Changelog RouterOS 6.7

Stillhard · Sun Nov 10, 2013 12:45 am

Changelogs for upcoming RouterOS 6.7

What's new in 6.7rc1 (2013-Nov-08 15:54):
*) fixed hairpin nat on bridge with use-ip-firewall=yes;

honzam · Tue Nov 12, 2013 6:04 pm

What's new in 6.7rc1 (2013-Nov-15 10:45):

*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

Stillhard · Sat Nov 16, 2013 6:23 am

What's new in 6.7rc1 (2013-Nov-15 15:23):
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

kometchtech · Wed Nov 20, 2013 10:49 am

6.7rc1 version up in November 19? It seems to use, but do you know What changes?

Best regards

armandfumal · Thu Nov 21, 2013 11:26 pm

What's new in 6.7rc1 (2013-Nov-20 14:13):

*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

kometchtech · Fri Nov 22, 2013 10:50 am

Thanks!

TonyJr · Fri Nov 22, 2013 6:07 pm

What's new in 6.7rc2 (2013-Nov-22 15:45):

*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

D1M0N · Sat Nov 23, 2013 5:19 pm

Where can I download 6.7rc2 ???

kometchtech · Mon Nov 25, 2013 3:11 pm

What's new in 6.7 (2013-Nov-25 10:22):

*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

maxiscool · Tue Nov 26, 2013 10:10 am

Hi,

Do we know when 6.7 will be release?

Thanks.

janisk · Tue Nov 26, 2013 10:28 am

there is no release date set.

also 6.7rc2 has some special ppp patches, look more here regarding 6.7rc2
http://forum.mikrotik.com/viewtopic.php?f=2&t=79166&

honzam · Tue Nov 26, 2013 4:03 pm

What's new in 6.7 (2013-Nov-26 09:57):

*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;

what changes?

janisk · Tue Nov 26, 2013 4:35 pm

it should be more precise and report proper values as there where issues observed that sometimes unrealistic reading was displayed.

willy · Wed Nov 27, 2013 4:59 am

Sorry for a possible many asked question, but generally available anywhere the development releases of routeros? My devices affected in a bug in 6.6 (vlan on bridge), and i will be try, but also useful for "advanced" users used with caution. If not accessible generally, please give me download link for 6.7rc1. Thanks.

honzam · Wed Nov 27, 2013 9:23 am

write to support for acceess to prerelease page

dadaniel · Wed Nov 27, 2013 2:19 pm

it should be more precise and report proper values as there where issues observed that sometimes unrealistic reading was displayed.

could you please comment on the following questions:

which max. initial PoE current is possible with the current hardware/firmware?
which protection is built in and is it reversible/replaceable?

thank you very much!

janisk · Wed Nov 27, 2013 2:56 pm

as far as it should concern end-users - it is as before. Also, fw upgrade procedure is simplified.

Malosa · Wed Nov 27, 2013 6:28 pm

There is a bug with PPPoE client in RouterOS 6:

http://forum.mikrotik.com/viewtopic.php?f=2&t=78875

Basically the <<AC-Name=''>> folder in the request must be sent even if it's empty, like other routers do, but Mikrotik doesn't.

It's very important because some modems cannot be used. And it's an extremely easy bug to correct.

Thank you.

skot · Wed Nov 27, 2013 7:21 pm

*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

Glad to get these features. They show up in CLI but not winbox/webfig.

armandfumal · Wed Nov 27, 2013 11:09 pm

What's new in 6.7 (2013-Nov-26 09:57):

*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;

honzam · Thu Nov 28, 2013 2:53 pm

What's new in 6.7 (2013-Nov-28 12:53):

*) support Android usb tethering interface;
*) ipsec - added aes-gcm icv16 encryption mode;
*) wireless - improve rate selection for nstreme protocol
*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.

Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible;

Thu Nov 28, 2013 3:09 pm

*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.

This is interesting - so basically if you have any queue tree and /interface queue isoverrided by it you can also might be affected by this issue....

fernandolcx · Fri Nov 29, 2013 3:33 am

*) support Android usb tethering interface;

This is what I'm talkig about!

kometchtech · Fri Nov 29, 2013 4:34 pm

What's new in 6.7 (2013-Nov-29 13:37):

*) support Android usb tethering interface;
*) ipsec - added aes-gcm icv16 encryption mode;
*) wireless - improve rate selection for nstreme protocol
*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.
Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible;

ckgth · Sat Nov 30, 2013 9:58 am

Hello,

we have Update an CCR-1036-12G-4S from 6.5 now to testing 6.7 because of port-flapping with 100MB Ports (this was absolutely not acceptable) and now we have "reboot by watchdog timer". With 6.5 this was not! No supout was generated....

Hey MT! I known, the price for this device in resources this have very,very good, but you *must* make Software, who control it good, basically of the standard network processes. I must have an good routing, but no "support for Android". This you can make later....What is with the slogan "Routing the World"?

You wrote in the change-log:

*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.

I must think about that you now known this issues? Have you not probe this before you share 6.6 ?
sometimes it is better, to check the software and wait with an release and no release it with failures....

best regards
Christian

Mon Dec 02, 2013 9:10 am

Hello,

we have Update an CCR-1036-12G-4S from 6.5 now to testing 6.7 because of port-flapping with 100MB Ports (this was absolutely not acceptable) and now we have "reboot by watchdog timer". With 6.5 this was not! No supout was generated....

Hey MT! I known, the price for this device in resources this have very,very good, but you *must* make Software, who control it good, basically of the standard network processes. I must have an good routing, but no "support for Android". This you can make later....What is with the slogan "Routing the World"?

You wrote in the change-log:

*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.
I must think about that you now known this issues? Have you not probe this before you share 6.6 ?
sometimes it is better, to check the software and wait with an release and no release it with failures....

best regards
Christian

Please send your supout.rif file to support. Make the file after you have the reboot problem.

Hotz1 · Sun Dec 08, 2013 2:27 am

What's new in 6.7 (2013-Nov-26 09:57):

*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;

what changes?

In my brief experience upgrading my test-bench's UPA from 5.26 to 6.7, now a UPA will power two RB411s in ports 2 and 3, but as soon as you try to power a third RB411 in either ports 4 or 5, they all start power-cycling. This is a mess! What happened?!!!

Fortunately, after downgrading back to 5.26, upgrading the PoE firmware put back the older version (2.1), and now it powers all four RB411s with no problem again.

Maybe this is "old news"; I waited until 6.5 before upgrading from 5.26, figuring any major bugs would have been addressed by now. On all the other equipment, 6.5 worked fine, but this is the first PoE-out device I have tried it on. Did this problem start with PoE firmware in 6.0, or are there some 6.x releases that still work?

Arpanet · Fri Feb 14, 2014 9:06 pm

Please notice:
command

tls=yes/no

for

/tool email

has changed to

start-tls=yes/no

Changelog RouterOS 6.7

Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Re: Changelog RouterOS 6.7

Who is online