v6.7 released

Mon Dec 02, 2013 1:40 pm

Simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu.

What's new in 6.7 (2013-Nov-29 13:37):

*) support Android usb tethering interface;
*) ipsec - added aes-gcm icv16 encryption mode;
*) wireless - improve rate selection for nstreme protocol
*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;
*) ipsec - added aes-ctr encryption mode;
*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;
*) ipsec - added sha256 and sha512 support;
*) ipsec - proposal defaults changed to aes-128 and sha1 for both phase1 and phase2;
*) certificate - support ip, dns and email subject alternative names;
*) dhcpv4 server - added REMOTE_ID option variable for relayed packets;
*) ipsec - fix policy bypass on IPv6 gre, ipip, eoip tunnels when policy uses protocol filter;
*) userman - fix crash on tilera;
*) fixed hairpin nat on bridge with use-ip-firewall=yes;
*) fixed vlan on bridge after reboot having 00:00:00:00:00:00 mac address;
*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
*) fixed l2mtu changing on CCRs - could cause port flapping;
*) disabling/enabling ethernet ports did not work properly on CCRs - could cause port flapping;
*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue.
Note that having other interface queue than only-hardware-queue dramatically reduces performace, so should be avoided if possible;

Borage · Mon Dec 02, 2013 2:01 pm

*) ipsec - added aes-gcm icv16 encryption mode;

Finally the best performing authenticated encryption combination among the NIST standard options.

Zito · Mon Dec 02, 2013 3:19 pm

*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue

It's fixed on RB2011 to?

Mon Dec 02, 2013 3:21 pm

*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue
It's fixed on RB2011 to?

We have no known issues with RB2011 port flapping. Like explained in the other forum topic, causes could include cabling, drivers, other device issues, etc.

Caci99 · Mon Dec 02, 2013 3:23 pm

*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;

This option is available only in terminal right now, not in winbox, right?

Zito · Mon Dec 02, 2013 3:26 pm

*) fixed port flapping on CCR - could happen when having other than only-hardware-queue interface queue
It's fixed on RB2011 to?
We have no known issues with RB2011 port flapping. Like explained in the other forum topic, causes could include cabling, drivers, other device issues, etc.

6.5 and 6.6 has this issue on RB2011 (screen posted before in other thread). Cables are almost brand new CAT7, connected to 3 different models of DSL modems, and top models of HP switches...
I will test 6.7 tomorrow.

Mon Dec 02, 2013 3:28 pm

I will test 6.7 tomorrow.

if you find an issue, Make sure you email MikroTik support. Maybe there is something specific in your setup

jackwing · Mon Dec 02, 2013 3:48 pm

when can support intel i210 network adapter

hapi · Mon Dec 02, 2013 4:04 pm

and intel i354

Mon Dec 02, 2013 4:09 pm

We support only things that vanilla kernel 3.3.5 supports.

hapi · Mon Dec 02, 2013 4:17 pm

Wrong answer.

stmx38 · Mon Dec 02, 2013 4:35 pm

This is a normal behavior ?

Also it seems that auto-update from rc doesn't work.
1. Removed ppp-v7
2. Download & Upgrade.
3. After reboot is same version - 6.7.rc2

Manual upgrade with drag&drop doesn't work too.

asimko · Mon Dec 02, 2013 4:43 pm

Upgraded today on RB750UP, previous firmware was 5.24, suddenly I have port flapping, but only if I try to connect with winbox, if I use ssh everything is ok. I have some devices powered on ports, try to change poe status to forced-on and auto but nothing change. I upgraded also rb firmware, but still the same issue. I am connecting to in with winbox on linux (wine).
Any other suggestion?

janisk · Mon Dec 02, 2013 4:51 pm

slech yes, this is normal as there is no other way to guarantee, that your router will have same capabilities than before (like swapping between 2 packages) as in your case ppp-v7 package for 6.7 release is not available.

however: http://www.mikrotik.com/download/share/ ... mipsbe.npk

patrickmkt · Mon Dec 02, 2013 4:55 pm

Still unable to change a certificate name in winbox (error certificate subject is read only), while it is possible in terminal mode.

stmx38 · Mon Dec 02, 2013 5:06 pm

janisk, thank you for clarification.
The issue with upgrade was in:

ppp-v7-6.7-mipsbe.npk - 0

I think it was created with updater:

stmx38 · Mon Dec 02, 2013 5:35 pm

patrickmkt
I have same issue. Created the ticket: Ticket#2013120266000693
But you can do this via terminal:

certificate set numbers=0 name=TestName

patrickmkt · Mon Dec 02, 2013 9:05 pm

patrickmkt
I have same issue. Created the ticket: Ticket#2013120266000693
But you can do this via terminal:
ros code
certificate set numbers=0 name=TestName

yes same problem as reported in v6.6

rzirzi · Mon Dec 02, 2013 11:53 pm

*) address-list - allow manually adding timeoutable entries;
*) address-list - show dynamic entry timeout;
This option is available only in terminal right now, not in winbox, right?

I also can't find it at the WinBox:( Where is it? Only at terminal?

littlebill · Tue Dec 03, 2013 1:33 am

dns issue is still well alive

http://forum.mikrotik.com/viewtopic.php ... 05#p398405

mangust · Tue Dec 03, 2013 9:55 am

ip->firewall->Service Ports are shown as invalid (I) in case "tracking set enabled=no"
Anybody can confirm this (you have to reboot router to replicate this)?
Is that OK or minor bug?

Tue Dec 03, 2013 9:57 am

ip->firewall->Service Ports are shown as invalid (I) in case "tracking set enabled=no"
Anybody can confirm this (you have to reboot router to replicate this)?
Is that OK or minor bug?

This is supposed to be so. NAT helpers will not work without connection tracking.

cantanko · Tue Dec 03, 2013 11:10 am

Hello,

As mentioned in this post for v6.5, it would appear SSH out from a v6.7 RouterBoard to an SSH host with "ChallengeResponseAuthentication yes" (i.e. most default installs of SSH on any Linux host) still fails - it just times out.

RouterOS to RouterOS is fine, just not to other SSH servers with that option set.

Is anyone else aware of this?

Cheers,
Harry

Neilson · Tue Dec 03, 2013 12:00 pm

@cantanko

I have noticed some weird behaviours with SSH recently on routersOS versions. I haven't traced this as the issue nor have I confirmed it yet (I will try do some testing)

I wonder if this may be a side effect of the change they put in place after the SSH Crash bug was discovered and reported. Its possibly a new config they deployed or the new SSH client has a different setup.

I will try check and update.

Regards
Alexander

janisk · Tue Dec 03, 2013 12:08 pm

to what "most default installation" you are referring to? To my knowledge if you are talking about OpenSSH server on linux installation then there is no difference what is set as ChallengeResponseAuthentication and PasswordAuthentication enables same behaviour on the server side. In theory ChallengeResponseAuthentication can ask several questions/password however the end result is - it uses PAM to authenticate that in turn requests password every single time. Thus there is no additional security for Linux installs using either of configuration keywords.

As such this problems is deemed as low priority as there are methods on how to achieve greater security, like PubkeyAuthentication setting where key is password protected.

However, we will look into this issue that with ChallengeResponseAuthentication yes it is not possible to log in to another host via ssh.

timoid · Tue Dec 03, 2013 12:37 pm

I've been chasing down an IPv6 bug that's been a little difficult to work out.

The circumstances are as follows:

* Internet connection is PPPoE

* DHCPv6 Client attached to PPP interface
/ipv6 dhcp-client
add add-default-route=yes interface=Internode pool-name=NODE-PD

* IPv6 address from DHCPv6 Pool
/ipv6 address
add address=::1 from-pool=NODE-PD interface=LAN

(LAN interface is bridge of wireless and local switchports)

This works fine:
ping ipv6.google.com:
Reply from 2404:6800:4006:806::1014: time=15ms
Reply from 2404:6800:4006:806::1014: time=18ms
Reply from 2404:6800:4006:806::1014: time=16ms
Reply from 2404:6800:4006:806::1014: time=17ms
Reply from 2404:6800:4006:806::1014: time=18ms

If you do any of the following:
disable/enable dhcpv6-client
disable/enable pppoe-client interface
release/renew dhcpv6 pool
or
ppp drops out

then it appears that this mechanism breaks:

* IPv6 address from DHCPv6 Pool
/ipv6 address
add address=::1 from-pool=NODE-PD interface=LAN

and ipv6 pings will time out:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.

disabling/reenabling the ipv6 address resolves the issue:
Reply from 2404:6800:4006:806::1013: time=16ms
Reply from 2404:6800:4006:806::1013: time=16ms
Reply from 2404:6800:4006:806::1013: time=17ms
Reply from 2404:6800:4006:806::1013: time=17ms

Insider · Tue Dec 03, 2013 1:35 pm

What exactly was done?
wireless - improve rate selection for nstreme protocol

chalan · Tue Dec 03, 2013 2:25 pm

what does this mean and how it work? inverted modem signal trigger? is it for 3G usb modems?

Lakis · Tue Dec 03, 2013 3:14 pm

What exactly was done?
wireless - improve rate selection for nstreme protocol

When Data Rates are selected on default
improves data rate selection for best performance - noting to do with disconnect/connect issue
but this is good step MT finally released some improvement for nstreme

littlebill · Tue Dec 03, 2013 4:17 pm

dns issue is still well alive

http://forum.mikrotik.com/viewtopic.php ... 05#p398405

seriously no response to this at all? i even have a video showing it?

Insider · Tue Dec 03, 2013 4:22 pm

What exactly was done?
wireless - improve rate selection for nstreme protocol

When Data Rates are selected on default
improves data rate selection for best performance - noting to do with disconnect/connect issue
but this is good step MT finally released some improvement for nstreme

OK, there was issue when idling to get latencies in thousand.. Was that the sort of issue which was solved?

zibik · Tue Dec 03, 2013 10:54 pm

What exactly was done?
wireless - improve rate selection for nstreme protocol

When Data Rates are selected on default
improves data rate selection for best performance - noting to do with disconnect/connect issue
but this is good step MT finally released some improvement for nstreme

so , maybe mt give us stable and full functionality MiMo with nstreme ?
how long we are waiting ?

mesquito · Wed Dec 04, 2013 12:47 am

Upgraded today on RB750UP, previous firmware was 5.24, suddenly I have port flapping, but only if I try to connect with winbox, if I use ssh everything is ok. I have some devices powered on ports, try to change poe status to forced-on and auto but nothing change. I upgraded also rb firmware, but still the same issue. I am connecting to in with winbox on linux (wine).
Any other suggestion?

I also upgraded my 750UP from ROS6.5 to 6.7. One of them crashes and reboots when accessed from Winbox or Webbox. SSH access allows me in. I have 1 device on a poe port and 2 other ports active without POE.
This one router has some problems already (port 1 is broken, ports 3 and 5 don't do POE out). I was getting ready to throw this one away, until I saw the 6.7 release and thought 'maybe this will help'. It didn't.
What's curious is that if I just leave it alone, the device works okay: poe-out on port 2, ports 4-5 on the switch.
Routing is fine and system health looks okay (via ssh). Just wish there was a simple explanation for what's causing Winbox to crash. I haven't caught anything in the /log.

I have another 750UP that took the upgrade fine and still accessible from Winbox and Webbox.

Edit: Downgraded the router to 6.5 and now Winbox connects and everything is working. Seems like maybe something buggy in the upgrade to 6.7.

ranpha · Wed Dec 04, 2013 7:57 am

I've been chasing down an IPv6 bug that's been a little difficult to work out.

The circumstances are as follows:

* Internet connection is PPPoE

* DHCPv6 Client attached to PPP interface
/ipv6 dhcp-client
add add-default-route=yes interface=Internode pool-name=NODE-PD

* IPv6 address from DHCPv6 Pool
/ipv6 address
add address=::1 from-pool=NODE-PD interface=LAN

(LAN interface is bridge of wireless and local switchports)

This works fine:
ping ipv6.google.com:
Reply from 2404:6800:4006:806::1014: time=15ms
Reply from 2404:6800:4006:806::1014: time=18ms
Reply from 2404:6800:4006:806::1014: time=16ms
Reply from 2404:6800:4006:806::1014: time=17ms
Reply from 2404:6800:4006:806::1014: time=18ms

If you do any of the following:
disable/enable dhcpv6-client
disable/enable pppoe-client interface
release/renew dhcpv6 pool
or
ppp drops out

then it appears that this mechanism breaks:
* IPv6 address from DHCPv6 Pool
/ipv6 address
add address=::1 from-pool=NODE-PD interface=LAN
and ipv6 pings will time out:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Request timed out.

disabling/reenabling the ipv6 address resolves the issue:
Reply from 2404:6800:4006:806::1013: time=16ms
Reply from 2404:6800:4006:806::1013: time=16ms
Reply from 2404:6800:4006:806::1013: time=17ms
Reply from 2404:6800:4006:806::1013: time=17ms

read http://forum.mikrotik.com/viewtopic.php ... 04#p393600

timoid · Wed Dec 04, 2013 8:28 am

read http://forum.mikrotik.com/viewtopic.php ... 04#p393600

my prefix isn't changing in this case. it's "semi permanent".

ranpha · Wed Dec 04, 2013 10:12 am

read http://forum.mikrotik.com/viewtopic.php ... 04#p393600
my prefix isn't changing in this case. it's "semi permanent".

What do you mean 'semi permanent'? Either you have a static prefix (like a HE tunnel), or you doesn't.

timoid · Wed Dec 04, 2013 10:22 am

read http://forum.mikrotik.com/viewtopic.php ... 04#p393600
my prefix isn't changing in this case. it's "semi permanent".
What do you mean 'semi permanent'? Either you have a static prefix (like a HE tunnel), or you doesn't.

my isp gives me the same ipv6 prefix every time i auth.

they reserve the right to change it so its not static.

Arnold2222 · Wed Dec 04, 2013 11:23 am

Successfully updated my Edge and Core RBs.
6.5->6.7

honzam · Wed Dec 04, 2013 11:53 am

ccr1036 - upgrade from 6.5 to 6.7 OK

gnoj · Wed Dec 04, 2013 12:29 pm

Is it possible if i upgrade from ROS V5.26 to ROS v6.7 directly ?

Wed Dec 04, 2013 12:30 pm

Is it possible if i upgrade from ROS V5.26 to ROS v6.7 directly ?

yes!

radman3000 · Wed Dec 04, 2013 3:52 pm

Still no PBR for IPv6?

When will we finally get this!?

djmanu · Wed Dec 04, 2013 6:02 pm

still no multicore BGP!!!

tsull360 · Wed Dec 04, 2013 6:55 pm

Hello,
Can all devices update to 6.7?

Thanks,
Tim

Sent from my RM-821_eu_euro2_268 using Tapatalk

marsark · Wed Dec 04, 2013 7:13 pm

My brand new CCR1036-8G-2S+EM arrived today and upgraded from v6.1 to v6.7. Now fans are still spinning up and down, up and down continuously. The fans control mode is set to automatic. Is this normal ?

RouteRite · Wed Dec 04, 2013 8:07 pm

My brand new CCR1036-8G-2S+EM arrived today and upgraded from v6.1 to v6.7. Now fans are still spinning up and down, up and down continuously. The fans control mode is set to automatic. Is this normal ?

I am new to the Mikrotik game, so can't say if this is normal. However, I did notice something similar with my RB100xAH2 after going from 6.6 to 6.7. I noticed the fan sound more and it sounded like it was revving higher. Since it will be in a rack, I didn't spend a lot of time monitoring it.

In /System Health, I am seeing RPMs varying between 600-800 at a temp of 23c. There is no traffic going through the box other than a Winbox connection to monitor it. Fan is set to auto.

payday · Wed Dec 04, 2013 11:26 pm

RB2011UAS-2HnD-IN (first batch with power connector inside):
Link LED on ports 6 - 10 does not light up when connected to 10 Mbit device. Link is working fine but LED is off.
Tested two identical RB2011UAS-2HnD-IN - both have the same problem.

TonyJr · Thu Dec 05, 2013 12:35 am

Upgraded RB493G, RB751U-2HnD and OmniTik UPA-5HnD. No problems to report.

ddejager · Thu Dec 05, 2013 2:48 am

I upgraded three devices from 6.0 to 6.7. Only one went without any observed issues.

STX R2-5nD running as an nstream client: lost all history for cpu, memory, disk, and interface graphs

Sextant: 711GA-5HnD running as nstream AP: no observed problems

Sextant: 711-5HnD running as nstream client: lost interface graphs
More significantly every time I view the QuickSet screen on the 711-5HnD, CPU immediately goes to 100% with all available CPU being consumed by winbox (according to profile). If I view it by logging in to Webfig, the CPU stays at 100% until reboot. If I view QuickSet via winbox, the CPU goes to 100% and the winbox session is disconnected. Connecting again shows that the CPU consumed by winbox is then at least 30% even if webfig is not opened again. The problem seems to remain until rebooted.

I do not observe the CPU issue on either the STX R2-5nD or the 711GA-5Hnd

ranpha · Thu Dec 05, 2013 3:38 am

my prefix isn't changing in this case. it's "semi permanent".
What do you mean 'semi permanent'? Either you have a static prefix (like a HE tunnel), or you doesn't.
my isp gives me the same ipv6 prefix every time i auth.

they reserve the right to change it so its not static.

When you do the below:-

If you do any of the following:
disable/enable dhcpv6-client
disable/enable pppoe-client interface
release/renew dhcpv6 pool
or
ppp drops out

right after that, can you do the 'netsh int ipv6 show address' command?

Thu Dec 05, 2013 7:47 am

My brand new CCR1036-8G-2S+EM arrived today and upgraded from v6.1 to v6.7. Now fans are still spinning up and down, up and down continuously. The fans control mode is set to automatic. Is this normal ?

AFAIK fans spin depending on CPU temperature, if CPU is IDLE fans don't spin at all.

Some features like LCD that collects updates periodically may cause the effect you describe - i have this device under constant load of close to 1Gbps, my fans are on all the time.

sovaby · Thu Dec 05, 2013 8:43 am

v6.6, v6.7.
Time zone Europe/Minsk +2 wrong.
Actual time zone Europe/Minsk +3 !!!

Thu Dec 05, 2013 8:54 am

v6.6, v6.7.
Time zone Europe/Minsk +2 wrong.
Actual time zone Europe/Minsk +3 !!!

Are you sure? Even google says:
Eastern European Time Zone (UTC+02:00)

It was changed recently maybe?

Thu Dec 05, 2013 9:47 am

More significantly every time I view the QuickSet screen on the 711-5HnD, CPU immediately goes to 100% with all available CPU being consumed by winbox (according to profile). If I view it by logging in to Webfig, the CPU stays at 100% until reboot. If I view QuickSet via winbox, the CPU goes to 100% and the winbox session is disconnected. Connecting again shows that the CPU consumed by winbox is then at least 30% even if webfig is not opened again. The problem seems to remain until rebooted.

I do not observe the CPU issue on either the STX R2-5nD or the 711GA-5Hnd

Could you please make a support output file at the time when you see that CPU usage at 100% all the time? Send it to support@mikrotik.com

Chupaka · Thu Dec 05, 2013 10:28 am

v6.6, v6.7.
Time zone Europe/Minsk +2 wrong.
Actual time zone Europe/Minsk +3 !!!
Are you sure? Even google says:
Eastern European Time Zone (UTC+02:00)

It was changed recently maybe?

[/sarcasm] I understand, that 2 years is kind of 'recently' for MT, but [/sarcasm] Belarus is not in EET anymore: http://en.wikipedia.org/wiki/Further-ea ... opean_Time

also, any 'Etc/GMT-N' means 'Etc/GMT+N' in RouterOS for some reason - I wrote to support@ a few times for the last years, no reaction

[admin@TestPlace] > /sys clock pr
            time: 11:26:56
            date: dec/05/2013
  time-zone-name: Etc/GMT-3
      gmt-offset: +03:00

sovaby · Thu Dec 05, 2013 12:01 pm

v6.6, v6.7.
Time zone Europe/Minsk +2 wrong.
Actual time zone Europe/Minsk +3 !!!
Are you sure? Even google says:
Eastern European Time Zone (UTC+02:00)

It was changed recently maybe?

Two years as modified -- 2011 without daylight saving time.

ners · Thu Dec 05, 2013 2:50 pm

My brand new CCR1036-8G-2S+EM arrived today and upgraded from v6.1 to v6.7. Now fans are still spinning up and down, up and down continuously. The fans control mode is set to automatic. Is this normal ?

I also have a CCR1036-8G-2S+EM and it exhibits the same behavior on 6.7, the fans are spinning up and down. It actually worries me a little, since I'm going to put this router in production soon. Don't want any surprises as it'll be a fairly high-load PPPoE concentrator.

I also have both SFP+ ports administratively disabled and what I noticed is that all of their LED are always on (both the ACT/LNK and 10G) after boot. When I then manually enable the SFP+ interfaces the LEDs go off, then I disable them again, the LEDs stay unlit until next boot.

Also when I was commenting some address-lists in firewall, a few times I got this "Operation timed out, if this happens again, send a supout file to the support team" or something like that message and the comment wasn't applied. Strange.

The fans' spinning increase and decrease for no apparent reason is very irritating.

janisk · Thu Dec 05, 2013 4:47 pm

ners, open up '/tool profile' to see what is happening. make sure you are running 6.7

efaden · Thu Dec 05, 2013 7:57 pm

ners, open up '/tool profile' to see what is happening. make sure you are running 6.7

I'm running 6.7 on a CRS and am getting about 3 to 5% "management" CPU utilization while idle... my 951s, 2011s, etc don't have this. Any idea what it is?

ners · Thu Dec 05, 2013 8:53 pm

ners, open up '/tool profile' to see what is happening. make sure you are running 6.7

Apparently nothing is happening, Idle is 100% or 99,9% and everything else is 0%...

netwpl · Thu Dec 05, 2013 10:39 pm

any documentation about the tethering option in 6.7 ?

the router finds my phone ( galaxy s 2 and galaxy s4 ) but can't connect through

system serial-terminal usb1 channel=0

regards

sirdir · Thu Dec 05, 2013 11:57 pm

May be a coinsidence but my 450G crashed after barely 24h of 6.7 for the first time ever. Unfortunately I was not able to connect serially so I could not see what was happening, but I was not even able to ping the router anymore...

littlebill · Fri Dec 06, 2013 12:59 am

ups is broke on 2011. it simply reboots the router and boots back up even though the ups was on battery the whole time

files sent to support where it rebooted 2 times while on battery

NetHorror · Fri Dec 06, 2013 8:17 am

[admin@Router_Main] > system ups monitor ups1 
          on-line: yes
     runtime-left: 4h55m
   battery-charge: 100%
  battery-voltage: 27.4V
     [b]line-voltage: 27.4V[/b]
   output-voltage: 224.6V
             load: 46%
      temperature: 32.35C
        frequency: 50Hz

Line-voltage is incorrect. I using UPC package first on 6.7

acung · Fri Dec 06, 2013 8:53 am

any documentation about the tethering option in 6.7 ?

the router finds my phone ( galaxy s 2 and galaxy s4 ) but can't connect through

system serial-terminal usb1 channel=0

regards

after connect alcatel one touch d920 to the usb port, new 'lte' show up on the interface list.
then set dhcp client on that interface, do some masquarade setting to that new interface,
voila.... it works....

reza · Fri Dec 06, 2013 11:00 am

After upgrade to v6.7 on RB2011UAS, all bridge configurations are lost. After replaying the config it happened again. It seems to be a bug of v6.7. There was not such problem on previous releases.

Fri Dec 06, 2013 11:07 am

After upgrade to v6.7 on RB2011UAS, all bridge configurations are lost. After replaying the config it happened again. It seems to be a bug of v6.7. There was not such problem on previous releases.

Please tell us what kind of config you use and what configuration is lost?
Also could you make a support output file just after you see that the bridge config is lost and send it to support@mikrotik.com

Fri Dec 06, 2013 1:34 pm

[admin@Router_Main] > system ups monitor ups1 
          on-line: yes
     runtime-left: 4h55m
   battery-charge: 100%
  battery-voltage: 27.4V
     [b]line-voltage: 27.4V[/b]
   output-voltage: 224.6V
             load: 46%
      temperature: 32.35C
        frequency: 50Hz

Line-voltage is incorrect. I using UPC package first on 6.7

I did a quick check on CCR with BackUPS "line-voltage" stat was reported correctly. From which platform router is this printout taken?

asus · Fri Dec 06, 2013 3:28 pm

port flapping still exist in 6.7x86 directly connected to ubuntu tproxy

ubuntu eth error

Dec  6 15:42:37 cache kernel: [   15.326773] NF_TPROXY: Transparent proxy support initialized, version 4.1.0
Dec  6 15:42:37 cache kernel: [   15.326775] NF_TPROXY: Copyright (c) 2006-2007 BalaBit IT Ltd.
Dec  6 15:42:38 cache kernel: [   16.223026] e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
Dec  6 15:42:38 cache kernel: [   16.223071] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
Dec  6 15:42:38 cache kernel: [   16.646378] type=1400 audit(1386324758.698:8): apparmor="STATUS" operation="profile_replace" name="/sbin/dhclient" pid=985 comm="apparmor_parser"
Dec  6 15:42:38 cache kernel: [   16.646592] type=1400 audit(1386324758.698:9): apparmor="STATUS" operation="profile_replace" name="/usr/lib/NetworkManager/nm-dhcp-client.action" pid=985 comm="apparmor_parser"
Dec  6 15:42:38 cache kernel: [   16.646710] type=1400 audit(1386324758.698:10): apparmor="STATUS" operation="profile_replace" name="/usr/lib/connman/scripts/dhclient-script" pid=985 comm="apparmor_parser"
Dec  6 15:42:38 cache kernel: [   16.796470] type=1400 audit(1386324758.850:11): apparmor="STATUS" operation="profile_load" name="/usr/sbin/tcpdump" pid=987 comm="apparmor_parser"
Dec  6 16:10:23 cache kernel: [ 1681.032995] squid3[1057]: segfault at a7c20 ip 00007fb8d6335e86 sp 00007fff8da2ad00 error 4 in squid3[7fb8d6170000+2ee000]
Dec  6 16:26:37 cache kernel: [ 2653.864574] e1000e 0000:00:19.0 eth0: Detected Hardware Unit Hang:
Dec  6 16:26:37 cache kernel: [ 2653.864574]   TDH                  <5c>
Dec  6 16:26:37 cache kernel: [ 2653.864574]   TDT                  <db>
Dec  6 16:26:37 cache kernel: [ 2653.864574]   next_to_use          <db>
Dec  6 16:26:37 cache kernel: [ 2653.864574]   next_to_clean        <5a>
Dec  6 16:26:37 cache kernel: [ 2653.864574] buffer_info[next_to_clean]:
Dec  6 16:26:37 cache kernel: [ 2653.864574]   time_stamp           <10008fa8f>
Dec  6 16:26:37 cache kernel: [ 2653.864574]   next_to_watch        <5c>
Dec  6 16:26:37 cache kernel: [ 2653.864574]   jiffies              <10008fba1>
Dec  6 16:26:37 cache kernel: [ 2653.864574]   next_to_watch.status <0>
Dec  6 16:26:37 cache kernel: [ 2653.864574] MAC Status             <80083>
Dec  6 16:26:37 cache kernel: [ 2653.864574] PHY Status             <796d>
Dec  6 16:26:37 cache kernel: [ 2653.864574] PHY 1000BASE-T Status  <7800>
Dec  6 16:26:37 cache kernel: [ 2653.864574] PHY Extended Status    <3000>
Dec  6 16:26:37 cache kernel: [ 2653.864574] PCI Status             <10>
Dec  6 16:26:39 cache kernel: [ 2655.863763] e1000e 0000:00:19.0 eth0: Detected Hardware Unit Hang:
Dec  6 16:26:39 cache kernel: [ 2655.863763]   TDH                  <5c>
Dec  6 16:26:39 cache kernel: [ 2655.863763]   TDT                  <db>
Dec  6 16:26:39 cache kernel: [ 2655.863763]   next_to_use          <db>
Dec  6 16:26:39 cache kernel: [ 2655.863763]   next_to_clean        <5a>
Dec  6 16:26:39 cache kernel: [ 2655.863763] buffer_info[next_to_clean]:
Dec  6 16:26:39 cache kernel: [ 2655.863763]   time_stamp           <10008fa8f>
Dec  6 16:26:39 cache kernel: [ 2655.863763]   next_to_watch        <5c>
Dec  6 16:26:39 cache kernel: [ 2655.863763]   jiffies              <10008fd95>
Dec  6 16:26:39 cache kernel: [ 2655.863763]   next_to_watch.status <0>
Dec  6 16:26:39 cache kernel: [ 2655.863763] MAC Status             <80083>
Dec  6 16:26:39 cache kernel: [ 2655.863763] PHY Status             <796d>
Dec  6 16:26:39 cache kernel: [ 2655.863763] PHY 1000BASE-T Status  <7800>
Dec  6 16:26:39 cache kernel: [ 2655.863763] PHY Extended Status    <3000>
Dec  6 16:26:39 cache kernel: [ 2655.863763] PCI Status             <10>
Dec  6 16:26:41 cache kernel: [ 2657.862952] e1000e 0000:00:19.0 eth0: Detected Hardware Unit Hang:
Dec  6 16:26:41 cache kernel: [ 2657.862952]   TDH                  <5c>
Dec  6 16:26:41 cache kernel: [ 2657.862952]   TDT                  <db>
Dec  6 16:26:41 cache kernel: [ 2657.862952]   next_to_use          <db>
Dec  6 16:26:41 cache kernel: [ 2657.862952]   next_to_clean        <5a>
Dec  6 16:26:41 cache kernel: [ 2657.862952] buffer_info[next_to_clean]:
Dec  6 16:26:41 cache kernel: [ 2657.862952]   time_stamp           <10008fa8f>
Dec  6 16:26:41 cache kernel: [ 2657.862952]   next_to_watch        <5c>
Dec  6 16:26:41 cache kernel: [ 2657.862952]   jiffies              <10008ff89>
Dec  6 16:26:41 cache kernel: [ 2657.862952]   next_to_watch.status <0>
Dec  6 16:26:41 cache kernel: [ 2657.862952] MAC Status             <80083>
Dec  6 16:26:41 cache kernel: [ 2657.862952] PHY Status             <796d>
Dec  6 16:26:41 cache kernel: [ 2657.862952] PHY 1000BASE-T Status  <7800>
Dec  6 16:26:41 cache kernel: [ 2657.862952] PHY Extended Status    <3000>
Dec  6 16:26:41 cache kernel: [ 2657.862952] PCI Status             <10>
Dec  6 16:26:43 cache kernel: [ 2659.862151] e1000e 0000:00:19.0 eth0: Detected Hardware Unit Hang:
Dec  6 16:26:43 cache kernel: [ 2659.862151]   TDH                  <5c>
Dec  6 16:26:43 cache kernel: [ 2659.862151]   TDT                  <db>
Dec  6 16:26:43 cache kernel: [ 2659.862151]   next_to_use          <db>
Dec  6 16:26:43 cache kernel: [ 2659.862151]   next_to_clean        <5a>
Dec  6 16:26:43 cache kernel: [ 2659.862151] buffer_info[next_to_clean]:
Dec  6 16:26:43 cache kernel: [ 2659.862151]   time_stamp           <10008fa8f>
Dec  6 16:26:43 cache kernel: [ 2659.862151]   next_to_watch        <5c>
Dec  6 16:26:43 cache kernel: [ 2659.862151]   jiffies              <10009017d>
Dec  6 16:26:43 cache kernel: [ 2659.862151]   next_to_watch.status <0>
Dec  6 16:26:43 cache kernel: [ 2659.862151] MAC Status             <80083>
Dec  6 16:26:43 cache kernel: [ 2659.862151] PHY Status             <796d>
Dec  6 16:26:43 cache kernel: [ 2659.862151] PHY 1000BASE-T Status  <7800>
Dec  6 16:26:43 cache kernel: [ 2659.862151] PHY Extended Status    <3000>
Dec  6 16:26:43 cache kernel: [ 2659.862151] PCI Status             <10>
Dec  6 16:26:44 cache kernel: [ 2660.864354] ------------[ cut here ]------------
Dec  6 16:26:44 cache kernel: [ 2660.864371] WARNING: at /build/buildd/linux-lts-raring-3.8.0/net/sched/sch_generic.c:254 dev_watchdog+0x262/0x270()
Dec  6 16:26:44 cache kernel: [ 2660.864375] Hardware name:         
Dec  6 16:26:44 cache kernel: [ 2660.864379] NETDEV WATCHDOG: eth0 (e1000e): transmit queue 0 timed out
Dec  6 16:26:44 cache kernel: [ 2660.864382] Modules linked in: iptable_filter(F) xt_tcpudp(F) xt_TPROXY(F) nf_tproxy_core(F) xt_socket(F) nf_defrag_ipv6(F) xt_mark(F) iptable_mangle(F) iptable_nat(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) nf_nat_ipv4(F) nf_nat(F) nf_conntrack(F) ip_tables(F) x_tables(F) coretemp(F) kvm_intel(F) kvm(F) snd_hda_codec_realtek(F) i915(F) snd_hda_codec_hdmi(F) ghash_clmulni_intel(F) snd_hda_intel(F) snd_hda_codec(F) aesni_intel(F) ablk_helper(F) cryptd(F) snd_hwdep(F) lrw(F) snd_pcm(F) aes_x86_64(F) drm_kms_helper(F) psmouse(F) drm(F) xts(F) gf128mul(F) snd_timer(F) snd(F) mei(F) i2c_algo_bit(F) serio_raw(F) joydev(F) mac_hid(F) microcode(F) soundcore(F) video(F) snd_page_alloc(F) lpc_ich(F) lp(F) parport(F) ext2(F) hid_generic(F) usbhid(F) hid(F) ahci(F) e1000e(F) libahci(F)
Dec  6 16:26:44 cache kernel: [ 2660.864463] Pid: 0, comm: swapper/0 Tainted: GF            3.8.0-29-generic #42~precise1-Ubuntu
Dec  6 16:26:44 cache kernel: [ 2660.864466] Call Trace:
Dec  6 16:26:44 cache kernel: [ 2660.864470]  <IRQ>  [<ffffffff81059b0f>] warn_slowpath_common+0x7f/0xc0
Dec  6 16:26:44 cache kernel: [ 2660.864489]  [<ffffffff81059c06>] warn_slowpath_fmt+0x46/0x50
Dec  6 16:26:44 cache kernel: [ 2660.864522]  [<ffffffffa031dca1>] ? pvclock_gtod_notify+0x11/0x50 [kvm]
Dec  6 16:26:44 cache kernel: [ 2660.864532]  [<ffffffff816f7fdd>] ? notifier_call_chain+0x4d/0x70
Dec  6 16:26:44 cache kernel: [ 2660.864540]  [<ffffffff81602062>] dev_watchdog+0x262/0x270
Dec  6 16:26:44 cache kernel: [ 2660.864549]  [<ffffffff8109c79c>] ? trigger_load_balance+0x6c/0x210
Dec  6 16:26:44 cache kernel: [ 2660.864554]  [<ffffffff81601e00>] ? pfifo_fast_dequeue+0xe0/0xe0
Dec  6 16:26:44 cache kernel: [ 2660.864564]  [<ffffffff8106995b>] call_timer_fn+0x3b/0x150
Dec  6 16:26:44 cache kernel: [ 2660.864573]  [<ffffffff8106b427>] run_timer_softirq+0x267/0x2c0
Dec  6 16:26:44 cache kernel: [ 2660.864580]  [<ffffffff8135b9d4>] ? timerqueue_add+0x64/0xb0
Dec  6 16:26:44 cache kernel: [ 2660.864585]  [<ffffffff81601e00>] ? pfifo_fast_dequeue+0xe0/0xe0
Dec  6 16:26:44 cache kernel: [ 2660.864593]  [<ffffffff810ae974>] ? ktime_get+0x54/0xe0
Dec  6 16:26:44 cache kernel: [ 2660.864599]  [<ffffffff81062620>] __do_softirq+0xc0/0x240
Dec  6 16:26:44 cache kernel: [ 2660.864609]  [<ffffffff810b6504>] ? tick_program_event+0x24/0x30
Dec  6 16:26:44 cache kernel: [ 2660.864617]  [<ffffffff816fdd5c>] call_softirq+0x1c/0x30
Dec  6 16:26:44 cache kernel: [ 2660.864628]  [<ffffffff81016775>] do_softirq+0x65/0xa0
Dec  6 16:26:44 cache kernel: [ 2660.864633]  [<ffffffff810628fe>] irq_exit+0x8e/0xb0
Dec  6 16:26:44 cache kernel: [ 2660.864641]  [<ffffffff816fe6de>] smp_apic_timer_interrupt+0x6e/0x99
Dec  6 16:26:44 cache kernel: [ 2660.864648]  [<ffffffff816fd61d>] apic_timer_interrupt+0x6d/0x80
Dec  6 16:26:44 cache kernel: [ 2660.864651]  <EOI>  [<ffffffff8158b6c3>] ? cpuidle_wrap_enter+0x53/0xa0
Dec  6 16:26:44 cache kernel: [ 2660.864663]  [<ffffffff8158b6b9>] ? cpuidle_wrap_enter+0x49/0xa0
Dec  6 16:26:44 cache kernel: [ 2660.864668]  [<ffffffff8158b720>] cpuidle_enter_tk+0x10/0x20
Dec  6 16:26:44 cache kernel: [ 2660.864674]  [<ffffffff8158b2df>] cpuidle_idle_call+0xaf/0x2b0
Dec  6 16:26:44 cache kernel: [ 2660.864682]  [<ffffffff8101dacf>] cpu_idle+0xcf/0x120
Dec  6 16:26:44 cache kernel: [ 2660.864692]  [<ffffffff816c6db2>] rest_init+0x72/0x80
Dec  6 16:26:44 cache kernel: [ 2660.864700]  [<ffffffff81d05c4f>] start_kernel+0x3d1/0x3de
Dec  6 16:26:44 cache kernel: [ 2660.864707]  [<ffffffff81d057ff>] ? pass_bootoption.constprop.2+0xd3/0xd3
Dec  6 16:26:44 cache kernel: [ 2660.864715]  [<ffffffff81d05397>] x86_64_start_reservations+0x131/0x135
Dec  6 16:26:44 cache kernel: [ 2660.864722]  [<ffffffff81d05120>] ? early_idt_handlers+0x120/0x120
Dec  6 16:26:44 cache kernel: [ 2660.864728]  [<ffffffff81d05468>] x86_64_start_kernel+0xcd/0xdc
Dec  6 16:26:44 cache kernel: [ 2660.864732] ---[ end trace 2ad7fa920b250eee ]---
Dec  6 16:26:44 cache kernel: [ 2660.864763] e1000e 0000:00:19.0 eth0: Reset adapter
Dec  6 16:26:47 cache kernel: [ 2663.800396] e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
Dec  6 16:26:53 cache kernel: [ 2669.753335] e1000e: eth0 NIC Link is Down
Dec  6 16:26:55 cache kernel: [ 2672.601202] e1000e: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx
Dec  6 16:27:05 cache kernel: [ 2682.744521] e1000e: eth0 NIC Link is Down

disabling & unpluggin doesn't work it out untill i reboot

Stillhard · Fri Dec 06, 2013 11:44 pm

I wrote to support@ a few times for the last years, no reaction

you've been so quite lately cupa, no wonder...

tom211 · Sat Dec 07, 2013 12:14 am

I am using two CRS since two weeks, they are configured as follows:

Notebooks / PC ---- CRS1 ==== Bonding/VLAN ==== CRS2 ---- some Synology DiskStations

This week, I upgraded to v6.7, but performance is just bad. On 6.6 you could get around 40 MB/s according to Windows Explorer if file were copied to the DiskStation, but on 6.7 it is only around 2 MB/s.

Bonding config:

/interface> bonding print 
Flags: X - disabled, R - running 
 0  R name="bonding1" mtu=1500 mac-address=D4:CA:6D:FA:09:D5 arp=enabled slaves=ether23-lag,ether24-lag mode=balance-rr primary=none link-monitoring=mii arp-interval=100ms 
      arp-ip-targets="" mii-interval=100ms down-delay=0ms up-delay=0ms lacp-rate=30secs transmit-hash-policy=layer-2

VLAN:

/interface vlan print 
Flags: X - disabled, R - running, S - slave 
 #    NAME                                                                     MTU ARP        VLAN-ID INTERFACE                                                                  
 0 R  bonding-vlan1                                                           1500 enabled          1 bonding1                                                                   
 1 R  vlan1                                                                   1500 enabled          1 ether2-master                                                              
 2 R  vlan49                                                                  1500 enabled         49 ether2-master                                                              
 3 R  vlan100                                                                 1500 enabled        100 ether2-master                                                              
 4 R  vlan200                                                                 1500 enabled        200 ether2-master

Bridge:

/interface bridge print 
Flags: X - disabled, R - running 
 0  R name="bridge1" mtu=1500 l2mtu=1584 arp=enabled mac-address=D4:CA:6D:FA:09:C0 protocol-mode=none priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00 
      max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m 

 1  R name="bridge49" mtu=1500 l2mtu=1584 arp=enabled mac-address=D4:CA:6D:FA:09:C0 protocol-mode=none priority=0x8000 auto-mac=yes admin-mac=00:00:00:00:00:00 
      max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m
	  
	  
/interface bridge port print 
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE                                                               BRIDGE                                                               PRIORITY  PATH-COST    HORIZON
 0    vlan1                                                                   bridge1                                                                  0x80         10       none
 1    bonding-vlan1                                                           bridge1                                                                  0x80         10       none
 2    ether9                                                                  bridge1                                                                  0x80         10       none
 3    vlan49                                                                  bridge49                                                                 0x80         10       none
 4    ether3-tk                                                               bridge49                                                                 0x80         10       none

Any information how to get back to "the old speed"?
Thanks in advance

ddejager · Sat Dec 07, 2013 4:25 am

More significantly every time I view the QuickSet screen on the 711-5HnD, CPU immediately goes to 100% with all available CPU being consumed by winbox (according to profile). If I view it by logging in to Webfig, the CPU stays at 100% until reboot. If I view QuickSet via winbox, the CPU goes to 100% and the winbox session is disconnected. Connecting again shows that the CPU consumed by winbox is then at least 30% even if webfig is not opened again. The problem seems to remain until rebooted.

I do not observe the CPU issue on either the STX R2-5nD or the 711GA-5Hnd
Could you please make a support output file at the time when you see that CPU usage at 100% all the time? Send it to support@mikrotik.com

Done. After I finally was able to generate a supout file, the router continued to go nuts and eventually generated an autosupout file having run out of memory 5 minutes later. I sent both files.

steen · Sat Dec 07, 2013 5:26 pm

Hello Folks!

We successfully upgraded all our devices to 6.7.
RB711,RB411,RB333,RB600,CCR1016,RB750,SEXTANT,SXT,RB2011UAS
No problems so far, all working exactly like before.

A small tip for you with ethernet ports on CCR1016, that suddenly is disabled, it came from MT support a while ago.
Disable LCD,Disable SNMP
Our CCR has been running without any problems after that.

ojsa · Sun Dec 08, 2013 4:05 am

6.7 contained new Poe Firmware for devices with Poe-out possibilities, is the "poe-upgrade" future removed?

"/interface ethernet poe settings upgrade" command - does not seem to work..

Is it automaticly.??

ojsa · Sun Dec 08, 2013 4:35 am

Upgraded RB333, RB411, RB433*, Omnitik, CCR. RB2011*, SXT and other than my last post about the missing poe upgrade function it seems to work without problems. Even my old dude installation is running like a charm, but I would love to see some development on the dude server soon.?

Everything is routing nice, cutomer vpls is running like expected, bgp for vpls signaling and the core mpls network is rock steady, and the pppoe solution works.

Finally on version 6, I have everything on the same release version.

Good work with the bugfixes on this release MT.

gizmoss · Sun Dec 08, 2013 2:11 pm

Rb 133 ether 1= WAN, bridge ether2 + wlan1, NAT, 10 queue, clasic router setup. wlan1 cenected only to other mt rb 220 in bridge mode, the signal -45/-45 (RB 220 works ok at 5:25 and 6.7)
5:26 OK

6.6 and 6.7 the same configuring rb 133 (tried WDS, station, mpls, rstp on bridge no difference)
Less CPU usage, greater throughput is possible but sometimes crazy flow (continuous ping from 150 to 1500 at all addresses after the bridge in all directions and towards WAN Internet while CPU is normal). Sometimes it happens after a reboot usually happens when the flow in the direction of vlan- ether2 and ether2-WAN (flow through the bridge interface) while in the case of flow vlan-wan (no flow through the bridge interface i guess fastpath) everything works ok. It is the flow rate of 1 mbps to 4.5 mbps and CPU is always normal. It happens often and prevents you from using the Internet because the speed of the net is reduced to 1/10 and lasts until reboot or interruption and the lowest flow of data.

used google translate

Mon Dec 09, 2013 10:25 am

Hello Folks!

We successfully upgraded all our devices to 6.7.
RB711,RB411,RB333,RB600,CCR1016,RB750,SEXTANT,SXT,RB2011UAS
No problems so far, all working exactly like before.

A small tip for you with ethernet ports on CCR1016, that suddenly is disabled, it came from MT support a while ago.
Disable LCD,Disable SNMP
Our CCR has been running without any problems after that.

Did you notice any changes in wireless/nv2?

scampbell · Tue Dec 10, 2013 6:47 am

ip->firewall->Service Ports are shown as invalid (I) in case "tracking set enabled=no"
Anybody can confirm this (you have to reboot router to replicate this)?
Is that OK or minor bug?
This is supposed to be so. NAT helpers will not work without connection tracking.

I note that if you specify a port for the H323 service it goes invalid. Clearing the port setting fixes it.

bjorncmtec · Tue Dec 10, 2013 8:07 am

Since upgrading my CCR to 6.7 ovpn server is not working for 90% of my connections.

I get the following message

This is a serious problem!

Jetrider · Tue Dec 10, 2013 10:43 am

We are experiencing weird DHCP problems on our VLAN interfaces. Sent mail to support, will see what happens. Downgraded to v6.5.

janisk · Tue Dec 10, 2013 11:49 am

to what interface these VLANs are attached that you are experiencing problems with?

Jetrider · Tue Dec 10, 2013 12:37 pm

to what interface these VLANs are attached that you are experiencing problems with?

Them be attached to plain gigabit ethernet, nothing fancy. Problem appeared to be random, as those VLANs attached to different ethernet interface seemed to be OK. Our whole network is depending on that CCR, did not have much time to fiddle around, already got my arse spanked because of this

steen · Tue Dec 10, 2013 1:25 pm

Hello Folks!

We successfully upgraded all our devices to 6.7.
RB711,RB411,RB333,RB600,CCR1016,RB750,SEXTANT,SXT,RB2011UAS
No problems so far, all working exactly like before.

A small tip for you with ethernet ports on CCR1016, that suddenly is disabled, it came from MT support a while ago.
Disable LCD,Disable SNMP
Our CCR has been running without any problems after that.
Did you notice any changes in wireless/nv2?

Observations: nv2 lower ping times and better CCQ. The "speed" is the same, our RB411 devices maxes out as usual around 20-30Mbit/s, and SXT/Sextant around 35-40Mbit/s. The wireless networks are using R52 radio boards in basestations.

p00h · Tue Dec 10, 2013 4:58 pm

I can confirm unxpected behavior as of http://forum.mikrotik.com/viewtopic.php ... 50#p399557
I have a RB1100AHx2 as openvpn server and after 6.6=>6.7 upgrade a lot of connections have not been able to work.
Problems also have been noticed with PPTP server at the same router. Unfortunately this is critical mainframe so i had to downgrade and had no time to test.

tomaskir · Tue Dec 10, 2013 7:23 pm

Did you notice any changes in wireless/nv2?
Observations: nv2 lower ping times and better CCQ. The "speed" is the same, our RB411 devices maxes out as usual around 20-30Mbit/s, and SXT/Sextant around 35-40Mbit/s. The wireless networks are using R52 radio boards in basestations.

After seeing good feedback in this topic, I upgraded one leg of our network to 6.7 - consisting of multiple kinds of SXTs, some 951Gs, 2011s, OmniTiks and x86s.
All together, about 20 routers, APs and clients upgraded.

No problems, and good improvement on NV2. We are in a very noisy enviroment with lots of interference.
CCQ went up, less latency spikes, over-all latency the same. However, our backhaul went up from 80mbit to 120mbit real traffic peak.
This suggests some work on nv2, it now behaves better when there is interference.

Not sure if this was in this version directly, before we were running this leg of the network on 6.1/6.2.

Nice improvement to nv2, thank you MikroTik!!!

TerAnYu · Wed Dec 11, 2013 12:08 pm

In any attempt to configure IPsec, an error occurs (when the policies):

echo: ipsec, warning, critical failed to begin ipsec sa negotiation.

Even if not configured on the other side ipsec.

Wed Dec 11, 2013 12:08 pm

In any attempt to configure IPsec, an error occurs (when the policies):
Code: Select all
echo: ipsec, warning, critical failed to begin ipsec sa negotiation.
Even if not configured on the other side ipsec.

Start by upgrading from v6.3 to v6.7

TerAnYu · Wed Dec 11, 2013 12:10 pm

In any attempt to configure IPsec, an error occurs (when the policies):
Code: Select all
echo: ipsec, warning, critical failed to begin ipsec sa negotiation.
Even if not configured on the other side ipsec.
Start by upgrading from v6.3 to v6.7

No, I forgot to update signature.

Continually updated as soon as new versions come out.

P.S.
I'm sorry, I'm stupid

It was necessary to allow the encryption methods on the same page as peer and proposal.
All earned.

littlebill · Wed Dec 11, 2013 6:21 pm

appears simple que green/yellow/red are not changing colors in winbox when hitting the que wall..

any update on ups?

miszak · Wed Dec 11, 2013 9:26 pm

I've a connection of IPsec-based RSA keys between RB493G (iOS 6.7) and RB1000 (IOS 5.21), after a few hours of inactivity the connection is closed. I have set "Livetime" 5d. In earlier versions 6,x is not a problem with IPsec.

littlebill · Wed Dec 11, 2013 9:38 pm

using channel 2452 on 802.11 with 40w/Above Completely breaks wireless on 2011 2hiD

this was confirmed after ordering a new one with same config and crashed the new one as well.

moving router to channel1 and or 11, makes wireless work again.

thus 2 2011 confirmed with this issue

Thu Dec 12, 2013 11:18 am

using channel 2452 on 802.11 with 40w/Above Completely breaks wireless on 2011 2hiD

this was confirmed after ordering a new one with same config and crashed the new one as well.

moving router to channel1 and or 11, makes wireless work again.

thus 2 2011 confirmed with this issue

using 20mhz channel width also gives you the same problems?
When using channel11 and 20/40mhz-above does the wireless clients uses 40mhz channel width?
Have you tried to reset the wireless interface configuration to default and check again?

patrickmkt · Thu Dec 12, 2013 4:50 pm

I got a new issue with 6.7 on a RB1100ah. Never had that problem before.
When connecting with winbox, some of my firewalls rules are red with unknown interface, some ppp connection disappeared from the list, etc...
That's the second time I see it happened over a two weeks period.
When I reboot the router, everything is back to normal.

Next time, I'll log in via terminal to check if it's a winbox bug or if the same errors are shown in the router config.

solaoxo · Thu Dec 12, 2013 5:29 pm

Web proxy can only use the default gateway, also can add the account password verification?

littlebill · Fri Dec 13, 2013 4:50 am

using channel 2452 on 802.11 with 40w/Above Completely breaks wireless on 2011 2hiD

this was confirmed after ordering a new one with same config and crashed the new one as well.

moving router to channel1 and or 11, makes wireless work again.

thus 2 2011 confirmed with this issue
using 20mhz channel width also gives you the same problems?
When using channel11 and 20/40mhz-above does the wireless clients uses 40mhz channel width?

20mhz did not fix the issue at the time. the clients would barely connect before they would drop. it was a multitude of devices at least 10, none would connect, sometimes ssid wouldn't even show. it had worked for weeks on 6.6

even netinstalling and default config, caused the same issues, i never changed channels(dumb) since it was working thought it was a hardware failure. so did support

so i ordered a new one, and it crashed as well, before rmaing the old i switched channels and the old router worked perfect.

i never attempted channel 11 uper, only below

evharten · Sat Dec 14, 2013 5:32 am

My brand new CCR1036-8G-2S+EM arrived today and upgraded from v6.1 to v6.7. Now fans are still spinning up and down, up and down continuously. The fans control mode is set to automatic. Is this normal ?
I am new to the Mikrotik game, so can't say if this is normal. However, I did notice something similar with my RB100xAH2 after going from 6.6 to 6.7. I noticed the fan sound more and it sounded like it was revving higher. Since it will be in a rack, I didn't spend a lot of time monitoring it.

In /System Health, I am seeing RPMs varying between 600-800 at a temp of 23c. There is no traffic going through the box other than a Winbox connection to monitor it. Fan is set to auto.

CCR1016-12G in my case.
Can confirm the same here, 6.7 fans spin up to about 4000-5000 RPM then suddently its silent, and speed is 0 RPM, few seconds and then it spins up again. and he keeps doing this.

As addenum:

set fan-mode=manual
set fan-switch=off

Doesnt work, it just keep doing the same auto function.

tkgit · Sun Dec 15, 2013 8:41 pm

when a user login & authenticate in hospot, then want to view user status or logout, user can not access status.html or logout.html , error message : error 404 not found , why?

DogHead · Mon Dec 16, 2013 3:08 am

With OPENVPN we found that key exchange is not working properly when choosing AES192 or 256. If on the server you select ANY, then the system figures out which key length to apply to connections. We used 192 bit keys. This appears to be a new automatic feature that works, while manual settings fail.

At least you can get your connections up, even the method makes no sense.

doneware · Mon Dec 16, 2013 11:48 am

Is it possible if i upgrade from ROS V5.26 to ROS v6.7 directly ?
yes!

strange. just upgraded 2 RB2011RM-s, both of them were running 5.24.
both of them died on the spot.

the config was plain and very simple, just a static default and a fixed ip address on eth1.
no fw, no nothing. ok, i had to admit, both had dude4.0b3 installed and enabled on them.

one was able to boot, and ssh was connecting, but after authentication (or better said after 10-15 seconds if i did
not try to ssh in it) it rebooted itself. routerboot was upgraded to 3.10 before the upgrade.
and it just went up and down, in infinite loop. even the console was nothing of use, cause after the password
prompt it just rebooted.
i had to netinstall, and then it came back to life. (which involved a lot of runaround with some windows laptop though)

the second one was stopped at "loading kernel". i power cycled it, and it booted perfectly.

in both cases i had remote access via console, but it didn't help lot

BTW: is there a way to boot routerOS from a tftp server using dhcp? i successfully assigned ip address using dhcp to
the rebooted device, also sent the DHCP server parameters, but it always looked for "vmlinux". and i did not found
any way to somehow extract it any of the .npk files.

or is it just the netinstall tool running on windows, my last hope for survival?
it's probably just me only, but i don't have windows installations floating around my production network, accessible from the local L2,
i rather do stuff from *nix. and yes, i thing wine and lookalikes are a real PITA.

wouldn't be possible to offer a standalone bootable kernel with embedded ramdisk only capable for some ip host operations and a tftp/ftp/http client?
and then: dhcp to get IP, tftp to boot this "bootstrap kernel" from a DHCP option specified TFTP server, through the console
access the device, set temporary IP, download via tftp/ftp/http, then reboot.

arturw · Mon Dec 16, 2013 1:23 pm

There is a problem with ROS 6.x and dude 4.03beta on RB2011. I have tested few times scenario like this:
1. Clean Netinstal routerOS 6.7 (tried with ROS 6.1 too, same result).
2. simple config with NAT and two interfaces.
3. restart.
4. put dude package in to router.
5. restart.
6. It looks that all wokrs fine, NAT working, you can log in to dude as well. But...
7. System->restart - it is ok.
8. System->Shutdown - and you've got error. Your RB2011 is broke now. You can't up your router because it reboots all the time. You need to make Netinstall and start againt.

So you can't run dude package on RB2011 with ROS 6.x

. I'm not sure if is there any version of ROS working well with dude 4.03beta.

Mikrotik, please update Dude! We love Dude and we need it (propably we need it more than SMB and other features like this).
We need Mikrotik because of your simple interface GUI and great idea.

We need Dude to know that our Mikrotik are working fine

.

voxframe · Mon Dec 16, 2013 2:47 pm

+1

I realize this is not the appropriate thread for Dude talk... But man you guys need to get working on the Dude. You promised you would/are and yet there is no visible progress in years. Solidify ROS, and then please put some serious resources into the Dude.

bjorncmtec · Tue Dec 17, 2013 5:04 pm

+1 voxframe

ddejager · Wed Dec 18, 2013 2:32 am

Mikrotik Support confirmed the problem below and said they will try to fix it in the next release.

More significantly every time I view the QuickSet screen on the 711-5HnD, CPU immediately goes to 100% with all available CPU being consumed by winbox (according to profile). If I view it by logging in to Webfig, the CPU stays at 100% until reboot. If I view QuickSet via winbox, the CPU goes to 100% and the winbox session is disconnected. Connecting again shows that the CPU consumed by winbox is then at least 30% even if webfig is not opened again. The problem seems to remain until rebooted.

I do not observe the CPU issue on either the STX R2-5nD or the 711GA-5Hnd
Could you please make a support output file at the time when you see that CPU usage at 100% all the time? Send it to support@mikrotik.com

jackwing · Wed Dec 18, 2013 8:43 am

V6.7

VLAN still have problem，it can't be work，but if downgrade to V5.26 , it work

/interface vlan
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0023 use-service-tag=no vlan-id=23
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0002 use-service-tag=no vlan-id=2
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0400 use-service-tag=no vlan-id=400

/ip address
add address=192.168.0.248/16 interface=VLAN0023 network=192.168.0.0
add address=1.0.0.254/24 interface=VLAN0400 network=1.0.0.0
add address=10.1.1.248/24 interface=VLAN0002 network=10.1.1.0

This is the first question

jackwing · Wed Dec 18, 2013 9:19 am

The second question

ethernet bonding at 802.3ad mode not work so good

ROS configuration at V5.26 ：

/interface bonding
add arp=enabled arp-interval=100ms arp-ip-targets="" disabled=no down-delay=0ms lacp-rate=30secs link-monitoring=mii-type2 mii-interval=100ms mode=802.3ad mtu=1500 name=bonding1 primary=none slaves=ether1,ether2 transmit-hash-policy=layer-2-and-3 up-delay=0ms

/interface vlan
add arp=enabled disabled=yes interface=bonding1 mtu=1500 name=VLAN0023 use-service-tag=no vlan-id=23
add arp=enabled disabled=yes interface=bonding1 mtu=1500 name=VLAN0002 use-service-tag=no vlan-id=2
add arp=enabled disabled=yes interface=bonding1 mtu=1500 name=VLAN0400 use-service-tag=no vlan-id=400

（ vlan can't work at V6.7 , so i config the ip at bonding1 for ping test ）

/ip address
add address=192.168.0.248/16 interface=VLAN0023 network=192.168.0.0
add address=1.0.0.254/24 interface=VLAN0400 network=1.0.0.0
add address=10.1.1.248/24 interface=VLAN0002 network=10.1.1.0

cisco switch configuration:

interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 2,23,400
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust

interface GigabitEthernet0/2
switchport trunk encapsulation dot1q
switchport trunk native vlan 2
switchport trunk allowed vlan 1,2,23,400
switchport mode trunk
channel-protocol lacp
channel-group 1 mode active
ip arp inspection trust
ip dhcp snooping trust

interface Port-channel1
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 2,23,400
switchport mode trunk
ip arp inspection trust
ip dhcp snooping trust

here some test

iDen · Wed Dec 18, 2013 9:25 am

+1 for Dude

Especially when Dude is used by person who has nothing to do with Mikrotik devices at all.
Lots of people monitoring their Nets or servers with Dude.

Jetrider · Wed Dec 18, 2013 11:50 am

Heh, now tell me fella, what use is for MT to usar them programmer hours for freeriders pleasure on free product when their flagship product and ROS still runs full of bugs like my ranch neighbor dog ? If anyone asking me, I sure want them to fixar that v6 and CCR issues damn fast instead of fiddling around that advanced pinging toy for "persons who has nothing to do with Mikrotik devices at all". I would sure be pissed to know they develop Dude while latest ROS is in such an unstable condition as it is now.

+1 for Dude

Especially when Dude is used by person who has nothing to do with Mikrotik devices at all.
Lots of people monitoring their Nets or servers with Dude.

sankarklm · Wed Dec 18, 2013 2:25 pm

Heh, now tell me fella, what use is for MT to usar them programmer hours for freeriders pleasure on free product when their flagship product and ROS still runs full of bugs like my ranch neighbor dog ? If anyone asking me, I sure want them to fixar that v6 and CCR issues damn fast instead of fiddling around that advanced pinging toy for "persons who has nothing to do with Mikrotik devices at all". I would sure be pissed to know they develop Dude while latest ROS is in such an unstable condition as it is now.

+1 for Dude

Especially when Dude is used by person who has nothing to do with Mikrotik devices at all.
Lots of people monitoring their Nets or servers with Dude.

+10 for Jet Rider., my CCR is giving me nightmares all of sudden packet drops appears vanishes within minutes.Overall browsing download experience is poor.

iDen · Wed Dec 18, 2013 6:26 pm

off course FIRST OF ALL something should be done with RoS especially on CCRs as soon as possible.
But I want to share some of my experince...
I have 3 CCRs serving core net. 2 of them serving my net for 500 users and last one serving separate plain net for 200 users.
in plain i mean that it has no mangle, no special filters, no queue tree, nothing except simple queue and masquerade.
untill 6.7 i was crying like lil girl. very often I had to wake up during midnight coz of some horrors with CCR!

But right now they become lil bit more stable!
Only separate one left with very strange problem. while doing something on router like disabling/enabling address in address list.
it stops queuing, stops accepting or passing through traffic.

Heh, now tell me fella, what use is for MT to usar them programmer hours for freeriders pleasure on free product when their flagship product and ROS still runs full of bugs like my ranch neighbor dog ? If anyone asking me, I sure want them to fixar that v6 and CCR issues damn fast instead of fiddling around that advanced pinging toy for "persons who has nothing to do with Mikrotik devices at all". I would sure be pissed to know they develop Dude while latest ROS is in such an unstable condition as it is now.

+1 for Dude

Especially when Dude is used by person who has nothing to do with Mikrotik devices at all.
Lots of people monitoring their Nets or servers with Dude.

PrSliCa · Wed Dec 18, 2013 9:19 pm

To add some strange bug in logs:

Settings:
wlan1: bridge, ssid: link-brdo, 2 x N, nstreme
wlan2: bridge, ssid: link-brdo-2, 2 x N, nstreme

While all interface connected (19:24):

19:24:04 wireless,info link-brdo-2: data from unknown device 00:00:00:15:6D:84, sent deauth
19:42:53 wireless,info 00:15:6D:84:5B:F3@link-brdo: disconnected, too many poll timeouts
19:42:54 wireless,info 00:15:6D:84:5B:F3@link-brdo: connected, wants bridge

There is no disconnection or anything...

Also (second bug):
20:18:39 system,info device changed by halen
20:18:40 wireless,info 00:15:6D:84:5C:06@link-kladovo established connection on 5715000, SSID elite-ptp0

Frequency is 5715... but log shows something else....

tkgit · Wed Dec 18, 2013 10:26 pm

in my 450g :
-multi parent can't be implemented in queue simple
-flappy interface if running vlan

lima7 · Thu Dec 19, 2013 8:17 am

All routes with routing mark is down after upgrade from 6.6 to 6.7, remove the routing mark will make route establish

igor88 · Thu Dec 19, 2013 12:18 pm

are there wifi power control in 6x ? i am still on 5x

i am tired that my telephone disconnects every 30 seconds..

Thu Dec 19, 2013 12:38 pm

lima7, please contact support@mikrotik.com and attach a support output file where you have those non working routing-marks.

Thu Dec 19, 2013 12:59 pm

V6.7

VLAN still have problem，it can't be work，but if downgrade to V5.26 , it work

/interface vlan
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0023 use-service-tag=no vlan-id=23
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0002 use-service-tag=no vlan-id=2
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0400 use-service-tag=no vlan-id=400

/ip address
add address=192.168.0.248/16 interface=VLAN0023 network=192.168.0.0
add address=1.0.0.254/24 interface=VLAN0400 network=1.0.0.0
add address=10.1.1.248/24 interface=VLAN0002 network=10.1.1.0

This is the first question

Please clarify your question. At your setup above VLANs interfaces are disabled.

linek1980 · Thu Dec 19, 2013 1:54 pm

quickset is broken in ROS 6.8RC . Even demo.mt.lv not work "ERROR: Internal Server Error"

Thu Dec 19, 2013 1:56 pm

quickset is broken in ROS 6.8RC . Even demo.mt.lv not work "ERROR: Internal Server Error"

known issue, thanks!

brainy · Thu Dec 19, 2013 5:27 pm

We have big problems with DHCP Server with 6.7

Today we updated two RB1100AHx2 and one RB2011UAS-RM from 6.1 to 6.7 and notice that the DHCP Server is not working properly.

The server sends IP to the client but without a gateway and nameservers. Also the netmask is wrong (/0!) resulting in clients that do not have internetconnection.

We run the DHCP Server on VLAN and VRRP Interfaces (the vrrp Interfaces are on VLAN interfaces) and the vlan interfaces are on a bonding link.

Anyone else seeing problems with DHCP Server on 6.7?

Regards,
Joerg

tkgit · Fri Dec 20, 2013 3:39 am

All routes with routing mark is down after upgrade from 6.6 to 6.7, remove the routing mark will make route establish

do not use ip-firewall-mangle action mark route,
use route rules in ip-route

Jetrider · Fri Dec 20, 2013 8:27 am

Anyone else seeing problems with DHCP Server on 6.7?

Regards,
Joerg

YES YES YES !!! Finally a friend in my misery !
I have CCR gateway, serving around 2k customers and after upgrade this problem hit me right in the face first thing in the morning upon DHCP lease refresh. I notified MT about this problem, they shoved me off as I was unable to send them supout (I am not willing to fiddle around one huge running environment gateway just to provide them supout). Hope YOU can send them that supout so they figure it out, seems noone there bothers to move an arse or replicate situation without them supout file.

tkgit · Fri Dec 20, 2013 8:33 am

Anyone else seeing problems with DHCP Server on 6.7?

Regards,
Joerg
YES YES YES !!! Finally a friend in my misery !
I have CCR gateway, serving around 2k customers and after upgrade this problem hit me right in the face first thing in the morning upon DHCP lease refresh. I notified MT about this problem, they shoved me off as I was unable to send them supout (I am not willing to fiddle around one huge running environment gateway just to provide them supout). Hope YOU can send them that supout so they figure it out, seems noone there bothers to move an arse or replicate situation without them supout file.

do you use vlan in dhcp server interface?

Jetrider · Fri Dec 20, 2013 8:55 am

do you use vlan in dhcp server interface?

Yes.

Fri Dec 20, 2013 5:45 pm

do you use vlan in dhcp server interface?
Yes.

after downgrade to v6.6 it works fine?
We need support output file from your current router - even if it is running v6.6 so we could try to check the configuration and try to reproduce it locally.
We have tested that DHCP server works fine on Vlan interface in CCR running RouteROS v6.7.

evharten · Sat Dec 21, 2013 4:30 am

Anyone else seeing problems with DHCP Server on 6.7?

Regards,
Joerg
YES YES YES !!! Finally a friend in my misery !
I have CCR gateway, serving around 2k customers and after upgrade this problem hit me right in the face first thing in the morning upon DHCP lease refresh. I notified MT about this problem, they shoved me off as I was unable to send them supout (I am not willing to fiddle around one huge running environment gateway just to provide them supout). Hope YOU can send them that supout so they figure it out, seems noone there bothers to move an arse or replicate situation without them supout file.

Creating an supout isnt fiddling, its just an snapshot of all settings and values at that specific time.
I use it quite often myself to view router settings of my customers if they have problems.

Zito · Sun Dec 22, 2013 2:16 pm

The server sends IP to the client but without a gateway and nameservers. Also the netmask is wrong (/0!) resulting in clients that do not have internetconnection

Similar issue here. 10~ dhcp servers on bond interface with 10~vlans physically connected to two HP core switches. Clients got incorrect DHCP ACK only when i enable dhcp-snooping in my network infrastructure(also HP switches). Its not happened in 6.6.

brainy · Sun Dec 22, 2013 6:27 pm

The server sends IP to the client but without a gateway and nameservers. Also the netmask is wrong (/0!) resulting in clients that do not have internetconnection
Similar issue here. 10~ dhcp servers on bond interface with 10~vlans physically connected to two HP core switches. Clients got incorrect DHCP ACK only when i enable dhcp-snooping in my network infrastructure(also HP switches). Its not happened in 6.6.

Hmm, we are using dhcp-snooping also but on Cisco Switches. Maybe this helps MT to find the Problem.

Regards,
Joerg

jackwing · Mon Dec 23, 2013 6:08 pm

V6.7

VLAN still have problem，it can't be work，but if downgrade to V5.26 , it work

/interface vlan
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0023 use-service-tag=no vlan-id=23
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0002 use-service-tag=no vlan-id=2
add arp=enabled disabled=yes interface=eth1 mtu=1500 name=VLAN0400 use-service-tag=no vlan-id=400

/ip address
add address=192.168.0.248/16 interface=VLAN0023 network=192.168.0.0
add address=1.0.0.254/24 interface=VLAN0400 network=1.0.0.0
add address=10.1.1.248/24 interface=VLAN0002 network=10.1.1.0

This is the first question
Please clarify your question. At your setup above VLANs interfaces are disabled.

I’am sorry ,not this problem, vlan is OK, the problem is in DHCP server , DHCP server sends IP to the client took a long time,I don't untherstand why, i thought VLAN still can't work .
if downgrade to V5.26 , DHCP server work so well , client get the ip so quick.

tambu · Tue Dec 24, 2013 12:03 pm

updated the firmware from 6.5 to 6.7 and there was a problem on the equipment SXT r2 5nd, 2nd.
it is impossible to set the option in wireless: tx-power-mode=card-rates

[root@MikroTik] > interface wireless set tx-power-mode=card-rates 
numbers: 0
failure: tx-power-mode not supported
[root@MikroTik] > system routerboard print
       routerboard: yes
             model: SXT 5nD r2
     serial-number: 46AD02AA943A
  current-firmware: 3.10
  upgrade-firmware: 3.10

gizmoss · Wed Dec 25, 2013 1:34 am

Rb 133 ether 1= WAN, bridge ether2 + wlan1, NAT, 10 queue, clasic router setup. wlan1 cenected only to other mt rb 220 in bridge mode, the signal -45/-45 (RB 220 works ok at 5:25 and 6.7)
5:26 OK

6.6 and 6.7 the same configuring rb 133 (tried WDS, station, mpls, rstp on bridge no difference)
Less CPU usage, greater throughput is possible but sometimes crazy flow (continuous ping from 150 to 1500 at all addresses after the bridge in all directions and towards WAN Internet while CPU is normal). Sometimes it happens after a reboot usually happens when the flow in the direction of vlan- ether2 and ether2-WAN (flow through the bridge interface) while in the case of flow vlan-wan (no flow through the bridge interface i guess fastpath) everything works ok. It is the flow rate of 1 mbps to 4.5 mbps and CPU is always normal. It happens often and prevents you from using the Internet because the speed of the net is reduced to 1/10 and lasts until reboot or interruption and the lowest flow of data.

used google translate

Using the DST parameters in simple queues caused this problem in version 6.7. Combination example. dst-ether-1 target IP address led to the collapse of the network while using only the target parameter by IP address works ok but can not be limited by speed particularly ether1 ether2 .... what is possible in the version 5:26 (interface-ether1 dst-ip address).

Begetan · Wed Dec 25, 2013 2:43 am

What's new in 6.7 (2013-Nov-29 13:37):

*) support Android usb tethering interface;

I have a question to mikrotik developers.
Is there any chance to autodetect unknown USB Vendor/type device or it should be specially added by mikrotk developers?

mars · Wed Dec 25, 2013 7:26 am

there is a bug in ros 6.7 causing the tx power setting not to work correctly on the rb911G
card rates can not be set in the tx power
this was working properly in Ros 6.6

honzam · Wed Dec 25, 2013 12:25 pm

there is a bug in ros 6.7 causing the tx power setting not to work correctly on the rb911G
card rates can not be set in the tx power
this was working properly in Ros 6.6

This is not bug. Card rates dont wort on this wireless chipset. You can use All rates fixed

mars · Wed Dec 25, 2013 2:15 pm

yes so i found out later
they should replace the chip and replace the Rb911 for the people who bought it

Łukasz · Thu Dec 26, 2013 4:05 pm

*) poe - new poe controller firmware for RB750UP and OmniTIK UPA;

What gives new controller firmware? Any changelog?

falestiny · Thu Dec 26, 2013 4:06 pm

web proxy is not functioning probably, when it's enabled it does not disabled

Jetrider · Fri Dec 27, 2013 11:11 am

after downgrade to v6.6 it works fine?
We need support output file from your current router - even if it is running v6.6 so we could try to check the configuration and try to reproduce it locally.
We have tested that DHCP server works fine on Vlan interface in CCR running RouteROS v6.7.

We are running v6.5 atm, skipped v6.6. You have my supout with Ticket#2013121066000356. Need me to resend ?

Fri Dec 27, 2013 11:21 am

after downgrade to v6.6 it works fine?
We need support output file from your current router - even if it is running v6.6 so we could try to check the configuration and try to reproduce it locally.
We have tested that DHCP server works fine on Vlan interface in CCR running RouteROS v6.7.
We are running v6.5 atm, skipped v6.6. You have my supout with Ticket#2013121066000356. Need me to resend ?

Ticket 2013121066000356 is already answered. If you still see this problem, please submit a new ticket with detailed info how to reproduce this problem.

karina · Fri Dec 27, 2013 11:57 pm

There is a problem with ROS 6.x and dude 4.03beta on RB2011. I have tested few times scenario like this:
1. Clean Netinstal routerOS 6.7 (tried with ROS 6.1 too, same result).
2. simple config with NAT and two interfaces.
3. restart.
4. put dude package in to router.
5. restart.
6. It looks that all wokrs fine, NAT working, you can log in to dude as well. But...
7. System->restart - it is ok.
8. System->Shutdown - and you've got error. Your RB2011 is broke now. You can't up your router because it reboots all the time. You need to make Netinstall and start againt.

So you can't run dude package on RB2011 with ROS 6.x . I'm not sure if is there any version of ROS working well with dude 4.03beta.

Mikrotik, please update Dude! We love Dude and we need it (propably we need it more than SMB and other features like this).
We need Mikrotik because of your simple interface GUI and great idea.

We need Dude to know that our Mikrotik are working fine .

To be fair the DUDe is not really at its best on a routerboard. very resorce hungry. Far better to install on some old redundant x86 PC running XP or later.

ySgAIsvNBI · Sat Dec 28, 2013 8:00 am

CCR router running ROS v6.7 locked up and stopped forwarding packets after running for about two weeks. It also didn't respond to icmp echo packets.
When connected to console, it was up but the log had hundred lines of BGP connection error messages:

RemoteAddress=xxx.xxx.xxx.xxx
Failed to open TCP connection: No buffer space available

It has simple configurations with a simple queue, a few lines of firewall, no mangle rules and BGP sessions.
Is this a known issue? Anyone else having the same issue?

karina · Sat Dec 28, 2013 11:19 am

CCR router running ROS v6.7 locked up and stopped forwarding packets after running for about two weeks. It also didn't respond to icmp echo packets.
When connected to console, it was up but the log had hundred lines of BGP connection error messages:

RemoteAddress=xxx.xxx.xxx.xxx
Failed to open TCP connection: No buffer space available

It has simple configurations with a simple queue, a few lines of firewall, no mangle rules and BGP sessions.
Is this a known issue? Anyone else having the same issue?

Possible Dos attack of somekind maybe?

ySgAIsvNBI · Sat Dec 28, 2013 1:01 pm

Possible Dos attack of somekind maybe?

CPU load was 0%, traffic was normal but all BGP sessions were down.
It also had firewall rules on input chain filtering tcp port 179 traffic, so only allowed peers could communicate and establish bgp peering.
"/system reboot" fixed the problem.

m3gaman · Sun Dec 29, 2013 2:48 am

On x86, dual port intel(E82571EB) card not working properly on version 6.x(traffic and ping very unstable) on 5.x works fine. Intel 82574L works fine too on 6.x. Onboard broadcom BCM5717 previously not working on 5.x now fine with 6.x.

steen · Sun Dec 29, 2013 7:12 pm

Hello Folks!

After some weeks in production CRS used as a pure switch with no vlans or routing etc. all packages are disabled exept dhcp, security, system and advanced-tools, start to missbehave, very bad customer impact!
Further IP settings are cleared out, it is a switch!
LCD and touchscreen is disabled, snmp is disabled!
All else are factory defaults.
CRS and CCR uses RoS6.7.

What happens is ethernet ports are suddenly disabled, and then seconds after enabled again, sometimes it is switching from 1000Mbit/s to 100Mbit/s and back again, sometimes it stay on the lowe speed till it happens again. Some ports more than other, the bad thing is that whole switch seems to be affected by disturbance on one port, lockouts and slowness in network is experienced when it arrives. Also very fast lockout with no ports down in log, has been detected, for a few seconds and then all working again. Sometimes DNS and DHCP is not passed through properly through the switch from CCR.... found out by analysis via wireshark seeing DHCP req but no reply and same with DNS for periods of several minutes, most likely due to some internal lockups inside the switch.

Also noted that when logged in to CRS all active switchports show the same traffic load, like 24Mbit on all of them, but there is only two ports engaged, strange. Neither can I torch them.

All network cabling is in prime condition and uses CAT6 through out all details, there are patch panels, patch cables also CAT6 plus RJ45 jacks on walls also CAT6 and TP cables to workstations also CAT6. WOkrstations have Gigabit interfaces. It has been running without problems for 2 years using CISCO and HP switches, but after CRS it went not so good.

We have got support from Mikrotik from before on VLAN stuff that did not work as expected and our CCR who also suddenly locked ports etc. CCR is stable after disabling snmp and LCD and touchscreen not a problem found since, but CRS is still making big problems.

Anyone who have suggestion what to do, looks to me like a full rollback on all switches to Cisco+HP again...

balintos · Sun Dec 29, 2013 8:53 pm

Dell 1850 server (Intel PRO/1000): If the IP VLAN is unavailable. Eth's interface is works. ROS 5.xx works, ROS 6.xx does not work.

Same config Dell CS24 (Intel PRO/1000 Ethernet) flawless.

Any idea?
Thank's:
Bálint

lima7 · Mon Dec 30, 2013 6:45 am

added /activated ipsec policies will drop all pppoe connection ( mikrotik 6.7)

David1234 · Mon Dec 30, 2013 12:28 pm

*) leds - inverted modem signal trigger, now it will trigger when the signal level rises above the treshold;

so much useful - you can't understand
Thanks for fix it !

tomaskir · Mon Dec 30, 2013 3:29 pm

added /activated ipsec policies will drop all pppoe connection ( mikrotik 6.7)

I tested this, and cant replicate.

If you can reliably reproduce this, please post the steps.

littlebill · Tue Dec 31, 2013 5:40 am

any update for my tickets in regards to ups issues and led's not working for 10mbit connections?

ununium · Thu Jan 02, 2014 6:32 am

Can confirm that 6.7 still shows signs of flapping on CCR1016.

The behavior:

All interfaces go down for 2 secs and then back up.
Sometimes watchdog activates sometimes it doesn't.

I verified on the interface stats and I didnt see any tx/rx errors.

Minimal traffic going through CCR (16Mb/5Mb) when the problem presented.

bysard · Thu Jan 02, 2014 1:27 pm

Hello Folks!

After some weeks in production CRS used as a pure switch with no vlans or routing etc. all packages are disabled exept dhcp, security, system and advanced-tools, start to missbehave, very bad customer impact!
Further IP settings are cleared out, it is a switch!
LCD and touchscreen is disabled, snmp is disabled!
All else are factory defaults.
CRS and CCR uses RoS6.7.

What happens is ethernet ports are suddenly disabled, and then seconds after enabled again, sometimes it is switching from 1000Mbit/s to 100Mbit/s and back again, sometimes it stay on the lowe speed till it happens again. Some ports more than other, the bad thing is that whole switch seems to be affected by disturbance on one port, lockouts and slowness in network is experienced when it arrives. Also very fast lockout with no ports down in log, has been detected, for a few seconds and then all working again. Sometimes DNS and DHCP is not passed through properly through the switch from CCR.... found out by analysis via wireshark seeing DHCP req but no reply and same with DNS for periods of several minutes, most likely due to some internal lockups inside the switch.

Also noted that when logged in to CRS all active switchports show the same traffic load, like 24Mbit on all of them, but there is only two ports engaged, strange. Neither can I torch them.

All network cabling is in prime condition and uses CAT6 through out all details, there are patch panels, patch cables also CAT6 plus RJ45 jacks on walls also CAT6 and TP cables to workstations also CAT6. WOkrstations have Gigabit interfaces. It has been running without problems for 2 years using CISCO and HP switches, but after CRS it went not so good.

We have got support from Mikrotik from before on VLAN stuff that did not work as expected and our CCR who also suddenly locked ports etc. CCR is stable after disabling snmp and LCD and touchscreen not a problem found since, but CRS is still making big problems.

Anyone who have suggestion what to do, looks to me like a full rollback on all switches to Cisco+HP again...

I've been suggested not to use CCR's in a production enviroment. Yes I know, it's a Mikrotik flagship router. Port flapping has been going on since ros 6.x.

dbodeenisudm · Fri Jan 03, 2014 12:17 am

Thanks Mikrotik upgraded 2 2011 at 5.25 to 6.7 and 1 completely died and 1 had to be powercycled twice to get it back and I am assuming that will die but am scared to downgrade to 6.6 because it will probably die. I only upgraded because 2011s are so buggy on 5.25 and anything else 5. Should have just upgraded to 6.6 in retrospect. Really getting sick of Mikrotik its just so cheap and Router OS is so awesome its hard to get away. After the 450g disaster of all those capacitors blowing I really question who is running the show over there in Latvia. Talk about trying to ruin a good thing with terrible hardware decisions and quality control.

jackwing · Fri Jan 03, 2014 4:25 am

I want to say that , maybe the problems what I had , was ROS not support intel i350 network adapter as well .

Just like in the photo, several interfaces with the same MAC address.

I had tried v6.x and v5.x , same problems.

I had tried reset configuration , no any config , but not help.

bysard · Fri Jan 03, 2014 8:45 am

Thanks Mikrotik upgraded 2 2011 at 5.25 to 6.7 and 1 completely died and 1 had to be powercycled twice to get it back and I am assuming that will die but am scared to downgrade to 6.6 because it will probably die. I only upgraded because 2011s are so buggy on 5.25 and anything else 5. Should have just upgraded to 6.6 in retrospect. Really getting sick of Mikrotik its just so cheap and Router OS is so awesome its hard to get away. After the 450g disaster of all those capacitors blowing I really question who is running the show over there in Latvia. Talk about trying to ruin a good thing with terrible hardware decisions and quality control.

I must also sign under this.

Fri Jan 03, 2014 2:26 pm

I want to say that , maybe the problems what I had , was ROS not support intel i350 network adapter as well .

Just like in the photo, several interfaces with the same MAC address.

I had tried v6.x and v5.x , same problems.

I had tried reset configuration , no any config , but not help.

Please install RouterOS v6.7 make a support output file and send it to support@mikrotik.com
What exact Intel I350 adapter are using using - is it a PCIe card or built-in module on the board?

Jetrider · Fri Jan 03, 2014 4:58 pm

Talk about trying to ruin a good thing with terrible hardware decisions and quality control.

Sadly I cannot disagree with this.

jackwing · Fri Jan 03, 2014 9:19 pm

I want to say that , maybe the problems what I had , was ROS not support intel i350 network adapter as well .

Just like in the photo, several interfaces with the same MAC address.

I had tried v6.x and v5.x , same problems.

I had tried reset configuration , no any config , but not help.
Please install RouterOS v6.7 make a support output file and send it to support@mikrotik.com
What exact Intel I350 adapter are using using - is it a PCIe card or built-in module on the board?

PCIE card , support output file had already send

lashguti · Sat Jan 04, 2014 10:51 am

We had packet loss on ports in CCR1036 with 6.5 and 6.7 as well as prerouting rules were stopping traffic passing through them,
it was enough to disable and enable them to continue working for 10-15 minutes and stop again,

we downgraded back to 6.2, everything fine

infused · Mon Jan 06, 2014 12:20 am

6.3 works fine on CCR. Haven't had any issues and I've been running it for quite a few months now.

Mon Jan 06, 2014 5:55 pm

I want to say that , maybe the problems what I had , was ROS not support intel i350 network adapter as well .

Just like in the photo, several interfaces with the same MAC address.

I had tried v6.x and v5.x , same problems.

I had tried reset configuration , no any config , but not help.
Please install RouterOS v6.7 make a support output file and send it to support@mikrotik.com
What exact Intel I350 adapter are using using - is it a PCIe card or built-in module on the board?

PCIE card , support output file had already send

Resetting the MAC address to the original MAC address will help with your issue.

Mon Jan 06, 2014 11:27 pm

Resetting the MAC address to the original MAC address will help with your issue.

This can be done with:

/interface ethernet reset-mac-address ether1

Where ether1 is the interface name.

littlebill · Tue Jan 07, 2014 1:15 am

10mbit leds are not working on 2011

i get no led activity on 10mbit devices on the fast ethernet side. gig side it works fine?

any update? ticket has been sitting there for weeks now, along with ups issues

jackwing · Tue Jan 07, 2014 4:37 am

i will test again

jackwing · Tue Jan 07, 2014 4:38 am

i will test again

OlegM · Tue Jan 07, 2014 2:03 pm

From version to version is not happening, no changes in the protocol PPP. After 2-3 weeks of continuous operation in the PPP interfaces winbox open very long. Memory grows continuously until you reboot CCR.

Tue Jan 07, 2014 2:11 pm

From version to version is not happening, no changes in the protocol PPP. After 2-3 weeks of continuous operation in the PPP interfaces winbox open very long. Memory grows continuously until you reboot CCR.

v6.7 hasn't been around that long, to make such graphs. I would guess you run an older version then?

OlegM · Tue Jan 07, 2014 2:18 pm

From version to version is not happening, no changes in the protocol PPP. After 2-3 weeks of continuous operation in the PPP interfaces winbox open very long. Memory grows continuously until you reboot CCR.
v6.7 hasn't been around that long, to make such graphs. I would guess you run an older version then?

With the new 6.7 version. Accordingly dates for December.

dimasz · Tue Jan 07, 2014 5:26 pm

I have the same problem as OlegM, but much faster

jackwing · Thu Jan 09, 2014 6:49 am

Resetting the MAC address to the original MAC address will help with your issue.

OK , Resetting was effect

Ether port work fine ,vlan work fine.
If no vlan, dhcp server work fine , with the vlan on Ether port and trunk port on switch , vlan can work but dhcp server can't work.

I still used V5.26 , but I need to use set mac address command to fix the mac address's problem.

log and support had send to support@mikrotik.com

Chupaka · Thu Jan 09, 2014 4:56 pm

have anybody noticed the issue with not working address list items on CCR?

we installed CCR-1036 a few days ago, and today I saw two users without Internet access. after disabling/enabling their (static) address list entries, they started working again. I'm surprised because similar problem was fixed more than five years ago in v3.16 (Ticket#2008081866000458), and we don't have this behaviour on our x86 routers

Fri Jan 10, 2014 8:29 am

have anybody noticed the issue with not working address list items on CCR?

we installed CCR-1036 a few days ago, and today I saw two users without Internet access. after disabling/enabling their (static) address list entries, they started working again. I'm surprised because similar problem was fixed more than five years ago in v3.16 (Ticket#2008081866000458), and we don't have this behaviour on our x86 routers

As you can see in the v6.8rc1 changelog, there is a bugfix for address list issue. Try the pre-release.

Chupaka · Fri Jan 10, 2014 9:47 am

As you can see in the v6.8rc1 changelog, there is a bugfix for address list issue. Try the pre-release.

hope so, Normis, but I don't create duplicate address list entries =)

wichets · Fri Jan 10, 2014 10:35 am

ros code

i just report for inform that i cloud use the lte devices with routeros 6.7 but cannot check the "LTE info."
after i completed upgrade from 6.6 to 6.7 i got the error "registering failed lte1" and ""registering failed lte1" pleae see attached picture
as the previuse version the 6.6 with out this error message.

doush · Sat Jan 11, 2014 12:57 pm

have anybody noticed the issue with not working address list items on CCR?

we installed CCR-1036 a few days ago, and today I saw two users without Internet access. after disabling/enabling their (static) address list entries, they started working again. I'm surprised because similar problem was fixed more than five years ago in v3.16 (Ticket#2008081866000458), and we don't have this behaviour on our x86 routers

I have seen this and was checking if my actual firewall rule was wrong. Thanks for bringing it up.

Tbird · Sat Jan 11, 2014 2:41 pm

I have the same problem as OlegM, but much faster

Any of you guys with memory leakage use Radius Manager by any chance? We had the same issue - removed Radius Manager and the API for CPE signal polling, and the memory problem was solved...

/TB

OlegM · Sat Jan 11, 2014 6:36 pm

I have the same problem as OlegM, but much faster
Any of you guys with memory leakage use Radius Manager by any chance? We had the same issue - removed Radius Manager and the API for CPE signal polling, and the memory problem was solved...

/TB

Why, then, need a router if it can not use radius and api. This basic service for authentication and control of users on the Internet. So it is necessary to solve this problem and not exclude it.

Tbird · Sun Jan 12, 2014 12:22 am

I have the same problem as OlegM, but much faster
Any of you guys with memory leakage use Radius Manager by any chance? We had the same issue - removed Radius Manager and the API for CPE signal polling, and the memory problem was solved...

/TB
Why, then, need a router if it can not use radius and api. This basic service for authentication and control of users on the Internet. So it is necessary to solve this problem and not exclude it.

You don't really answer the question, but we suspect the API to be the sinner. If the API have session issues - like opening a new session every time, without closing the previous - I assume that could explain the leakage. We could never run for more than 25-30 days on our RB1100, before it ran out of memory and needed reboot. We looked everywhere and tried all possible settings and versions without any improvements. Finally we switched to another Radius without API for signal polling (using SNMP instead) - and problem was gone. Simple test for you to run; just turn off API for a few days...

/TB

Sun Jan 12, 2014 1:12 am

If the API have session issues - like opening a new session every time, without closing the previous - I assume that could explain the leakage.

FYI - You can explicitly close an API connection by issuing a "/quit" command every time you're done with it, thus not causing leakage.

OlegM · Sun Jan 12, 2014 12:24 pm

If the API have session issues - like opening a new session every time, without closing the previous - I assume that could explain the leakage.
FYI - You can explicitly close an API connection by issuing a "/quit" command every time you're done with it, thus not causing leakage.

It turns out it is a hole,in which the missing session are not disabled themselves.

Sun Jan 12, 2014 5:17 pm

If the API have session issues - like opening a new session every time, without closing the previous - I assume that could explain the leakage.
FYI - You can explicitly close an API connection by issuing a "/quit" command every time you're done with it, thus not causing leakage.
It turns out it is a hole,in which the missing session are not disabled themselves.

But if you "/quit" it, it's no longer leaking, right?

(Or do you mean that even quitted connections leak memory?)

OlegM · Sun Jan 12, 2014 9:58 pm

But if you "/quit" it, it's no longer leaking, right?

(Or do you mean that even quitted connections leak memory?)

Turns out, that remains in the memory. For the memory is constantly growing.

macsrwe · Mon Jan 13, 2014 12:53 am

Upgraded today on RB750UP, previous firmware was 5.24, suddenly I have port flapping, but only if I try to connect with winbox, if I use ssh everything is ok. I have some devices powered on ports, try to change poe status to forced-on and auto but nothing change. I upgraded also rb firmware, but still the same issue. I am connecting to in with winbox on linux (wine).
Any other suggestion?

POE-out port flapping occurs in 6.7 (maybe others) when any interface examination is being done. This includes the "Interfaces" window being open in Winbox. If you close this window (and any other window that would "examine" ethernet ports) flapping will disappear. If you use ssh, and run POE monitoring, you will see the same flapping. This is fixed in the (unreleased) 6.8.

zman · Mon Jan 13, 2014 8:53 pm

Hello.
I installed 6.7 version to RB951Ui-2HnD and have some problems.
I added rules with the identical names and different addresses in firewall->address list.
After that I tried to remove or disabled 4-5 rules, but at this time winbox was disconnected or the router rebooted.

dadaniel · Tue Jan 14, 2014 11:50 am

Will Ticket#2013112866000182 be fixed in v6.8?

Zito · Tue Jan 14, 2014 3:25 pm

At what stage is work on a solution for flapping fast ethernet ports on rb2011? When do we expect fix?
[Ticket#2013120466000341]

spire2z · Mon Jan 20, 2014 1:52 pm

Running full BGP on CCR. Seems to work well, nice and fast.

Only thing I have noticed is that CPU 9 often sits at 100% It doesn't seem to cause any problem or performance issues though.

Ham · Wed Jan 22, 2014 4:18 am

10mbit leds are not working on 2011

i get no led activity on 10mbit devices on the fast ethernet side. gig side it works fine?

any update? ticket has been sitting there for weeks now, along with ups issues

Also having issues with the fast ethernet bank on 2011's with 6.7, no ethernet activity with some devices it will not negoiate a state. Have not had to much time to look into it as we are to busy to worry about it now.

It's a narly bug thou!

armandfumal · Wed Jan 22, 2014 11:48 pm

What's new in 6.8rc1 (2014-Jan-21 11:25):

*) wireless - improved 11n and nv2 stability;
*) dhcp client - support interfaces in bridge;
*) dhcp - parse decimal strings and IP addreses in options value;
*) bgp - don't show community 'internet' in BGP advertisements;
*) ipsec - enable hardware acceleration for aes-cbc + md5|sha1|sha256 aead on tilera cpus;
*) ospf - fixed checksum calculation for OSPFv3 AS-external-LSAs;
*) default configuration - changed dhcp server lease time to 10 minutes;
*) fixed port isolation on CRSs (bug introduced in v6.6);
*) smb - added support for SMB 2.002
*) timezone information updated;
*) ppp - fixed ppp bridging (did not work since v6.6);
*) improved speed of PPP, PPPoE, PPTP & L2TP on multicore routers;
*) address-list - fix crash when adding two identical address list entries (not allowed any more);
*) fixed multicast forwarding on CCRs;
*) firewall - improved address-type matcher, and added it for ipv6 aswell;

haver · Thu Jan 23, 2014 10:04 am

upgraded my x86 to 6.7 from 5.26.
Once 1-2 days bridge interface is removing itself!!! And all addresses which were on bridge interface are UNKNOWN! PPP users also cant connect becouse they were in bridge interface!
Reboot helps, but i cant do it always.
Which firmware (I mean 6.x version) should i downgrade to avoid this kind of problem?

Burgerkhmer · Thu Jan 23, 2014 10:39 am

Could you please show me how to upgrade, it says could not resolve address upgrade.mikrotik.com

Thu Jan 23, 2014 1:14 pm

Could you please show me how to upgrade, it says could not resolve address upgrade.mikrotik.com

make sure that you have dns server specified in the router and you have access to the internet from the router.

kev445 · Thu Jan 23, 2014 2:55 pm

All routes with routing mark is down after upgrade from 6.6 to 6.7, remove the routing mark will make route establish

We're having the exact same issue, appears it may have been happening for several versions (upgraded from 5.X to 6.7), as we downgraded to 6.6 and the issue is still present (don't want to keep downgrading).

Just to clarify, we are adding the routing mark through mangle for ALL traffic from a certain IP excluding several destination IP ranges (we can't do that through the routing interace, as someone else suggested). I've tried simplifying the rule without success.

Marsupilani · Thu Jan 23, 2014 3:50 pm

Is it possible if i upgrade from ROS V5.26 to ROS v6.7 directly ?
yes!

Could you tell me how? I'm new with RouterOS, but when I clicked packages->Check for Upgrade or AutoUpgrade the System told me the newest Version is 5.26 !?? I'm using a new RB-951G-2HND I was able to upgrade from 5.24 to 5.26 but not higher, my License told me Upgradeable to v7.x???

saaremaa · Thu Jan 23, 2014 7:01 pm

PPPoE users are authorized to RB1100AHx2 through Radius request to billing. Found that RB1100AHx2 not send requests (Accounting-Update) on billing. Billing believes that the user disconnected and hang PPPoE session. In the settings billing parameter "Timeout hung session (s) = 60 sec". If RB1100AHx2 not send (Accounting-Update) on Billing - Billing disconnect PPPoE session number. The problem occurs only on 6.8rc1 (2014-Jan-21 11:25).Version 5.25 (5.26) works perfectly and user not hanging.
Can anyone confirm this error?

armandfumal · Thu Jan 23, 2014 7:40 pm

PPPoE users are authorized to RB1100AHx2 through Radius request to billing. Found that RB1100AHx2 not send requests (Accounting-Update) on billing. Billing believes that the user disconnected and hang PPPoE session. In the settings billing parameter "Timeout hung session (s) = 60 sec". If RB1100AHx2 not send (Accounting-Update) on Billing - Billing disconnect PPPoE session number. The problem occurs only on 6.8rc1 (2014-Jan-21 11:25).Version 5.25 (5.26) works perfectly and user not hanging.
Can anyone confirm this error?

be sure that radius is not sending radius attribute with session timemout, to be sure, create a local user and test with this user...or debug radius exchange...

Thu Jan 23, 2014 7:42 pm

when comes 6.8?

armandfumal · Thu Jan 23, 2014 7:47 pm

when comes 6.8?

when it is done

I'm running the 6.8RC1 in prod, no issue found in my case, using : BGP, OSPF, IPV6, SNMP...

Thu Jan 23, 2014 8:45 pm

I had troubles with rb 750UP with the POE that flapping with routeros 6.7
Now have a upgraded to 6.8rc and flapping is stopped.

Łukasz · Fri Jan 24, 2014 3:23 pm

Is it possible if i upgrade from ROS V5.26 to ROS v6.7 directly ?
yes!
Could you tell me how? I'm new with RouterOS, but when I clicked packages->Check for Upgrade or AutoUpgrade the System told me the newest Version is 5.26 !?? I'm using a new RB-951G-2HND I was able to upgrade from 5.24 to 5.26 but not higher, my License told me Upgradeable to v7.x???

Download http://download2.mikrotik.com/routeros/ ... be-6.7.npk file.
Chose menu "files" and upgrade this file or drag and drop file if you use winbox.
Reboot the router using menu (Sytem->Reboot).
Thats all.

jondavy · Sat Jan 25, 2014 4:17 pm

Possible Bug
I have a bridge interface that contains several ethernet in, just yesterday I changed this bridge STP, RSTP was to NONE, then the LCD touch also froze and stopped the traffic and navigation stopped, the only solution was found in time to restart soon it started functioning normally, I do not have as many tests it in production
I'm using a RB-CCR1016-12G ROS 6.7

Trisc · Mon Jan 27, 2014 4:18 pm

I cannot enter a list of frequencies into wireless scan-list after upgrading to 6.7. Winbox interface gives an error.

Entering a scan-list in command line produces multiple drop down items in winbox - very strange behaviour.