEs) was almost impossible, GUI lasts too long for complete loading. Or even to check if ETH cables was connected when clients complained about navigation.

Today ... those signals are weaker than dry days (it's pouring rain), some of them decreased 3 to 6dB ... reaching -85 ... -87) I access those CPEs GUIs easily.

The last weeks under 5.6/5.7 and a mixture of firmwares was a nightmare. Now after almost 10 hours no alarms, checking weaker CPEs from time to time to be sure I'm not dreaming lol.

Even the NLOs Nstreme 900MHz links are solid.

Finger crossed for now.

Regards;

What value for [link distance|ack timeout] are you using? Your setup seems pretty similar to mine.

I am considering moving all my APs from 4.17 to 5.8 and your report is very encouraging.

Thanks;)

mramos · Fri Nov 18, 2011 5:59 am

What value for [link distance|ack timeout] are you using? Your setup seems pretty similar to mine.I am considering moving all my APs from 4.17 to 5.8 and your report is very encouraging.Thanks;)

My setup is pretty straight. There's 2 x 2.4GHz APs on a 433UAH (ch1 & ch 13) using R52nM.

For 20MHz channel 1, 35 CPEs on auth list, peak 30 online, 5 < hw retries < 7, noise reduction enabled (ap+client mode), distance = 2Km (my cell have 1.6km max), only G, tx power = default, noise floor = manually configured after 10 minutes measuring (for the R52nM there is abt -109/-110), data-rates legacy & configured. Disconnect timeout=0. Default auth & default forward unchecked.

For 10MHz channel 13, 35 CPEs on auth list, peak 30 online, 5 < hw retries < 7, noise reduction enabled (ap+client mode), distance = 5Km (my cell have 1.6km max), only G, tx power = default, noise floor = manually configured after 10 minutes measuring (for the R52nM there is abt -110/-112), data-rates legacy & configured. Disconnect timeout=0. Default auth & default forward unchecked.

All CPEs are Nano2Loco or NanoM2Loco locked to "only G" except two legacy un-branded CPEs (usb devices, realtek & ralink chipsets).

WPA2-PSK / AES only.

Note that I'm facing some daily basis reboots on 433 but already figured by support staff that's R52nM related. I'm not sure if it is a card issue, driver issue, WPA2-PSK AES security issue or something like that. Still testing.

Regards;

CStrauch · Fri Nov 18, 2011 12:49 pm

sup guys,

tried to use pools for ipv6 over PPPoE, but aren't working in my case

if I set the prefix directly on user secret, it works okay..

but if I set a pool on profile, and remove the prefix at user secret, the v6 CIDR aren't routed to ppp interface by mikrotik, as it should happens.

someone else tried v6 pools ?

I did. The dynamic route was correctly assigned (as well as the prefix on IPv6/Pool/Used) but, since my users connect via PPPoE, we were unable to automatically use the prefix on the client unit (RB433AH / ROS 5.

. Manually assigned the IPv6 on the client, all worked as expected. Just need to be able to receive de IPv6-PD via PPPoE.

Carlos Strauch

parrini · Fri Nov 18, 2011 7:21 pm

That is REALLY similar to our setup.

I'm gonna make some upgrades and report back here.

Thanks!

DogHead · Fri Nov 18, 2011 8:00 pm

We have been trying to get a Pantech UML290 to roam between LTE and EVDO on Verizon. On windows systems the Verizon Access Manager application takes care of trying to connect first on 4G, then trying 3G, then periodically checking to see if 4G is available for a switch back. Very messy, but it seems to be handled by the user space application and the windows driver.

On linux it appears that you have to manually deal with it, switching between GSM authentication and CDMA authentication manually.

Now that IPv6 PPP framing is supported under ROS, is it possible to get this modem to connect under LTE? Has anyone done it? What about roaming from 3G to 4G? We have the modems working well in 3G only, but what is the point of having a 4G modem you can only run in 3G mode...

Suggestions?

NetworkPro · Sat Nov 19, 2011 7:07 pm

Removing a bridge that has a PPPoE Server on it causes interfase statistic to not be show in WinBox so a router restart was needed.
Similar thing happened when I touched a QinQ VLAN that is under a normal VLAN. I tried to change the QinQ (service tag) vlan id from 1 to 111 and router was !@#$ed. I managed to get in somehow through one of the interfaces and issue a restart after which the QinQ tag was still 1 and I just changed it to 111 and all is fine since then.

There is a PPPoE server on the normal VLAN and one on the QinQ vlan as well.

This is a x86 P4 3.0GHz with HT, with RPS off and with IRQs as "auto" assigned. The VLANs are on an Intel PRO/1000.

Just tried removing the QinQ VLAN with service tag by hitting the "minus" button in WinBox. Router became unstable and a reboot was needed. This is definitely a bug.

petro25 · Sun Nov 20, 2011 5:14 pm

BUG CPU

fewi · Sun Nov 20, 2011 5:26 pm

Not necessarily a bug - everything that isn't specified is considered 'idle', isn't it? So this could be a run away process that isn't explicitly listed. Take a supout.rif and send it to support@mikrotik.com

NetworkPro · Sun Nov 20, 2011 5:48 pm

petro25, this is proxy related in my experience. Looks like some process that is preparing the Proxy store etc. Should be done in some time so turn off the proxy nat rule and wait for the CPU to calm. Check proxy config if all is fine and if its caching.

Sun Nov 20, 2011 6:29 pm

Not necessarily a bug - everything that isn't specified is considered 'idle', isn't it? So this could be a run away process that isn't explicitly listed. Take a supout.rif and send it to support@mikrotik.com

No. Should be "unclassified".

neandero · Sun Nov 20, 2011 11:19 pm

ever since upgrade, i get info log errors on all routers (which they were all working fine) error code:

OSPFv2 neighbor (ip address of another router (any connected router)) state change from (something) to (something)

like

Full to 2-Way
ExStart to 2-Way
Full to Init

??

Mon Nov 21, 2011 10:19 am

IDLE means "Not doing anything". This is the percentage of CPU resources that are available. If CPU usage is 5%, IDLE is 95%.

NetworkPro · Mon Nov 21, 2011 5:28 pm

Normis man, the CPU is 100% - upper right corner indicator - because a process is working on the Proxy Cache etc.

Currently I believe that Web Proxy feature of RouterOS is false advertisement and the authorities should fine the company.

And when I clear the cache - nowhere is indicated that this is a slow process during which the above effect happens. If clearing cache needs time - user should somehow know by seing a percentage indicator or something or at least a flag.

As I said, MikroTik needs something. More developers, to sell the business, to make the project Open-Source, implementing procedures to ensure quality. Or all of these. Something.

wispwest · Tue Nov 22, 2011 1:06 am

Didn't have time to read through all the posts, but here are a few things. Sucks performance is decreasing with newer firmwares.

- With 5.8, P Throughput has dropped horribly. Though its just a mis-calculation. On all my PtP links, P Throughput is about 50-80% lower than it should be. Running a bandwidth test through the link proves this. Example, a P Throughput of 30,000kbps, will put 60-70,000kbps.

- NV2 performance. Lot's of links now stuck with low data rates, such as 130/18mb.

- NV2 signal strength is notably weaker than Nstreme. Why? Nstreme -67, NV2 goes to -74db. This may have happened in earlier FW release.

Has anyone else noticed these plus other "wireless" performance drops? I love Mikrotik and want to keep them for all my routing and PtP's, I just don't understand why things get worse with newer "improved" firmwares....
5.9 will be a big step in advance about nv2, impressing performaces.

Regards
Ros

Where can I test out 5.9? They don't even let you choose which version you want in the downloads section anymore. Did beta downloads move somewhere?

rpingar · Tue Nov 22, 2011 7:04 am

Didn't have time to read through all the posts, but here are a few things. Sucks performance is decreasing with newer firmwares.

- With 5.8, P Throughput has dropped horribly. Though its just a mis-calculation. On all my PtP links, P Throughput is about 50-80% lower than it should be. Running a bandwidth test through the link proves this. Example, a P Throughput of 30,000kbps, will put 60-70,000kbps.

- NV2 performance. Lot's of links now stuck with low data rates, such as 130/18mb.

- NV2 signal strength is notably weaker than Nstreme. Why? Nstreme -67, NV2 goes to -74db. This may have happened in earlier FW release.

Has anyone else noticed these plus other "wireless" performance drops? I love Mikrotik and want to keep them for all my routing and PtP's, I just don't understand why things get worse with newer "improved" firmwares....
ask to support @ mikrotik . com

regards
Ros
5.9 will be a big step in advance about nv2, impressing performaces.

Regards
Ros
Where can I test out 5.9? They don't even let you choose which version you want in the downloads section anymore. Did beta downloads move somewhere?

Tue Nov 22, 2011 7:55 am

there is no such beta. this is a private test. email support if you are interested

oeyre · Wed Nov 23, 2011 12:40 am

there is no such beta. this is a private test. email support if you are interested

What about giving people access to nightly builds?

Wed Nov 23, 2011 8:31 am

there is no such beta. this is a private test. email support if you are interested
What about giving people access to nightly builds?

this is exactly what this is

dunga · Wed Nov 23, 2011 11:40 am

[obinna@OFFICE] /system> routerboard
[obinna@OFFICE] /system routerboard> pr
routerboard: yes
model: 433AH
serial-number: 199701F4CD9A
current-firmware: 2.18
upgrade-firmware: 2.29
[obinna@OFFICE] /system routerboard>

How do i upgrade this firmware as i cannot see the link to download the firmware.

Tanks

Wed Nov 23, 2011 11:41 am

enter the command:

/system routerboard upgrade

don't have to download anything, firmware is already in the router

dunga · Wed Nov 23, 2011 11:50 am

What should be the effect of it concerning the two devices that are running point to point in bridge mode with wds.

I see this error in my log, will it help reduce it or what improvement will it have on the link and what is the time duration.
obinna@OFFICE] /log> pr
jan/01 02:00:02 system,error,critical router was rebooted without proper shutdown
(cause 1)
jan/01 02:00:09 interface,info ether1 link up (speed 100M, full duplex)
jan/01 02:00:13 wireless,info 00:0C:42:26:3F:EF@wlan1: connected, wants WDS
jan/01 07:55:57 wireless,info 00:0C:42:26:3F:EF@wlan1: disconnected, extensive dat
a loss
jan/01 07:56:45 wireless,info 00:0C:42:26:3F:EF@wlan1: connected, wants WDS
jan/01 08:01:46 wireless,info 00:0C:42:26:3F:EF@wlan1: disconnected, extensive dat
a loss
jan/01 08:02:40 wireless,info 00:0C:42:26:3F:EF@wlan1: connected, wants WDS
jan/01 08:29:43 wireless,info 00:0C:42:26:3F:EF@wlan1: disconnected, extensive dat
a loss
jan/01 08:30:34 wireless,info 00:0C:42:26:3F:EF@wlan1: connected, wants WDS
jan/01 08:49:03 wireless,info 00:0C:42:26:3F:EF@wlan1: disconnected, extensive dat
a loss

I am running version 5.6
[obinna@OFFICE] /system package> pr
Flags: X - disabled
# NAME VERSION SCHEDULED
0 system 5.6
1 multicast 5.6
2 user-manager 5.6
3 dhcp 5.6
4 security 5.6
5 advanced-tools 5.6
6 ipv6 5.6
7 ntp 5.6
8 routerboard 5.6
9 calea 5.6
10 mpls 5.6
11 hotspot 5.6
12 wireless 5.6
13 routing 5.6
14 lcd 5.6
15 ppp 5.6
16 ups 5.6
17 gps 5.6
[obinna@OFFICE] /system package