RouterOS v6.28 released

Mon Apr 20, 2015 12:10 pm

What's new in 6.28 (2015-Apr-15 15:18):

*) email - increase server greeting timeout to 60s;
*) lte - ZTE MF823 may loose configuration;
*) userman - update paypal root certificate;
*) timezone - updated timezone information to 2015b release;
*) cm2 - fixed capsman v2 100% CPU and other stability improvements;
*) route - using ldp could cause connected routes with
invalid interface nexthop;
*) added support for SiS 190/191 PCI Ethernet adapter;
*) made metarouter work on boards with 802.11ac support or usb LTE;
*) sstp server - allow ADH only when no certificate set;
*) make fat32 disk formatting support disks bigger than 134GiB;
*) fixed tunnels - could crash when clamp-tcp-mss was enabled;
*) added basic counters for ipv4/bridge fast path, also show status wether fast
path is active at all;
*) trafflow: - fixed crash on disable;
*) pppoe over eoip - fixed crash with large packets;
*) tilegx - fixed memory leak when queue settings are changed;
*) ar9888 - fixed crash when hw reports invalid rate;
*) console - fixed "in" operator in console;
*) console - make "/system package update print" work again.
*) tile - rare situation when CCR devices failed to auto-negotiate ethernet link (introduced in v6.25);
*) dhcpv4 client - it is now possible to unset default clientid and hostname options
*) initial RoMon (Router Management Overlay Network) support added.

kostikbel · Mon Apr 20, 2015 1:21 pm

What is the expected delay with the propagation of the update to the automatic update severs ?

[kostik@switch1] > system package update check-for-updates 
  current-version: 6.27
   latest-version: 6.27
           status: System is already up to date

Mon Apr 20, 2015 1:26 pm

It could take up to multiple hours. Cache of servers between your router and our server should be refreshed.

joegoldman · Mon Apr 20, 2015 1:28 pm

Can we please continue to have torrent link for all packages in one hit? I like to keep them organised for offline use in case out in the field - nice to have both 'all packages' and the upgrade package and extra packages, rather than going through and clicking them all and organising them again.

Mon Apr 20, 2015 1:46 pm

joegoldman - At the moment we are not offering torrent any more. You can write script which will download files as you like and use it after that for each new version. File names always stay the same.

Ulypka · Mon Apr 20, 2015 2:09 pm

joegoldman
http://www.mikrotik.com/download/router ... 28.torrent

ffernandes · Mon Apr 20, 2015 2:33 pm

joegoldman
http://www.mikrotik.com/download/router ... 28.torrent

will help seeding the torrent... full speed

D

Mon Apr 20, 2015 2:48 pm

We do not offer torrent download directly from our servers any more. You can download this torrent, download RouterOS files, associate them and then share with others.

Clauu · Mon Apr 20, 2015 3:54 pm

rb2011uias

Mon Apr 20, 2015 4:00 pm

Clauu - I have checked this on my router and Health shows correct information. Please check
1) If "/system health print" function shows anything;
2) If it does, then make sure that you are using latest version of Winbox:
http://download2.mikrotik.com/routeros/ ... winbox.exe
3) If problem still persist, then make sure that you use latest firmware. Run command "/system routerboard print" and if latest-firmware is higher than current one then run commands:
"/system routerboard upgrade" and "/system reboot"

If problem still exists, then please generate supout file on your router and send it to support@mikrotik.com with description of your problem.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File

cegner · Mon Apr 20, 2015 4:01 pm

CCR-1016-12S-1S+

Mon Apr 20, 2015 4:04 pm

cegner - I see that leds on SFP 10-12 are on when there is nothing connected to them but are they working as suspected and only problem is leds? Please add description to your picture in order to get more precise and useful reply.

cegner · Mon Apr 20, 2015 4:09 pm

Sorry for not beeing precise. LEDs of ports sfp10 to sfp12 show activity although nothing is connected. Ports are working.

It's a new box upgraded from 6.18 to 6.28. Seems there's an error in default config:

/system leds
set 0 interface=sfp1
set 1 interface=sfp2
set 2 interface=sfp3
set 3 interface=sfp4
set 4 interface=sfp5
set 5 interface=sfp6
set 6 interface=sfp7
set 7 interface=sfp8
set 8 interface=sfp9
set 9 interface=sfp1
set 10 interface=sfp1
set 11 interface=sfp1
set 12 interface=sfpplus1
set 13 interface=sfpplus1

Mon Apr 20, 2015 4:17 pm

cegner - Problem should be gone if you would reset configuration to defaults on you router.

This is correct default configuration:
/system leds
set 0 disabled=no interface=sfp1 leds=sfp1-led type=interface-activity
set 1 disabled=no interface=sfp2 leds=sfp2-led type=interface-activity
set 2 disabled=no interface=sfp3 leds=sfp3-led type=interface-activity
set 3 disabled=no interface=sfp4 leds=sfp4-led type=interface-activity
set 4 disabled=no interface=sfp5 leds=sfp5-led type=interface-activity
set 5 disabled=no interface=sfp6 leds=sfp6-led type=interface-activity
set 6 disabled=no interface=sfp7 leds=sfp7-led type=interface-activity
set 7 disabled=no interface=sfp8 leds=sfp8-led type=interface-activity
set 8 disabled=no interface=sfp9 leds=sfp9-led type=interface-activity
set 9 disabled=no interface=sfp10 leds=sfp10-led type=interface-activity
set 10 disabled=no interface=sfp11 leds=sfp11-led type=interface-activity
set 11 disabled=no interface=sfp12 leds=sfp12-led type=interface-activity
set 12 disabled=no interface=sfpplus1 leds=sfpplus1-led1 type=interface-speed
set 13 disabled=no interface=sfpplus1 leds=sfpplus1-led2 type=interface-activity

ufm · Mon Apr 20, 2015 4:30 pm

Hi!

As i understand, 2014122166000217 not fixed in this release.

If this is not a military secret - when can be expected fix of this error?
For me - it's very serious and annoying bug and my customers eating my brain.

WBR,
Fyodor.

Clauu · Mon Apr 20, 2015 4:47 pm

Clauu - I have checked this on my router and Health shows correct information. Please check
1) If "/system health print" function shows anything;

[admin@MikroTik_Node2] > /system health print

[admin@MikroTik_Node2] >

empty result

3) If problem still persist, then make sure that you use latest firmware. Run command "/system routerboard print" and if latest-firmware is higher than current one then run commands:
"/system routerboard upgrade" and "/system reboot"

[admin@MikroTik_Node2] > /system routerboard print
       routerboard: yes
             model: 2011UiAS-2HnD
     serial-number: 467304C92E52
  current-firmware: 3.22
  upgrade-firmware: 3.22
[admin@MikroTik_Node2] >

I will open a ticket.. again tickets bugs problems etc

hossain2004a · Mon Apr 20, 2015 5:28 pm

What is RoMon exactly?

Mon Apr 20, 2015 5:39 pm

http://wiki.mikrotik.com/wiki/Manual:RoMON

Abdock · Mon Apr 20, 2015 6:25 pm

I tried to update my router, which had ospf, and it totally went crazy, till i returned to 6.37, not sure what happened to this CCR, but careful while upgrading. i was interested in the route fix. !

armandfumal · Mon Apr 20, 2015 6:43 pm

I tried to update my router, which had ospf, and it totally went crazy, till i returned to 6.37, not sure what happened to this CCR, but careful while upgrading. i was interested in the route fix. !

have the same, I resolve the issue by correction of an mistake of myself about routerID in OSPFV3...

Abdock · Mon Apr 20, 2015 7:19 pm

I am only using ospf 2, i could not even reach the router, was pinging it with very high latency, but returning to old firmware it came back to normal operation, i am still trying to see what happened, as i tried with a test router and all went ok on a smaller network.

docmarius · Mon Apr 20, 2015 8:22 pm

ROS 6.28 seems to break the WiFi setup on my OmniTIK UPA-5HnD.
1 ap bridge with 2 virtual APs (a/n, 20/40MHz channel). Client is a Nanostation M5 (I am using wireless-fp).
Works flawless in 6.27.
After upgrade the client does not connect.
Downgrade to 6.27 fixes the problem.

Maggiore81 · Mon Apr 20, 2015 8:23 pm

cegner - Problem should be gone if you would reset configuration to defaults on you router.

...

That is ABSURD.
Between software update we need to reset router to default each time

can I laugh?

You may reset devices that are on the shelf, not ones that are in production with 1000+ users on it.!

Mon Apr 20, 2015 8:30 pm

cegner - Problem should be gone if you would reset configuration to defaults on you router.

...
That is ABSURD.
Between software update we need to reset router to default each time

can I laugh?

You may reset devices that are on the shelf, not ones that are in production with 1000+ users on it.!

I think he just meant the LED configuration, not the entire router.

Maggiore81 · Mon Apr 20, 2015 8:32 pm

cegner - Problem should be gone if you would reset configuration to defaults on you router.

...
That is ABSURD.
Between software update we need to reset router to default each time

can I laugh?

You may reset devices that are on the shelf, not ones that are in production with 1000+ users on it.!
I think he just meant the LED configuration, not the entire router.

Believe me, just on the forum you can find a lot of advices to reset router to the default conf....

tron · Mon Apr 20, 2015 9:11 pm

ROS 6.28, RB2011UAS-2HnD

try this

1) Tools -> RoMON, check ENABLE, click OK

2) Tools -> RoMON, uncheck ENABLE, click OK

CPU usage will be 100%, you must enable it again.

rextended · Mon Apr 20, 2015 9:13 pm

That is ABSURD.
Between software update we need to reset router to default each time

can I laugh?

You may reset devices that are on the shelf, not ones that are in production with 1000+ users on it.!
I think he just meant the LED configuration, not the entire router.
Believe me, just on the forum you can find a lot of advices to reset router to the default conf....

(other users: sorry for the Italian)

In ANNI che uso MikroTik, MAI mi è servito resettare un dispositivo per aggiornarlo (eccetto a suo tempo alcune CPE 411 con bios 3.09) ...

Se ti può servire come informazione, io utilizzo solo l'aggiornamenti con routeros-xxx.npk (+ user-manager + ntp dove serve).
Non metto mai i singoli pacchetti.

rextended · Mon Apr 20, 2015 9:14 pm

ROS 6.28, RB2011UAS-2HnD

try this

1) Tools -> RoMON, check ENABLE, click OK

2) Tools -> RoMON, uncheck ENABLE, click OK

CPU usage will be 100%, you must enable it again.

or:

/romon port remove [find]

DmitryAVET · Mon Apr 20, 2015 9:16 pm

RouterBOOT 3.23 only for hAP lite?
RB951Ui-2HnD - RouterBOOT 3.22, no upgrade?

rextended · Mon Apr 20, 2015 9:17 pm

I just finish upgrade all my "core" routers for BGP.
Finally I can upgrade my 4 pppoe servers from 6.7 to 6.28 directly.
Two bug introduced on 6.8 are finally fixed (pppoe & EoIP mtu/mrru problems with fragmented packets).

I do not have any problem.

but for security I do:
/romon port remove [find]

urknall · Mon Apr 20, 2015 9:20 pm

After Upgrading my CRS125 and the automatic reboot i also had 75 - 100% CPU, another rebooted helped to solve this problem, no clue what was causing this, i was rebooting the router because i was loosing packets all over the network and after i could check again the monitoring system i saw the high cpu load after the upgrade.

bad1 · Mon Apr 20, 2015 9:33 pm

951G-2HnD

RouterOS 6.23

RouterOS 6.28

The same.

Mon Apr 20, 2015 10:01 pm

What went wrong with automatic e-mail notification when new version is realeased? I have not received any e-mail about it even I used to.

Mon Apr 20, 2015 10:04 pm

We do not offer torrent download directly from our servers any more. You can download this torrent, download RouterOS files, associate them and then share with others.

Even I do not need torrent, I would like to have one zip file with all packages for all architectures at once. Why it is not possible?

ibm · Mon Apr 20, 2015 10:28 pm

I just finish upgrade all my "core" routers for BGP.
Finally I can upgrade my 4 pppoe servers from 6.7 to 6.28 directly.
Two bug introduced on 6.8 are finally fixed (pppoe & EoIP mtu/mrru problems with fragmented packets).

I do not have any problem.

but for security I do:
/romon port remove [find]

Ciao Rextended non hai avuto nessun problema con ospf come qualcuno scriveva su?

Hi Rextended have you had any problem with ospf as written by someone?

RomanHujer · Mon Apr 20, 2015 11:06 pm

sstp not work diffrent RouterOS version !

sstp cllient RouterOS v6.28 not connect sstp server RouterOS v6.25

or

sstp cllient RouterOS < = v6.25 not connect sstp server RouterOS v6.28

mediana · Mon Apr 20, 2015 11:39 pm

RB850Gx2:

Following the firmware upgrade procedure, after reboot, the firmware is still v6.27.

poizzon · Mon Apr 20, 2015 11:41 pm

[op@MikroTik] > system health print

action timed out - try again, if error continues contact MikroTik support and send a supout file (13)
[op@MikroTik] > system routerboard print
routerboard: yes
model: CCR1009-8G-1S-1S+
serial-number: 554A04E8C989
current-firmware: 3.22
upgrade-firmware: 3.22
[op@MikroTik] >

[op@HotSpotAs] > system health print

action timed out - try again, if error continues contact MikroTik support and send a supout file (13)
[op@HotSpotAs] > system routerboard print
routerboard: yes
model: 450
serial-number: 188901F9981Z
current-firmware: 3.22
upgrade-firmware: 3.22
[op@HotSpotAs] >

email sent

armandfumal · Mon Apr 20, 2015 11:53 pm

I am only using ospf 2, i could not even reach the router, was pinging it with very high latency, but returning to old firmware it came back to normal operation, i am still trying to see what happened, as i tried with a test router and all went ok on a smaller network.

check the log...

RafGan · Tue Apr 21, 2015 12:13 am

In my testing (home) environment 6.28 works well for now.
But I have one little question - where is Normis ???

urknall · Tue Apr 21, 2015 7:28 am

@crs125: And again after reboot (the update to 6.28, done just before) after a few hours cpu is magically going high from 2% to 75-100% for hours and hours, loosing packets and have to reboot. Nice job with the update

Rolling back...

Tue Apr 21, 2015 9:06 am

After update RB941-2nd from 6.27 to 6.28 it is no more possible to connect by winbox3rc6 (was working fine until update). Winbox closes right immediatelly after writing "downloading plugins".
The same with winbox3rc9 (actually latest).
The main website of router does not contain any downloadable winbox application. ( error 404: file not found when going to http://router.ip/winbox/winbox.exe)
Winbox 2.2.18 of course does not work with smips by any chance since beginning (was never officially told by Mikrotik in advance in documentation or product page but it is how it is).

There is no winbox that could log into it.

This and other posts above are putting my expectations back. I thought recently that mikrotik changed at least a bit their approach to software development management but it is not obviously true. I am unhappy of that.

Tue Apr 21, 2015 9:13 am

ufm - As my colleague has written to you - issue is forwarded to developers and you will just need to wait until it gets fixed. Sorry that it takes so long;
Maggiore81 - Upgrade between ten versions of RouterOS might introduce changes in configuration. For example, led configuration has changed within this time interval. Of course, I did mean that by default led configuration is correct in version 6.28. I posted correct configuration which you just need to apply;
Abdock, docmarius and urknall . Please write to support@mikrotik.com and explain your problems in details. Send supout files and we will check what is going on there. We have not had any issues with OSPF and we are using this version in our own network;
tron - We have reproduced RoMON issue and we will fix it in 6.29;
RomanHujer - Please use version higher than 6.25 on your routers with SSTP configuration. Also make sure that PFS is either enabled or disabled on both endpoints of connection;
RafGan - Normis is at MUM. Do not worry - he will be back soon

MetUys · Tue Apr 21, 2015 9:20 am

Hi All,
I see a few people have got no result in the system health, so tested myself after upgrading to latest version:
> system health print

> system routerboard print
routerboard: yes
model: 751U-2HnD
current-firmware: 3.22
upgrade-firmware: 3.22

> system resource print
uptime: 14h47m36s
version: 6.28
build-time: Apr/15/2015 15:18:31

Also didn't get an email notification, was just chance I checked the Mikrotik site.
so far no noticeable issues (PPTP, Wireless-FP, PPPoE, USB PPP, all working)
will be checking scripts a bit later to see nothing is breaking there.

I also checked the issue @jarda posted on winbox, but my unit is offering the exe via http. I have not checked the winbox3RCs yet, that will be after my final run thought (since it is only RC still).

joazif · Tue Apr 21, 2015 9:25 am

Hi I have problem with l2mtu on bridge port

/interface bridge
add comment=TV l2mtu=1596 name=bridge1000 priority=0 protocol-mode=rstp
add comment=INET l2mtu=1596 name=bridge2000 priority=0 protocol-mode=rstp
expected end of command (line 1 column 18)

Can you fix this ?

thx

Tue Apr 21, 2015 9:50 am

joazif - It is not possible to change L2MTU for bridge interface. You need to add bridge without specifying L2MTU and it will be assigned automatically.

Tue Apr 21, 2015 9:53 am

I also checked the issue @jarda posted on winbox, but my unit is offering the exe via http. I have not checked the winbox3RCs yet, that will be after my final run thought (since it is only RC still).

It was related to smips (941-2nd) not to mipsbe which is working for me too. Read again my post, you will get the reason to use winbox3rc.

Anyway, forcing to use winbox3rc until it is not stable as the only winbox that at least somehow used to work with 941-2nd is again unprofessional.

sdv · Tue Apr 21, 2015 9:58 am

Problem:
ROS < 6.27

 /system package update check-for-updates - works in scripts;

ROS > 6.27

 /system package update check-for-updates - not works in scripts because of waiting for user input;
/system package update check-for-updates once - works in scripts & syntax check error on ROS < 6.27

Just wondering, why it's necessary to change 'base-system' commands whithout backward compatibility?

RomanHujer · Tue Apr 21, 2015 10:15 am

RomanHujer - Please use version higher than 6.25 on your routers with SSTP configuration. Also make sure that PFS is either enabled or disabled on both endpoints of connection;

It is not possible to upgrade all my devices at one time. SSTP Client from Small and Home Office are located throughout the world (Hong Kong, Dubai, USA, Canada, Czech Republic ..).

honzam · Tue Apr 21, 2015 11:11 am

Ethernet now show last down status. Very thanks Mikrotik

(No info in changelog) - as usual

keema · Tue Apr 21, 2015 11:31 am

We do not offer torrent download directly from our servers any more. You can download this torrent, download RouterOS files, associate them and then share with others.

One word...PRO! You can download, you can do this, you can do that...what can you do? Aperently not combined torrent package which should be easy to do for a user to share with others, but impossible for Mikrotik?

alexspils · Tue Apr 21, 2015 12:54 pm

We found a bug.We Have router with vrrp on it.It is master.When we do /ip neighbor discovery set 0-5 discover=yes or no vrrp becomes backup and after some time returns to master

urknall · Tue Apr 21, 2015 1:35 pm

@strods:

I think my problem directly after the update is related to the new romon feature maybe somehow:

10.10.10.1_cpu-day.png

See the two peaks in CPU Usage right after the update, nothing was changed in the config. Then i read about the new romon feature, activated it and deactivated it again and also high cpu usage was the result. That could be related to my problem somehow, though i did not initially made some changes to the config after the update, when theses problems appeared. Now the romon feature is activated again, to prevent high cpu usage...

Will investigate more and make a support ticket.

Tue Apr 21, 2015 1:42 pm

alexspils - That is true, but this state should be changed back to master even within one second. Do you need to wait longer?
urknall - Fix for this RoMON CPU usage issue will be included for testing in 6.29 release candidate versions.

ittcoin · Tue Apr 21, 2015 3:36 pm

Problems with CAPsMAN with the hAP lite as APs, I've differents APs with the same configuration working together (mAP and RB751) and working ok with 6.28, hAP lite not working

kristaps · Tue Apr 21, 2015 3:42 pm

ROS 6.28 seems to break the WiFi setup on my OmniTIK UPA-5HnD.
1 ap bridge with 2 virtual APs (a/n, 20/40MHz channel). Client is a Nanostation M5 (I am using wireless-fp).
Works flawless in 6.27.
After upgrade the client does not connect.
Downgrade to 6.27 fixes the problem.

Hi, could you please send supouts from both versions to support@mikrotik.com ?

skibi82 · Tue Apr 21, 2015 5:05 pm

Critical bug in 6.28
After updating to version 6.28 is the problem of detection ipsec esp.

Before that could properly be described in Mangle encrypted traffic Packet Markt: IPSEC and then on filter rule i culd filter IP inside the ipsec tunnel

Since version 6.28 does not have the capability of this.
Because the above error stanol traffic on one of the VPN concentrator.
Please fix it as fast as possible

1 Rule on mangle

/ip firewall mangle
add action=mark-packet chain=input comment=IPSEC new-packet-mark=\
ipsec-encrypted passthrough=no protocol=ipsec-esp

2 Rule on forward
/ip firewall filter
add action=passthrough chain=forward comment=IPSEC packet-mark=ipsec-encrypted

wtf.png

leroylim · Tue Apr 21, 2015 5:07 pm

I am currently on ROS 6.28 RC20. I am having an issue when upgrading to ROS 6.28 that my connectivity totally breaks.

Let me describe the issue I am having.

Currently I am using a CCR1036-8G-2S+ with a bonded link using 2 1 Gbps ports using LACP to my switch.
Over the bonded link, I have 3 VLANs, VLAN 1 - LAN, VLAN 5 - WAN1, VLAN 6 - WAN2.

In ROS 6.28 RC20, everything works fine, traffic for LAN over VLAN 1, traffic for 2 WANs with DHCP client over VLANs 5 and 6.

But when I upgrade to ROS 6.28, connectivity is totally lost, as in, I cannot ping anything over VLAN 1, when looking in Winbox -> Interfaces, I can see VLAN 1 transmitting, but never receiving anything in return. VLANs 5 and 6 DHCP client is also searching with no avail.

I have tried upgrading to ROS 6.28 twice, and rolling back to 6.28 RC 20 as connectivity was totally broken.

docmarius · Tue Apr 21, 2015 8:23 pm

ROS 6.28 seems to break the WiFi setup on my OmniTIK UPA-5HnD.
1 ap bridge with 2 virtual APs (a/n, 20/40MHz channel). Client is a Nanostation M5 (I am using wireless-fp).
Works flawless in 6.27.
After upgrade the client does not connect.
Downgrade to 6.27 fixes the problem.
Hi, could you please send supouts from both versions to support@mikrotik.com ?

Sorry for the alert.
It was a strange power failure coincidence on the client side, which resolved at the same time as my downgrade (found out today) and I never checked connectivity before the upgrade.
Upgraded again to 6.28 and it works without any issues.

skl · Tue Apr 21, 2015 8:31 pm

After update RB941-2nd from 6.27 to 6.28 it is no more possible to connect by winbox3rc6 (was working fine until update). Winbox closes right immediatelly after writing "downloading plugins".
The same with winbox3rc9 (actually latest).
The main website of router does not contain any downloadable winbox application. ( error 404: file not found when going to http://router.ip/winbox/winbox.exe)
Winbox 2.2.18 of course does not work with smips by any chance since beginning (was never officially told by Mikrotik in advance in documentation or product page but it is how it is).

There is no winbox that could log into it.

This and other posts above are putting my expectations back. I thought recently that mikrotik changed at least a bit their approach to software development management but it is not obviously true. I am unhappy of that.

Check "open in new window", works like a charm

RafGan · Wed Apr 22, 2015 12:51 am

RafGan - Normis is at MUM. Do not worry - he will be back soon

[/quote]

Now I don't worry, I'm happy

TomosRider · Wed Apr 22, 2015 10:02 am

I am currently on ROS 6.28 RC20. I am having an issue when upgrading to ROS 6.28 that my connectivity totally breaks.

Let me describe the issue I am having.

Currently I am using a CCR1036-8G-2S+ with a bonded link using 2 1 Gbps ports using LACP to my switch.
Over the bonded link, I have 3 VLANs, VLAN 1 - LAN, VLAN 5 - WAN1, VLAN 6 - WAN2.

In ROS 6.28 RC20, everything works fine, traffic for LAN over VLAN 1, traffic for 2 WANs with DHCP client over VLANs 5 and 6.

But when I upgrade to ROS 6.28, connectivity is totally lost, as in, I cannot ping anything over VLAN 1, when looking in Winbox -> Interfaces, I can see VLAN 1 transmitting, but never receiving anything in return. VLANs 5 and 6 DHCP client is also searching with no avail.

I have tried upgrading to ROS 6.28 twice, and rolling back to 6.28 RC 20 as connectivity was totally broken.

Leroylim, can you tell me, do you have direct access to your equipment or is it on remote site?
You can check if you have local access by logging into router to see if there is problem with interface mismatch.
For example, after upgrade, eth5 became eth1 and so on. In this case, you must manually adjust interface numbers.

JanezFord · Wed Apr 22, 2015 10:18 am

I upraded about 15 devices and only issues so far are lost graphing data on rb800 (but not on two rb850gx2 so I guess it's not powerpc related) and one hung rb912-2hnd which had to be netinstalled (the other identical rb912-2hnd with identical config upgraded ok). I run ipsec, ospf over ipip and gre, l2tp, capsmanv2, nat and so far it seems OK. No high cpu.

JF.

noyo · Wed Apr 22, 2015 10:24 am

Does in v6.28 "auto-before-reset.backup" is encrypted?
Because v6.27file is not encrypted and is not dangerous.

Wed Apr 22, 2015 11:06 am

After update RB941-2nd from 6.27 to 6.28 it is no more possible to connect by winbox3rc6 (was working fine until update). Winbox closes right immediatelly after writing "downloading plugins".
The same with winbox3rc9 (actually latest).
The main website of router does not contain any downloadable winbox application. ( error 404: file not found when going to http://router.ip/winbox/winbox.exe)
Winbox 2.2.18 of course does not work with smips by any chance since beginning (was never officially told by Mikrotik in advance in documentation or product page but it is how it is).

There is no winbox that could log into it.

This and other posts above are putting my expectations back. I thought recently that mikrotik changed at least a bit their approach to software development management but it is not obviously true. I am unhappy of that.
Check "open in new window", works like a charm

Unfortunaelly not for me. Even after downgrade back to 6.27 I am not able to connect by winbox3rc9 or winbox3rc6. Strange. Even not after power cycle...

Karlsonas · Wed Apr 22, 2015 11:29 am

Unfortunaelly not for me. Even after downgrade back to 6.27 I am not able to connect by winbox3rc9 or winbox3rc6. Strange. Even not after power cycle...

I had same problem, and solved by logging another system user, so problem is in winbox dll cache, we need to find them and clear to winbox work!

Wed Apr 22, 2015 2:21 pm

Well, I have just created a new "full" user and tried to log in, both with 3RC6 and 3RC9, both with "open in new window" on and off. No luck.

Juta · Wed Apr 22, 2015 2:39 pm

Problem with e-mail client still exists.
If you use TLS then the second EHLO, which is normally issued after STARTTLS, is malformed and rejected by postfix with error "Helo command rejected: invalid ip address"

tomaskir · Wed Apr 22, 2015 2:40 pm

Problem with e-mail client still exists.
If you use TLS then the second EHLO, which is normally issued after STARTTLS, is malformed and rejected by postfix with error "Helo command rejected: invalid ip address"

Did you report this to support@mikrotik.com?

Juta · Wed Apr 22, 2015 2:50 pm

Did you report this to support@mikrotik.com?

Just did it.

leroylim · Wed Apr 22, 2015 4:41 pm

I am currently on ROS 6.28 RC20. I am having an issue when upgrading to ROS 6.28 that my connectivity totally breaks.

Let me describe the issue I am having.

Currently I am using a CCR1036-8G-2S+ with a bonded link using 2 1 Gbps ports using LACP to my switch.
Over the bonded link, I have 3 VLANs, VLAN 1 - LAN, VLAN 5 - WAN1, VLAN 6 - WAN2.

In ROS 6.28 RC20, everything works fine, traffic for LAN over VLAN 1, traffic for 2 WANs with DHCP client over VLANs 5 and 6.

But when I upgrade to ROS 6.28, connectivity is totally lost, as in, I cannot ping anything over VLAN 1, when looking in Winbox -> Interfaces, I can see VLAN 1 transmitting, but never receiving anything in return. VLANs 5 and 6 DHCP client is also searching with no avail.

I have tried upgrading to ROS 6.28 twice, and rolling back to 6.28 RC 20 as connectivity was totally broken.
Leroylim, can you tell me, do you have direct access to your equipment or is it on remote site?
You can check if you have local access by logging into router to see if there is problem with interface mismatch.
For example, after upgrade, eth5 became eth1 and so on. In this case, you must manually adjust interface numbers.

Weird issue I had. The ports were still the same. One workaround that worked. I switched the protcol on my bridge-local from RSTP to STP. And then I changed my switch that I'm doing LACP from to STP too from RSTP.

Wed Apr 22, 2015 5:00 pm

After update RB941-2nd from 6.27 to 6.28 it is no more possible to connect by winbox3rc6 (was working fine until update). Winbox closes right immediatelly after writing "downloading plugins".
The same with winbox3rc9 (actually latest).
The main website of router does not contain any downloadable winbox application. ( error 404: file not found when going to http://router.ip/winbox/winbox.exe)
Winbox 2.2.18 of course does not work with smips by any chance since beginning (was never officially told by Mikrotik in advance in documentation or product page but it is how it is).

There is no winbox that could log into it.

This and other posts above are putting my expectations back. I thought recently that mikrotik changed at least a bit their approach to software development management but it is not obviously true. I am unhappy of that.
Check "open in new window", works like a charm
Unfortunaelly not for me. Even after downgrade back to 6.27 I am not able to connect by winbox3rc9 or winbox3rc6. Strange. Even not after power cycle...

Unfortunaelly not for me. Even after downgrade back to 6.27 I am not able to connect by winbox3rc9 or winbox3rc6. Strange. Even not after power cycle...
I had same problem, and solved by logging another system user, so problem is in winbox dll cache, we need to find them and clear to winbox work!

Well, I have just created a new "full" user and tried to log in, both with 3RC6 and 3RC9, both with "open in new window" on and off. No luck.

Finally I have it. I needed to delete relevant directories in C:\Users\MyName\AppData\Roaming\Mikrotik\Winbox\ and relevant files in \sessions\ subdirectory. Shame on Mikrotik that the files are not overwritten or deleted or versioned on error automatically!

Wed Apr 22, 2015 5:08 pm

When disabling romon on 941-2nd, the cpu goes to 100% (shared between management and unclassified). When enabled back, the cpu goes to zero back. Disabling - 100%, enabling 0%, and so on...

Reboot helps.

raffav · Wed Apr 22, 2015 8:45 pm

Hello

the script to auto upgrade that is ins the wiki is not working any more

/system package update
check-for-updates
:delay 1s;
:if ( [get current-version] != [get latest-version]) do={ upgrade }

since i dont user for a while i dont know tell from witch version it stoped working i think on 6.27

when i run it on the terminal i get this and i know that the code worked in early version of ROS
any suggestion ?

[Vaselli@Raffa's MK] >
current-version: 6.28
latest-version: 6.28
status: System is already up to date
-- [Q quit|D dump|C-z pause]
latest-version: 6.28
status: System is already up to date
-- [Q quit|D dump|C-z pause]
-- [Q quit|D dump|C-z pause]
status: resolving upgrade.mikrotik.com
-- [Q quit|D dump|C-z pause]

alexspils · Wed Apr 22, 2015 10:31 pm

[quote="strods"]alexspils - That is true, but this state should be changed back to master even within one second. Do you need to wait longer?
winbox disconnect from router when vrrp changes state from backup to master.I never noticed before that when i change discovery interface settings something changes in vrrp

igb · Wed Apr 22, 2015 10:45 pm

Rapid reboot loop, out of memory, 6.28. Fine with 6.27.

System initially ran for about 30 minutes, but then entered reboot loop with a time constant of less than 30s. I managed to scp the 6.27 .npk package in during one brief window and then run "/system package downgrade" in the next to recover the router.

apr/22/2015 20:38:23 system,error,critical System rebooted because of kernel failure
apr/22/2015 20:38:23 system,error,critical Out of memory condition was detected
apr/22/2015 20:38:23 system,error,critical router was rebooted without proper shutdown
apr/22/2015 20:40:09 system,error,critical router was rebooted without proper shutdown by watchdog timer
apr/22/2015 20:41:19 system,error,critical System rebooted because of kernel failure
apr/22/2015 20:41:19 system,error,critical Out of memory condition was detected
apr/22/2015 20:41:19 system,error,critical router was rebooted without proper shutdown

RB2011 uAS. I don't think I'm doing anything exotic: prosumer PPPoE, IPv6, some queue prioritisation, nothing very complex.

payday · Wed Apr 22, 2015 10:59 pm

Hello

the script to auto upgrade that is ins the wiki is not working any more
Code: Select all
/system package update
check-for-updates
:delay 1s;
:if ( [get current-version] != [get latest-version]) do={ upgrade }
since i dont user for a while i dont know tell from witch version it stoped working i think on 6.27

when i run it on the terminal i get this and i know that the code worked in early version of ROS
any suggestion ?

[Vaselli@Raffa's MK] >
current-version: 6.28
latest-version: 6.28
status: System is already up to date
-- [Q quit|D dump|C-z pause]
latest-version: 6.28
status: System is already up to date
-- [Q quit|D dump|C-z pause]
-- [Q quit|D dump|C-z pause]
status: resolving upgrade.mikrotik.com
-- [Q quit|D dump|C-z pause]

Use command: check-for-updates once. It works this way from 6.28 but not on older versions.

rextended · Thu Apr 23, 2015 3:28 am

I just finish upgrade all my "core" routers for BGP.
Finally I can upgrade my 4 pppoe servers from 6.7 to 6.28 directly.
Two bug introduced on 6.8 are finally fixed (pppoe & EoIP mtu/mrru problems with fragmented packets).

I do not have any problem.

but for security I do:
/romon port remove [find]
Ciao Rextended non hai avuto nessun problema con ospf come qualcuno scriveva su?

Hi Rextended have you had any problem with ospf as written by someone?

Hi, I not use MPLS and OSPF or any other routing protocol,
except BGP, VRRP and "pure Routing" for failover and routing.
Because, for my network topology, other protocols over what I'm using, do not have any sense.

gerencia@e-digitales.com · Thu Apr 23, 2015 3:32 am

Hi all,
I'm no t really sure whether this is a version issue but i have upgraded 4 units so far to this ver. and 3 out of four never came back from the upgrade, all are remote units so now i have to go and check them up.

Has any one had this tiny problem upgrading to this new release?
thanks

rextended · Thu Apr 23, 2015 4:13 am

RomanHujer - Please use version higher than 6.25 on your routers with SSTP configuration. Also make sure that PFS is either enabled or disabled on both endpoints of connection;
It is not possible to upgrade all my devices at one time. SSTP Client from Small and Home Office are located throughout the world (Hong Kong, Dubai, USA, Canada, Czech Republic ..).

If you want take the risk of the update, must exist some benefit.
If all is working, why you want update?

rextended · Thu Apr 23, 2015 4:19 am

@strods:

I think my problem directly after the update is related to the new romon feature maybe somehow:

10.10.10.1_cpu-day.png
See the two peaks in CPU Usage right after the update, nothing was changed in the config. Then i read about the new romon feature, activated it and deactivated it again and also high cpu usage was the result. That could be related to my problem somehow, though i did not initially made some changes to the config after the update, when theses problems appeared. Now the romon feature is activated again, to prevent high cpu usage...

Will investigate more and make a support ticket.

/romon port remove [find]

Bigfoot · Thu Apr 23, 2015 7:02 am

LCD Page List not working, can not add interfaces to the LCD Page List and the Max Speed can not be set.

Abdock · Thu Apr 23, 2015 8:35 am

After the upgrade most of my links went out, although it said 1 neighbor on each side, but the traffic would not flow. I do not see anything concerning OSPF on the change log from .27 to .28 but this one broke the ospf, i had to downgrade and for some routers to come back online had to restart manually.

Thu Apr 23, 2015 8:37 am

alexspils - It will be fixed in 6.29
jarda - RoMON CPU load issue will also be fixed in 6.29 version
igb - Please send e-mail to support@mikrotik.com with description of problem and include supout files. We will check what is going on there
payday - Now check for update is dynamic. If you run "/system package update upgrade", then router will be upgraded if new version is available. If it is not then it will not do anything. Before running this command you need to run "/system package update check-for-update". Basically this script:
{
/system package update check-for-update once
/system package update upgrade once
}
gerencia@e-digitales.com - Please write to support. Name versions from which you did the upgrade and provide supout file so we can check if we can reproduce it locally
Bigfoot - Timeout and Max Speed can be configured under "LCD Interface" menu. Not under "LCD page" menu
Abdock - Please write to support. Provide supout file so we can check if we can reproduce it locally.

RomanHujer · Thu Apr 23, 2015 9:50 am

RomanHujer - Please use version higher than 6.25 on your routers with SSTP configuration. Also make sure that PFS is either enabled or disabled on both endpoints of connection;
It is not possible to upgrade all my devices at one time. SSTP Client from Small and Home Office are located throughout the world (Hong Kong, Dubai, USA, Canada, Czech Republic ..).
If you want take the risk of the update, must exist some benefit.
If all is working, why you want update?

Freeze forever no 6.25 is not a good idea. (reasons for update: support for new hardware, security updates, new features ....)

pehavel · Thu Apr 23, 2015 10:56 am

*) lte - ZTE MF823 may loose configuration;

What does that mean exactly?
Thank you

Thu Apr 23, 2015 11:29 am

pehavel - It means that issue "ZTE MF823 may loose configuration" is fixed in this version

gabeselig · Thu Apr 23, 2015 4:09 pm

I have found the following issues:

Speed/Duplex negotiation issue between Netmetal5 and RB1100 will not link at 1 Gb. If the same netmetal5 is connected to a CCR1036, it will negotiate at 1 Gb. I have found two instances already.

If the same RB1100 model (the ones listed above experiencing link speed issues) is connected to a RB922UAGS-5HPacD (instead), it will link at 1 Gb when that RB912UAG is running version 6.25 (RB version 3.17). If that RB922UAGS is upgraded to version 6.28 (RB version 3.22), the link will still negotiate at 1GB. The speed issue appears to only exist between the Netmetal5 and the RB1100

Unfortunately, I have just finished testing on a third set of netmetal5 and RB1100 and it linked up at 1 Gb and acted fine. It may be an issue with PoE and voltage supplied or something else entirely.

When doing a system export, the /system health will not export and will time out on a PowerPC (RB1100). This is also duplicated twice on two separate RB1100s. This is not an issue on a 1100AHx2 and is not an issue on a 1100AH.

When in the winbox GUI, only on the RB1100 models, the system health section will not open up properly and will only provide three buttons, OK, Cancel, Apply.

On the CRS125 model, when a mikrotik branded SFP (have not tested other brands) is inserted (even after rebooting / reseating SFP, reseating fiber), the SFP does not report any DOM measurements. This is only tested on mikrotik's Single Model 1 Gb SFP (S-31DLC20D)

rextended · Thu Apr 23, 2015 4:12 pm

LCD Page List not working, can not add interfaces to the LCD Page List and the Max Speed can not be set.

On what hardware?
I have checked one CCR1036-12G-4S and one 2011UiAS, no problem on both.

rextended · Thu Apr 23, 2015 4:29 pm

Mikrotik without igmp snooping and DHCP snooping is cheap toys !
We really need to switch IGMP and DHCP snooping.

Please stop to post this everywhere.

If you need DHCP snooping, use only MikroTik switch devices and simply do it with scripting.

TomosRider · Thu Apr 23, 2015 4:43 pm

Testing this release on couple of 750's...so far, so good...

gerencia@e-digitales.com · Thu Apr 23, 2015 5:07 pm

Hi all,
I'm no t really sure whether this is a version issue but i have upgraded 4 units so far to this ver. and 3 out of four never came back from the upgrade, all are remote units so now i have to go and check them up.

Has any one had this tiny problem upgrading to this new release?
thanks

Already went to the site and performed a manual reboot (Power out) and voila....up again.

tolkn · Thu Apr 23, 2015 5:38 pm

Rapid reboot loop, out of memory, 6.28. Fine with 6.27.

System initially ran for about 30 minutes, but then entered reboot loop with a time constant of less than 30s. I managed to scp the 6.27 .npk package in during one brief window and then run "/system package downgrade" in the next to recover the router.

apr/22/2015 20:38:23 system,error,critical System rebooted because of kernel failure
apr/22/2015 20:38:23 system,error,critical Out of memory condition was detected
apr/22/2015 20:38:23 system,error,critical router was rebooted without proper shutdown
apr/22/2015 20:40:09 system,error,critical router was rebooted without proper shutdown by watchdog timer
apr/22/2015 20:41:19 system,error,critical System rebooted because of kernel failure
apr/22/2015 20:41:19 system,error,critical Out of memory condition was detected
apr/22/2015 20:41:19 system,error,critical router was rebooted without proper shutdown

RB2011 uAS. I don't think I'm doing anything exotic: prosumer PPPoE, IPv6, some queue prioritisation, nothing very complex.

+1 memory leak in my 2011. Downgrade to 6.27 fix cyclic reboot.

DjM · Thu Apr 23, 2015 5:58 pm

Hello MikroTik support team,

[Ticket#2015032266000169]

I'm still not able to add a comment for /ip dhcp-server alert via CLI, please see ticket for details.

leandrobianchin · Thu Apr 23, 2015 11:43 pm

Hello,
I have 1 ccr (1036-8G-2S+) and 4 crs (226-24G-2S+) with ring topology via fiber optic 10Gb and bridge with rstp protocol.
Everything was working fine until I upgrade to version 6.28, which occurs following the fall of sfp ether and interfaces that are part of the bridge (rstp). Other ports are still normal.
Has anyone had this problem?
Thank you.

sx10 · Fri Apr 24, 2015 1:20 am

Is there a problem with the release candidate changelog on the download page? I see we are up to 6.29 RC10 but the changelog hasn't been updated in weeks (still 6.28 rc20).

leandrobianchin · Fri Apr 24, 2015 3:31 am

At first I saw nothing regarding this problem.

How was working perfectly before I went back again to the 6:27 version, which solved the problem.

Grateful for the help sx10.

armandfumal · Fri Apr 24, 2015 5:26 am

Hi all,

Upgrade to 6.28, CCR1036
after 20 mins my BGP config disappear, no more instance, no more config possible.
autosuppout created.
reverse to 6.27 resolve the problem.
ticket created at support.

anybody has the case ?

regards

Armand

Fri Apr 24, 2015 8:22 am

Changelog for 6.29rc version is now uploaded to our download site. Sorry about a delay.

Abdock · Fri Apr 24, 2015 9:09 am

Hello Strods, Can we have the changelog for this rc release.

Thanks.

PatrickKan · Fri Apr 24, 2015 9:56 am

I have the same problem as leandrobianchin except my CRS-226 just has a 10GBE uplink to the CCR1036 via SFP+. The uplink also serves as the master of the entire CRS. The CCR has been running ok on 6.28 and 6.29rc10 but SFP+ on CRS has been a frequent problem after 6.27. So far I've found the relatively stable combination being with CCR running 6.27 or 6.28 or 6.29rc10 and CRS running 6.27. But even this combination still causes one SFP+ incidence on CRS every 5-6 days.

Fri Apr 24, 2015 10:16 am

Abdock - Changelog is available at our download site:
http://www.mikrotik.com/download/share/ ... evnote.txt

gaid78 · Fri Apr 24, 2015 11:41 am

ipv6 WebFig.png

rextended · Fri Apr 24, 2015 2:56 pm

Hi all,

Upgrade to 6.28, CCR1036
after 20 mins my BGP config disappear, no more instance, no more config possible.
autosuppout created.
reverse to 6.27 resolve the problem.
ticket created at support.

anybody has the case ?

regards

Armand

What model?
I have only some CCR1036-12G-4S and no one have this problem.

KBV · Fri Apr 24, 2015 5:54 pm

Router RB850Gx2 hangs on reboot if serial port is removed from the /system console

[admin@RB850Gx2] > /system console print
Flags: X - disabled, U - used, F - free 
 #   PORT                                  TERM

RouterBOOT booter 3.22

RouterBoard 850Gx2

CPU frequency: 533 MHz
  Memory size: 512 MiB
    NAND size: 512 MiB

Press any key within 2 seconds to enter setup..

loading kernel from nand... OK
setting up elf image... OK
jumping to kernel code

Then the network is not running, the port LEDs do not light
Cycling the power helps

tomaskir · Fri Apr 24, 2015 6:19 pm

Router RB850Gx2 hangs on reboot if serial port is removed from the /system console
Code: Select all
[admin@RB850Gx2] > /system console print
Flags: X - disabled, U - used, F - free 
 #   PORT                                  TERM
Code: Select all
RouterBOOT booter 3.22

RouterBoard 850Gx2

CPU frequency: 533 MHz
  Memory size: 512 MiB
    NAND size: 512 MiB

Press any key within 2 seconds to enter setup..

loading kernel from nand... OK
setting up elf image... OK
jumping to kernel code
Then the network is not running, the port LEDs do not light
Cycling the power helps

Please report it to support@mikrotik.com

KBV · Fri Apr 24, 2015 6:27 pm

I'm sorry

Router RB850Gx2 randomly hangs on reboot. I could not find regularities.
Relationship with the / system console has not been confirmed.
Well, I'll write our support.

armandfumal · Fri Apr 24, 2015 8:21 pm

Hi all,

Upgrade to 6.28, CCR1036
after 20 mins my BGP config disappear, no more instance, no more config possible.
autosuppout created.
reverse to 6.27 resolve the problem.
ticket created at support.

anybody has the case ?

regards

Armand
What model?
I have only some CCR1036-12G-4S and no one have this problem.

CCR1036-12G-4S, autosuppout has been created by the problem and has sent to support, waiting reply from them...

dcavni · Fri Apr 24, 2015 11:51 pm

Every update of RouterOS kills my Ip Adress list, so i have to manualy reconfigure it. Is this a bug or a feature?

IntrusDave · Sat Apr 25, 2015 12:22 am

Every update of RouterOS kills my Ip Adress list, so i have to manualy reconfigure it. Is this a bug or a feature?

Is your Address List dynamic or have a timeout?
I have have an Address List of 3900 IP's (my blacklist), I have never lost it during an update.

ufm · Sat Apr 25, 2015 12:48 am

Changelog for 6.29rc version is now uploaded to our download site. Sorry about a delay.

Judging by the fact that 6.29rc11 crashes with kernel panic where works 6.27 - we are waiting for an interesting version.

lectrapon · Sat Apr 25, 2015 2:35 am

Hello,
I need your help about my METAL 2SHPn with preinstalled system 5.26 (and firmware 3.22).
I upgrade to 6.27 and I noticed that my wireless was not stable (connect and disconnect).
After upgrade to 6.28, I noticed that the LOG menu can’t list something about DEBUG DHCP, HOTSPOT, WEB-PROXY when I add it in System > Logging menu.
And it seem like wireless card is not enabled even if I can detect it with Computer or Smartphone.
When I try to connect…I see only « connection » in my host client and nothing is listed in LOG window.
I have downgrade to 6.27 and 5.26 but nothing have changed.

rubber · Sat Apr 25, 2015 5:03 am

I need some help please.
I have Mikrotik RB850Gx2 running RouterOS 6.28. There are about 30 or so ppttp-clients connecting to it.

Every now and then, the RB850Gx2 logs the following error: Encryption got out of sync - disabling

Ru0005.jpg

Ru0004.jpg

npero · Sat Apr 25, 2015 11:34 am

Any one have problem on 411U reading health menu ?
I upgrade 411U to 6.28 health stop working.
I need voltage it is only way to check battery.

[admin@Jna AP] /system health> print

action timed out - try again, if error continues contact MikroTik support and send
a supout file (13)

Also can't make supout.rif.

Back to 6.27, for now stop future network upgrade to 6.28.

Clauu · Sat Apr 25, 2015 1:31 pm

@npero on my gx2 i had the same problem but after another reboot it get back to normal.. try a reboot

I need some help please.
I have Mikrotik RB850Gx2 running RouterOS 6.28. There are about 30 or so ppttp-clients connecting to it.

Every now and then, the RB850Gx2 logs the following error: Encryption got out of sync - disabling
Ru0005.jpg

Ru0004.jpg

I have the same issue with the gx2..

dcavni · Sat Apr 25, 2015 10:23 pm

Every update of RouterOS kills my Ip Adress list, so i have to manualy reconfigure it. Is this a bug or a feature?
Is your Address List dynamic or have a timeout?
I have have an Address List of 3900 IP's (my blacklist), I have never lost it during an update.

One entry is dynamic (PPPoE connection) and two are static (Mikrotik's LAN and another adress range so that i can acess modem on Ether1Gateway.

Bigfoot · Sun Apr 26, 2015 9:18 am

apr/24/2015 06:03:25 system,error,critical System rebooted because of kernel failure
apr/24/2015 06:03:25 system,error,critical Out of memory condition was detected
apr/24/2015 06:03:25 system,error,critical router was rebooted without proper shutdown

Downgrade to 6.27 fix cyclic reboot

rubber · Sun Apr 26, 2015 10:31 am

@npero on my gx2 i had the same problem but after another reboot it get back to normal.. try a reboot
I need some help please.
I have Mikrotik RB850Gx2 running RouterOS 6.28. There are about 30 or so ppttp-clients connecting to it.

Every now and then, the RB850Gx2 logs the following error: Encryption got out of sync - disabling
Ru0005.jpg

Ru0004.jpg
I have the same issue with the gx2..

Restart is invalid, and no way to solve

thedix · Sun Apr 26, 2015 12:51 pm

I upgraded my RB750G from 6.27 to 6.28 and see increasing sector writes when router is idle.
Downgrading to 6.27 solve the problem.

Steps to repeat this issue:
1. Reboot.
2. Enable/disable any rule at Firewall/Filter Rules or Firewall/NAT.
3. See increasing sector writes at System/Resources.

There are users with similar problem:
http://forum.mikrotik.com/viewtopic.php?t=96157

urknall · Sun Apr 26, 2015 1:15 pm

i can confirm the sector write problem. after some monitoring i found out, that the problem probably might be that i have dynamically created address lists in firewall, which is causing this issue for me. i have alot of other services running like dhcp dns ntp but i haven't had time to check them all, but it think its firewall releated somehow...

thepoll · Sun Apr 26, 2015 4:31 pm

Hello,
Updated RB2011UiAS-2HnD-IN from 6.22 to 6.28 and after update it was unreachable and when I looked at the router:
the LCD was all white,
Leds of the Gig-ports where flashing normal,
Leds of Fa-ports all off.

Poweroff-on results in immediate white lcd and (Normal looking) flashing Gig-portleds, no connection possible.

Poweroff with reset-button pressed results in:
(normal looking) lcd with "reboot configuration" message, and after short time all leds on, all leds off, followed by:
White lcd,
blinking Gig-leds,
Fa-leds off,
no connection possible.

Tried netinstall - router seems to react normally - it appears in Netinstall with MAC, and during netboot the Gig-leds and the Fa-leds blinks like normally.
Installation proceeds normally, "waiting for reboot" and after reboot -> in Netinstall "Status OK" -> On router: White led, Gig leds blink, Fa-leds off. Router unreachable. Tried it with OS 5.26 netinstall -> Same result.
Tried it with no equipment attached back2back to pc -> status OK but router not working.
Also on the console-port CTS and DSR on but no RXD or TXD.
(forgot to mention: SFP-int does not seems to work when connected)

According to the (apparently) working netinstall-cycle the router isn't complete dead but after several times trying the above procedures, tried connection on RoMon in Winbox,Winbox connection on MAC... my brain is drained (for now).
Allthough 18 years of networking experience (mainly Cisco), I've not much experience with Mikrotik.

Does anyone has suggestions for solving this problem?
Thanks in Advance!!
Kind regards, Thepoll

Sun Apr 26, 2015 6:05 pm

Simple load sharing VRRP setup for 2 x RB1100AHx2 @ 6.28 taken from: http://wiki.mikrotik.com/wiki/Manual:VRRP-examples

/interface vrrp
add arp=proxy-arp interface=BRGLAN192 name=VRRP-13-GW-254 priority=254 vrid=13
add arp=proxy-arp interface=BRGLAN192 name=VRRP-17-GW-1 priority=1 vrid=17
add address=192.168.1.13/24 interface=VRRP-13-GW-254 network=192.168.1.0
add address=192.168.1.17/24 interface=VRRP-17-GW-1 network=192.168.1.0

On the second RB priorities are just swapped so VRRP-13-GW-254 is Master GW for DHCP users.
VRRP-17-GW-1 is not used but active. RBs are connected to the same switch.
Each RB is connected to different ISP.

The problem:
VRRP changes Master without reason from RB1 to RB2 for a while and goes back.
For VRRP-13 master I have up/down scripts logging change but there is no log activity.
There are only 3 devices running now in the LAN, ISPs are reliable.
There is no reason for such behaviour.

alireza6917 · Mon Apr 27, 2015 8:12 am

Hi

I am wondering why don't you add important stuff like 'TR101' to routeros?
We have a big ADSL network and we use routerboard as BRAS.
We need user port information to be passed to RADIUS but routeros does not support this.
Because of this we are forced to buy cisco routers.
Could you please consider adding this feature to routeros?

Best Regards

karina · Mon Apr 27, 2015 4:38 pm

Every update of RouterOS kills my Ip Adress list, so i have to manualy reconfigure it. Is this a bug or a feature?

sounds like these must be dynamic lists that are deleted whenever the router is rebooted. I have never see this with static lists

StubArea51 · Mon Apr 27, 2015 5:10 pm

I have the same problem as leandrobianchin except my CRS-226 just has a 10GBE uplink to the CCR1036 via SFP+. The uplink also serves as the master of the entire CRS. The CCR has been running ok on 6.28 and 6.29rc10 but SFP+ on CRS has been a frequent problem after 6.27. So far I've found the relatively stable combination being with CCR running 6.27 or 6.28 or 6.29rc10 and CRS running 6.27. But even this combination still causes one SFP+ incidence on CRS every 5-6 days.

It shouldn't matter, but i'm curious which SFPs you are using?

mirolm · Mon Apr 27, 2015 8:44 pm

I runned to another case of increasing sector writes at System/Resources. Steps to reproduce:
- open winbox.
- check sector writes first to check it is not changing.
- go to ip --> firewall --> connections.
- stay there browse the list.
- sector writes start to increase by 1 - 2 every second untill you reboot router.

I observe this on my RB951G-2HnD. RouterOS 6.28.

ditonet · Mon Apr 27, 2015 9:03 pm

I runned to another case of increasing sector writes at System/Resources. Steps to reproduce:
- open winbox.
- check sector writes first to check it is not changing.
- go to ip --> firewall --> connections.
- stay there browse the list.
- sector writes start to increase by 1 - 2 every second untill you reboot router.

I observe this on my RB951G-2HnD. RouterOS 6.28.

Same on RB433AH...

Regards,

tron · Mon Apr 27, 2015 9:29 pm

- sector writes start to increase by 1 - 2 every second untill you reboot router.

1) Close Firewall window and then close Winbox.
2) Run Winbox.
3) What about sector writes? I don't see any increasing now...

mirolm · Mon Apr 27, 2015 9:33 pm

- sector writes start to increase by 1 - 2 every second untill you reboot router.
1) Close Firewall window and then close Winbox.
2) Run Winbox.
3) What about sector writes? I don't see any increasing now...

Hmm you are right. They stop to increase after you restart winbox.

rextended · Mon Apr 27, 2015 11:48 pm

After some year of RouterOS i notice one strange thing:
why I never have one sinle problem during update (*)???

I think because I use this method for update/upgrade the bios and the OS:

When I buy the RouterBOARD and arrive to office:

1) update the board with latest BIOS,

2) use latest netinstall to install the RouterOS I consider stable: actually 6.20 for non "ac" CPE(**) and 6.27 for non-CPE devices or new "ac" CPE
without keeping previous configuration and use only routeros-xxxx.npk instead of single files.
it also remove any distributor branding: the wisp service is mine, not of my distributors....
if needed I add not included packages like user-manager, ntp or Multicast at the same time of netinstall

3) disable (NOT REMOVE) unused packages, like hotspot on standard CPE

4) reset config without keep user, without any backup and without default configuration

5) now I configure the device as needed.

For update, or I do it online with system/package/upgrade or i put routeros-xxxx.npk inside the file folder or i download it by system/auto-upgrade and I reboot.
1) make one export compact, backup and database backup
2) upgrade
3) make another export compact
4) compare the two export and if something different, investigate why and make some decision about what is changed.
5) Fix the settings changed or set the new defaults, like this:

on new export:
/ip ipsec policy
set 0 dst-address=0.0.0.0/0 src-address=0.0.0.0/0
/ip upnp
set allow-disable-external-interface=yes

alig to default routeros value:
/ip ipsec policy
set [find where dst-address=0.0.0.0/0 src-address=0.0.0.0/0] dst-address=::/0 src-address=::/0
/ip upnp
set allow-disable-external-interface=no

(*) = not counting this two, are bug not related to updating but inside the update:
[pppoe server + eoip = MTU kernel panic] and [pppoe encryption + EoIP = kernel panic] from 6.8 to 6.27, solved on 6.28

(**) = because I want all the CPE at the same software release for better manage any problem or for fast configure all devices when something change.

bclewl1ns · Tue Apr 28, 2015 3:21 am

Can we get some Wireless improvements to NV2 in this release.

angboontiong · Tue Apr 28, 2015 3:36 am

Any new thing for the wireless ???

Tue Apr 28, 2015 8:34 am

Issue with sector writes rising will be fixed in version 6.29. If you want to test it, then fix for it will be included in RouterOS starting from 6.29rc13 version when it comes out.

bclewl1ns · Tue Apr 28, 2015 11:01 am

Hate to sound like a broken record. But we really need some fixed for TCP traffic over NV2. Any Idea when that is going to happen.

Tue Apr 28, 2015 11:19 am

Hate to sound like a broken record. But we really need some fixed for TCP traffic over NV2. Any Idea when that is going to happen.

To less people urge Mikrotik to do work for this. I tried for a long time now. My only solution is to replace MT where I see this problem.

bclewl1ns · Tue Apr 28, 2015 11:37 am

Hate to sound like a broken record. But we really need some fixed for TCP traffic over NV2. Any Idea when that is going to happen.
To less people urge Mikrotik to do work for this. I tried for a long time now. My only solution is to replace MT where I see this problem.

I am afraid i am going to have to start doing the same thing. It is to hard to have Links that should do 200 or 300 Meg getting 10 Meg TCP. I have lost customers over this.

Lakis · Tue Apr 28, 2015 12:54 pm

Hate to sound like a broken record. But we really need some fixed for TCP traffic over NV2. Any Idea when that is going to happen.
To less people urge Mikrotik to do work for this. I tried for a long time now. My only solution is to replace MT where I see this problem.
I am afraid i am going to have to start doing the same thing. It is to hard to have Links that should do 200 or 300 Meg getting 10 Meg TCP. I have lost customers over this.

yep fanny isnt it!?
I have links using nstreme can go up to 100mbit, when switched to nv2 it can barely go 20 to 30mbits
And when AC txpower will be fixed?

rextended · Tue Apr 28, 2015 1:18 pm

BUG:

"export" do not export keepalive enabled if keepalive=10,10

Tue Apr 28, 2015 2:53 pm

I have links using nstreme can go up to 100mbit, when switched to nv2 it can barely go 20 to 30mbits
And when AC txpower will be fixed?

This is even more funny going over multiple hops or/and using .ac. You've great (udp)bandwidth but the customer blames you what the sh... you're selling him.

Tue Apr 28, 2015 3:24 pm

rextended - Thank you. We already are familiar with this issue. It is reported to developers. You should be able to see it if you run verbose export.

CyberTod · Tue Apr 28, 2015 4:02 pm

In changelog for 6.29rc I see this change :

vrrp - do not reset interface when no interesting config changes;

Can this be expanded for all interface types and other items ? Especially when adding/changing comments.

bclewl1ns · Wed Apr 29, 2015 12:54 am

I have links using nstreme can go up to 100mbit, when switched to nv2 it can barely go 20 to 30mbits
And when AC txpower will be fixed?
This is even more funny going over multiple hops or/and using .ac. You've great (udp)bandwidth but the customer blames you what the sh... you're selling him.

We are seeing decreased in every part of our network because of this problem. Nstream does not handle Multipoint well. 802.11 has high latency and NV2 had TCP throughput problems. I really wish (REALLY WISH) Mikrotik would spend some time on Fixing this issue and others related to CORE service rather then releasing all these NEW Features.

New Features + Existing Buggs= MORE BUGGS.

Sorry Need to vent I have a 100% Mikrotik Network and Now competitors with Ubiquity are running faster them I am. Does not do my heart well.

armandfumal · Wed Apr 29, 2015 9:01 am

Hi all,

Upgrade to 6.28, CCR1036
after 20 mins my BGP config disappear, no more instance, no more config possible.
autosuppout created.
reverse to 6.27 resolve the problem.
ticket created at support.

anybody has the case ?

regards

Armand
What model?
I have only some CCR1036-12G-4S and no one have this problem.
CCR1036-12G-4S, autosuppout has been created by the problem and has sent to support, waiting reply from them...

Ok BUG confirmed, Support told this will be fix in the next release...

Wed Apr 29, 2015 9:36 am

Hate to sound like a broken record. But we really need some fixed for TCP traffic over NV2. Any Idea when that is going to happen.

Have you investigated how NV2 works?? and also how TCP works??

Try to do the test in the middle of night when your TCP connection is only traffic on the link.
Then try to do the same test in the morning when half link is busy with clients traffic.

You will see that your test will give better results in the morning when there are some other traffic on the link.
It is just the way NV2 works..., if all you need is single TCP connection - DO NOT USE NV2...

imTIgger · Wed Apr 29, 2015 10:07 am

6.28 seems broken to me (RB951G-2HnD)
Random reboot every few minutes.

Wed Apr 29, 2015 10:11 am

imTIgger - Please reboot your device, generate supout file and then wait until your RAM memory fills up. Then generate another supout file. Send both of these files to support@mikrotik.com. Make sure that your device is not completely frozen when you try to generate second file.

bclewl1ns · Wed Apr 29, 2015 10:26 am

Hate to sound like a broken record. But we really need some fixed for TCP traffic over NV2. Any Idea when that is going to happen.
Have you investigated how NV2 works?? and also how TCP works??

Try to do the test in the middle of night when your TCP connection is only traffic on the link.
Then try to do the same test in the morning when half link is busy with clients traffic.

You will see that your test will give better results in the morning when there are some other traffic on the link.
It is just the way NV2 works..., if all you need is single TCP connection - DO NOT USE NV2...

Thanks of the reply. Yes I have investigated how NV2 works. Don't let the Newbie fool ya. I have been working with Mikrotik for along time. The simple problem is TCP over NV2 in a PTMP environment is increasingly painful. Latency it to high and TCP throughput is severely decreased. And let me be clear. I only use NV2 in PTMP systems. I also did at test with with support from customer on one of my cleanest sectors. 5 RB911 AC CPE's connected to a RB921 netMetal AP. Speed via NSTREAM on all customers was in excess of 50 Meg TCP up and down (All customers testing at the same time). When i switch to NV2 Speed decreased to just above 10 Meg down and 6 to 7 up. I would not call that a single TCP connection. So are you sure you really know what you don't know!!

imTIgger · Wed Apr 29, 2015 10:29 am

strods - Okay, I have created a support ticket on the website.
Actually, it reboots almost every minute.

uptime: 1m8s
version: 6.28
build-time: Apr/15/2015 15:18:31
free-memory: 12.7MiB
total-memory: 128.0MiB

I downgraded to 6.27 and everything works again, with ~100MiB free memory most the time.

Wed Apr 29, 2015 11:21 am

The simple problem is TCP over NV2 in a PTMP environment is increasingly painful...

PTMP environment... that was the significant information that was missing....
Please, make sure that you point that out.. cause PtP it works as it should.

Also there is no need to refer to this problem in every unrelated forum topic, it doesn't work - you need to write to support@mikrotik.com

In any case PTMP NV2 is not the most common config, especially with 802.11ac around. So on global scale significance of the fix vs. time to fix it simply doesn't cost the effort. So you might need to work around it.

ibm · Wed Apr 29, 2015 11:47 am

The simple problem is TCP over NV2 in a PTMP environment is increasingly painful...
In any case PTMP NV2 is not the most common config, especially with 802.11ac around. So on global scale significance of the fix vs. time to fix it simply doesn't cost the effort. So you might need to work around it.

Probably is not the most common but there are thousand and thousand AP that are working with NV2 in PtMP and this is the only protocol that can compete with airmax.

Wed Apr 29, 2015 11:59 am

The simple problem is TCP over NV2 in a PTMP environment is increasingly painful...
PTMP environment... that was the significant information that was missing....
Please, make sure that you point that out.. cause PtP it works as it should.

No. If your traffic passes multiple ptp connections your tcp-speed decreases with every nv2 ptp hop. So the problem ist with ptp, too.

Also there is no need to refer to this problem in every unrelated forum topic, it doesn't work - you need to write to support@mikrotik.com

They know the problem but it has no priority due to not enough users urge them to work on that. Writing to a forum is "urge them". Your statement is: Everything is fine just ignore this.

In any case PTMP NV2 is not the most common config, especially with 802.11ac around. So on global scale significance of the fix vs. time to fix it simply doesn't cost the effort. So you might need to work around it.

There is no solution to work around. You can try to use nstreme but nstreme is very sensitive to interference so you get faster tcp-speeds but with disconnects.

Wed Apr 29, 2015 12:14 pm

No. If your traffic passes multiple ptp connections your tcp-speed decreases with every nv2 ptp hop. So the problem ist with ptp, too.

Over saturated links - no problem. I have 5 ptp hops
If link is almost empty, then i observe the same decrease, but it is only logical.

They know the problem but it has no priority due to not enough users urge them to work on that. Writing to a forum is "urge them". Your statement is: Everything is fine just ignore this.

Sorry, but Hijacking topics is simply impolite! Create a topic and spam in it as much times as you like!

Lakis · Wed Apr 29, 2015 2:52 pm

macgaiver: 'cause PtP it works as it should' - using nv2 hm... 99% I am not sure about that, well you should try nstreme and see how it should work - except disconnect problem (yep ste:nstreme is very sensitive to interference) but noting is done past 2 years.
And again Mikrotik please give me a simple answer when AC txpower will be fixed?

Wed Apr 29, 2015 3:09 pm

macgaiver: 'cause PtP it works as it should' - using nv2 hm... 99% I am not sure about that, well you should try nstreme and see how it should work - except disconnect problem (yep ste:nstreme is very sensitive to interference) but noting is done past 2 years.
And again Mikrotik please give me a simple answer when AC txpower will be fixed?

Just stop spamming

bclewl1ns · Thu Apr 30, 2015 5:52 am

Well it looks like i touched a nerve. Look I believe that Mikrotik is a fantastic system. But I am noticing an ongoing problem with NV2 and TCP connections. And as everyone here knows TCP works in multiple streams However. When your delivering a 25 Meg Connection to a user and they get on a speediest server and continually complain about speed. It becomes and issue. Especially when UBNT does great at those tests. I have also submited trouble tickets on tcp and nv2 speed problems and you get no response the only place you have to URGE a response is in the forums. There are also MANY posts on this in the forums. To draw some attention we post in the New Release forums. It is not an attempt to complain to complain or to spam for spamming sake it is an attempt to let the company who I have spend Thousands of Dollars on know that it is a REAL PROBLEM. We invest in this infrastructure we rely on it. We make our livings off of it. Please explain to me why in a forum on RouterOS release and beta testing it is considered spamming a topic to discuss a PROBLEM with ROUTEROS.

Lakis · Thu Apr 30, 2015 11:50 am

Well it looks like i touched a nerve. Look I believe that Mikrotik is a fantastic system. But I am noticing an ongoing problem with NV2 and TCP connections. And as everyone here knows TCP works in multiple streams However. When your delivering a 25 Meg Connection to a user and they get on a speediest server and continually complain about speed. It becomes and issue. Especially when UBNT does great at those tests. I have also submited trouble tickets on tcp and nv2 speed problems and you get no response the only place you have to URGE a response is in the forums. There are also MANY posts on this in the forums. To draw some attention we post in the New Release forums. It is not an attempt to complain to complain or to spam for spamming sake it is an attempt to let the company who I have spend Thousands of Dollars on know that it is a REAL PROBLEM. We invest in this infrastructure we rely on it. We make our livings off of it. Please explain to me why in a forum on RouterOS release and beta testing it is considered spamming a topic to discuss a PROBLEM with ROUTEROS.

ste quote "Just stop spamming

" it was just a joke

look bclewl1ns NV2 does not work like that, not like on Mikrotik web "Performance test results", in real world u can not expect in PTMP situation AP to deliver 150mbit to station. And in some parts u are right nv2 needs lot of improvements
especially for the P2P situation

turnip · Thu Apr 30, 2015 4:02 pm

I can confirm this - updated 3 routers to 6.28 and enabled RoMON. Tested it then switched it off. CPU usage sits at 100% for single processor (CRS125) and 50% for dual core (x86) router. Switched it back on and disabled all RoMON ports, and it's back to normal.

ROS 6.28, RB2011UAS-2HnD

try this

1) Tools -> RoMON, check ENABLE, click OK

2) Tools -> RoMON, uncheck ENABLE, click OK

CPU usage will be 100%, you must enable it again.

mnemo · Sat May 02, 2015 8:46 pm

I have a RB850Gx2 and when I update from v6.26 to v6.28 with the upgrade package I had a problem becouse the multicast package disappeared.

The solution is to load the muticast package from "All packages" package.

Please, solve it in the next update.

rpingar · Sat May 02, 2015 10:10 pm

The simple problem is TCP over NV2 in a PTMP environment is increasingly painful...
PTMP environment... that was the significant information that was missing....
Please, make sure that you point that out.. cause PtP it works as it should.
No. If your traffic passes multiple ptp connections your tcp-speed decreases with every nv2 ptp hop. So the problem ist with ptp, too.

Also there is no need to refer to this problem in every unrelated forum topic, it doesn't work - you need to write to support@mikrotik.com
They know the problem but it has no priority due to not enough users urge them to work on that. Writing to a forum is "urge them". Your statement is: Everything is fine just ignore this.

In any case PTMP NV2 is not the most common config, especially with 802.11ac around. So on global scale significance of the fix vs. time to fix it simply doesn't cost the effort. So you might need to work around it.
There is no solution to work around. You can try to use nstreme but nstreme is very sensitive to interference so you get faster tcp-speeds but with disconnects.

I have the same exact experience,
tcp single stream is a very big issue in umltiple nv2 hop and in a ptmp.

nstream is very sensitive and with disconntions, only latest release and ac hardware seems little bit better.

Hope MT can get better.
But lately (2 years) they seems more focused on other part of the business.

regards
Ros

bclewl1ns · Sun May 03, 2015 7:49 am

Well it looks like i touched a nerve. Look I believe that Mikrotik is a fantastic system. But I am noticing an ongoing problem with NV2 and TCP connections. And as everyone here knows TCP works in multiple streams However. When your delivering a 25 Meg Connection to a user and they get on a speediest server and continually complain about speed. It becomes and issue. Especially when UBNT does great at those tests. I have also submited trouble tickets on tcp and nv2 speed problems and you get no response the only place you have to URGE a response is in the forums. There are also MANY posts on this in the forums. To draw some attention we post in the New Release forums. It is not an attempt to complain to complain or to spam for spamming sake it is an attempt to let the company who I have spend Thousands of Dollars on know that it is a REAL PROBLEM. We invest in this infrastructure we rely on it. We make our livings off of it. Please explain to me why in a forum on RouterOS release and beta testing it is considered spamming a topic to discuss a PROBLEM with ROUTEROS.
ste quote "Just stop spamming " it was just a joke

look bclewl1ns NV2 does not work like that, not like on Mikrotik web "Performance test results", in real world u can not expect in PTMP situation AP to deliver 150mbit to station. And in some parts u are right nv2 needs lot of improvements
especially for the P2P situation

Not sure were you got the 150M in my posts. And I am aware that NV2 Does not work like that and I can never expect 150 Meg on a PTMP link I am looking back and can't find were in this thread i have stated that. However, their are items that need to be addressed.

1. Latency - Even using auto on the NV2 Setting latency is way to high.
2. Jitter - It is increasely getting worse on NV2 Links
3. TCP Throughput Should be more stable and better then 10% of UDP

I am aware of NV2's benefits and its shortcomings. My only POINT is that instead of doing all these new features LETS Stabilize a issue that is effecting current users.

ibm · Sun May 03, 2015 11:50 am

1. Latency - Even using auto on the NV2 Setting latency is way to high.
2. Jitter - It is increasely getting worse on NV2 Links
3. TCP Throughput Should be more stable and better then 10% of UDP

I am aware of NV2's benefits and its shortcomings. My only POINT is that instead of doing all these new features LETS Stabilize a issue that is effecting current users.

+1

spacemind · Mon May 04, 2015 2:00 am

Hello,

Upload rate in queues is shown in bits instead of kb alson on this version.
The queues are set in radius.

Chupaka · Mon May 04, 2015 3:11 pm

Hello,

Upload rate in queues is shown in bits instead of kb alson on this version.
The queues are set in radius.

1228800 bps is 1228,8 kbps, and WinBox does not round limits in output. for example, 1228000 should be shown as 1228k

ddejager · Mon May 04, 2015 4:32 pm

Issue with sector writes rising will be fixed in version 6.29. If you want to test it, then fix for it will be included in RouterOS starting from 6.29rc13 version when it comes out.

This item does not seem to be listed in the changelog for 6.29. Is it, in fact, fixed? If it will take a long time for 6.29 to be released (due to the addition and testing of fast-track) can this fix be provided independently sooner?

[Update: it is showing up in the changelog now, perhaps I just missed it earlier]

bosuagwu · Mon May 04, 2015 4:48 pm

is quite cool. Nice work.

usmanahmed · Tue May 05, 2015 12:50 pm

Dear Mikrotik Support,

I have CR1036-12G-4S on version 6.28 and we are facing issue in guest page (hotspot) page that its not opening. we have to restart the router to resolve the issue. please look into it and if any logs is required from my side, please let me know, i will provide the logs on this forum

Usman Ahmed

PastuhMedvedey · Tue May 05, 2015 2:26 pm

jan/02/1970 00:41:33 system,error,critical System rebooted because of kernel failure
jan/02/1970 00:41:33 system,error,critical Out of memory condition was detected
jan/02/1970 00:41:33 system,error,critical router was rebooted without proper shutdown
jan/02/1970 00:41:37 interface,info sfp-sfpplus1 link up (speed 10G, full duplex)
jan/02/1970 00:41:38 interface,info sfp-sfpplus2 link up (speed 10G, full duplex)

During the test (traffic generator), the router reboots spontaneously. The test involved two 10G interface.
Router - CCR-1036 8g-2s+ . Supout file sent to support.

rextended · Tue May 05, 2015 9:55 pm

Now are 15 days after I have installed the 6.28 on my border BGP routers, my gateways, firewalls and user-managers.

No one single problem, except I must reboot one time each devices for update the software from 6.27 to 6.28

MikroTik: Is possible to update the software without reboot the machines?

Chupaka · Wed May 06, 2015 12:54 am

Now are 15 days after I have installed the 6.28 on my border BGP routers, my gateways, firewalls and user-managers.

No one single problem

on 17th day one of my CCRs became loosing packets on _some_ neighbour routers until reboot... I hope it was just a Moon in wrong phase

wfebbo · Wed May 06, 2015 2:09 am

After update Router OS 6.28 RB1100AHx2 not send e-mail backup!

Error: timeout occured

paoloaga · Wed May 06, 2015 3:14 am

I am experiencing troubles with the MTU on PPPoE session through a VLAN on a RB2011. The automatic mangle rule that changes MSS to 1440 seems not to work correctly. If I manually add a mangle rule that sets MSS to 1400 everything works again. The router was working correctly with v6.22. I also tried 6.29rc14 and the behaviour is the same as v6.28.

I hope to find the time tomorrow to open a ticket, generate the supout and try to find the exact steps to reproduce this bug.

sinaexer · Wed May 06, 2015 8:28 am

Hi
Unfortunately, the new version (6.28) web proxy does not work
Please check

kivimart · Wed May 06, 2015 9:23 am

Hi
Unfortunately, the new version (6.28) web proxy does not work
Please check

i have 2 diffrrent RB that runs web-proxy on 6.28, no problem

bclewl1ns · Wed May 06, 2015 10:10 am

1. Latency - Even using auto on the NV2 Setting latency is way to high.
2. Jitter - It is increasely getting worse on NV2 Links
3. TCP Throughput Should be more stable and better then 10% of UDP

I am aware of NV2's benefits and its shortcomings. My only POINT is that instead of doing all these new features LETS Stabilize a issue that is effecting current users.
+1

So Interesting info to share. We replaced some of our backhaul links with Mimosa. Previously we had PTP RB921 Net Metals with NV2 because well it is the only one stable. We were getting 275 Meg up and Down. (Not to shabby) on the NetMeals. The Mimosa is doing 720 up and Down. Also Latency is only 2 MS verses 8 to 15 on the NV2 Link. All that is great However the most interesting item to note is The bandwidth on all of our NV2 PTMP sectors Went back to normal. Customers called us to inform us that the bandwidth was better then it was before. Testing we were getting 90 Meg UDP and 85 TCP on 911ac CPE's connected to a 921 Netmetal Ac sector. I was amazed out how much the CPE performance was increased when we moved out the NV2 PTP's in the system.

We also tested this with a older RB911 N link to a secondary site with ROS 5.26 using NSTREAM - Same Result as with the mimosa. Increase in overall performance and CPE speed.

In our network we are going to move all NV2 PTP's our and replace them with other systems. Mikrotik Please make it a point in the future to fix NV2 in PTP environments

nmaton · Wed May 06, 2015 1:23 pm

For me this is one of the buggiest releases yet.

My router hangs and stops forwarding packets.
I can still connect via serial but when you issue the system reboot command .. it hangs and spews out the following (but does not reboot)

] > system reboot
Reboot, yes? [y/N]:
y
system will reboot shortly

Rebooting...
Stopping services...
(0,3) WARNING: waiting for reply message: timed out
(0,3) Now cycle 562417970394666, timeout 40000000000 cycles
(0,3) Caller 0xfffffffc00042c58 with ICS 0
(0,3) Message type 0x10f, dest 0x40
(0,3) chan 1: 271
(0,3) chan 2: 271
(0,3) chan 4: 271
(0,3) chan 5: 271
(0,3) chan 17: 271
(0,3) chan 18: 271
(0,3) chan 19: 271
(0,3) chan 20: 271
(0,3) chan 21: 271
(0,3) chan 33: 271
(0,3) chan 34: 271
(0,3) chan 35: 271
(0,3) chan 36: 271
(0,3) chan 37: 271
(0,3) chan 49: 271

This on my 2 CCR1036 routers which are configured solely for PPTP termanation purposses.

Wed May 06, 2015 2:47 pm

nmaton,

please contact MikroTik support (support@mikrotik.com) with attached support output files from one of your routers.
We will try to find out what is the reason for your issues. We are sorry for any inconvenience.

rextended · Wed May 06, 2015 3:59 pm

Hi
Unfortunately, the new version (6.28) web proxy does not work
Please check

1) Clear Cache
2) Change the webproxy folder
3) clear again cache

retry...

formatc · Wed May 06, 2015 4:50 pm

L2TP/ipsec firewall config:

/ip firewall mangle

chain=input action=mark-packet new-packet-mark=ipsec passthrough=yes
protocol=udp dst-port=500,4500 log=no log-prefix=""

/ip firewall filter
3 chain=input action=accept protocol=udp dst-port=1701 packet-mark=ipsec
log=yes log-prefix=""
4 chain=input action=reject reject-with=icmp-network-unreachable
protocol=udp dst-port=1701 packet-mark=no-mark log=no log-prefix=""

L2TP/IPsec packet does not match rule 3, but match rule 4.
It seems there is no marker after the decryption IPSEC packet.

downgrade to 6.27 solve this problem.

KillerOPS · Wed May 06, 2015 11:35 pm

bclewl1ns, i think you should also consider the increased self-interference in your setup.
I've experienced this myself. You keep adding links and customers on the towers, and you can't expect the overall performance not to degrade. Also, your competitors don't stand still. They also keep adding links and customers.

4 years ago 5Ghz was clean. Now, I think in some places 2.4Ghz is cleaner than 5.
Also, it's a pretty known fact that nstreme on n p2p links is much better compared to NV2. Nv2 has that TDMA thingie which is very useful in P2MP, but almost useless in p2p.

bclewl1ns · Thu May 07, 2015 12:13 am

I am well aware of the increased self-interference . We plan sites very carefully to avoid this as much as possible. I also agree Nstream is allot better for PTP however it has proven to be almost useless when it comes to the new AC radios. nstream disconnects frequently and throughput is about half that of NV2. Understand this is not a criticism but a info share that is showing that there needs to be some work on the PTP side of NV2 or better fixing nstream to work with ac radios. More info on self-interference, The Mimosa radios we have replaced our backhaul with are 5 Ghz radio 4X4 so it uses 160 Mhz of spectrum. If anything we polluted our environment more by adding them in. However Speeds increased significantly. They are also TDMA based radios. But they have GPS Sync.

paolopoz · Thu May 07, 2015 12:27 pm

Does anybody experienced problems with wireless disconnections after upgrading to 6.28?
I have a PtP link and after upgrading one of the two sides I keep getting disconnections with error:

lost connection received deauth class 2 frame received (6)

After downgrading to 6.27 the problem disappeared.
The board is RB711-5Hn-MMCX
The wireless card is AR5008 Wireless Network Adapter (rev: 1)

PastuhMedvedey · Thu May 07, 2015 3:14 pm

Router - CCR-1036 8g-2s+
RouterOS v6.28

Slow download speeds BGP prefixes, and uneven loading the CPU.
Wrong time BGP session timer.

paolopoz · Thu May 07, 2015 3:38 pm

Slow download speeds BGP prefixes, and uneven loading the CPU.

This is a known limitation: BGP routing table loading is single threaded thus using only one CPU.

PastuhMedvedey · Thu May 07, 2015 4:18 pm

This is a known limitation: BGP routing table loading is single threaded thus using only one CPU.

skibi82 · Sun May 10, 2015 11:39 am

When the gentlemen of mikrotik deign to reply:

Ticket#2015042166000534 Data: 2015-04-21 16:08
Post
2015-04-21 15:57
Critical bug in 6.28
After updating to version 6.28 is the problem of detection ipsec esp.

Before that could properly be described in Mangle encrypted traffic Packet

Markt: IPSEC and then on filter rule i culd filter IP inside the ipsec
tunnel

Since version 6.28 does not have the capability of this.
Because the above error stanol traffic on one of the VPN concentrator.
Please fix it as fast as possible

1 Rule on mangle

/ip firewall mangle
add action=mark-packet chain=input comment=IPSEC new-packet-mark=\
ipsec-encrypted passthrough=no protocol=ipsec-esp

2 Rule on forward
/ip firewall filter
add action=passthrough chain=forward comment=IPSEC
packet-mark=ipsec-encrypted

L2TP/ipsec firewall config:

/ip firewall mangle

chain=input action=mark-packet new-packet-mark=ipsec passthrough=yes
protocol=udp dst-port=500,4500 log=no log-prefix=""

/ip firewall filter
3 chain=input action=accept protocol=udp dst-port=1701 packet-mark=ipsec
log=yes log-prefix=""
4 chain=input action=reject reject-with=icmp-network-unreachable
protocol=udp dst-port=1701 packet-mark=no-mark log=no log-prefix=""

L2TP/IPsec packet does not match rule 3, but match rule 4.
It seems there is no marker after the decryption IPSEC packet.

downgrade to 6.27 solve this problem.

rextended · Sun May 10, 2015 5:34 pm

When the gentlemen of mikrotik deign to reply:

Ticket#2015042166000534 Data: 2015-04-21 16:08
Post
2015-04-21 15:57
Critical bug in 6.28
After updating to version 6.28 is the problem of detection ipsec esp.

Before that could properly be described in Mangle encrypted traffic Packet

Markt: IPSEC and then on filter rule i culd filter IP inside the ipsec
tunnel

Since version 6.28 does not have the capability of this.
Because the above error stanol traffic on one of the VPN concentrator.
Please fix it as fast as possible

1 Rule on mangle

/ip firewall mangle
add action=mark-packet chain=input comment=IPSEC new-packet-mark=\
ipsec-encrypted passthrough=no protocol=ipsec-esp

2 Rule on forward
/ip firewall filter
add action=passthrough chain=forward comment=IPSEC
packet-mark=ipsec-encrypted

You mark the packet on input chain and apply the filter on forward chain.

Obviously you can not see any input marked packet on forward chain.
Use on both rules the input chain or on both rules the forwad chain.

skibi82 · Mon May 11, 2015 4:55 pm

1. According to the scheme packet floow, described ipsec traffic on input should be visible on a forward with mark.
Everything works fine until 6.27
After the update above 6.28 there is now the possibility to describe traffic that it's ipsec with the ipsec
A change in the documentation does not make this any indication of change Packet floow

Please you to firstly understand what is written:
http://wiki.mikrotik.com/wiki/Manual:Pa ... decryption

700px-Packet_Flow_Example_5c.png

rextended - And by the way, you can run as dekryptor ESP if you want to input you lead srcip

When the gentlemen of mikrotik deign to reply:

Ticket#2015042166000534 Data: 2015-04-21 16:08
Post
2015-04-21 15:57
Critical bug in 6.28
After updating to version 6.28 is the problem of detection ipsec esp.

Before that could properly be described in Mangle encrypted traffic Packet

Markt: IPSEC and then on filter rule i culd filter IP inside the ipsec
tunnel

Since version 6.28 does not have the capability of this.
Because the above error stanol traffic on one of the VPN concentrator.
Please fix it as fast as possible

1 Rule on mangle

/ip firewall mangle
add action=mark-packet chain=input comment=IPSEC new-packet-mark=\
ipsec-encrypted passthrough=no protocol=ipsec-esp

2 Rule on forward
/ip firewall filter
add action=passthrough chain=forward comment=IPSEC
packet-mark=ipsec-encrypted

You mark the packet on input chain and apply the filter on forward chain.

Obviously you can not see any input marked packet on forward chain.
Use on both rules the input chain or on both rules the forwad chain.

Mon May 11, 2015 6:02 pm

@skibi82: ipsec is in transport mode or tunnel mode?

skibi82 · Mon May 11, 2015 8:37 pm

In Mail from 2015-04-21 15:57:23.04.2015 - Ticket#2015042166000534 was picture incluted:

wtf.png

YES is in tunnel mode

@skibi82: ipsec is in transport mode or tunnel mode?

Sykotic · Tue May 12, 2015 12:34 pm

Hi Mikrotik support.

6.28 broke BGP signaled VLPS.
I don't have any logs as I don't have the spare equipment to do it outside of my production environment yet, however it's easy enough to reproduce. Looks like there is at least one other that can confirm the problem.

http://forum.mikrotik.com/viewtopic.php?f=14&t=96705

pingus · Tue May 12, 2015 9:46 pm

I have the same problem with rb600a:

jan/02/1970 00:41:33 system,error,critical System rebooted because of kernel failure
jan/02/1970 00:41:33 system,error,critical Out of memory condition was detected
jan/02/1970 00:41:33 system,error,critical router was rebooted without proper shutdown

And I am not able to downgrade, after the reboot I have still 6.28 installed...

pingus · Tue May 12, 2015 10:08 pm

Ok, got it. The npk file was in a subfolder ...

rgunderson · Wed May 13, 2015 6:16 am

6.28 disabled the SFP on my CCR1009-8G-1S. Downgrading back to 6.27 let it work again.

dmi3 · Wed May 13, 2015 2:30 pm

Hi!
strods told me to write my problem with 6.29RC here, and i must update it from 6.28 cuz "sector writes bug" so:
1. i have a question. Where can i find additional packets like ntp, ups, capsman2 for RC platform?
2. now i use wireless-fp to use capsman, and i got 2 routers in configuration, and i got 2 bridges in master router
i got datapath1 configurated to add all master-wifi's in first bridge_work
and cap on master router did it, but no packets pass through router to, even when cap is in bridge_work, inet working but no local connect
on my second datapath2 configuration the slave-wifi's added to bridge_free
i make simple rules to allow bridge_free clients access to 2 of bridge_work adresses and its worked, like it should

when i use capsman2 on 6.28 i didnt have such trouble, all my master-wifi's client with datapath1 can connect each others and every bridge_work (lan) clients

 caps-man datapath print 
 0 name="datapath1" client-to-client-forwarding=yes bridge=bridge_work 

 1 name="datapath2" client-to-client-forwarding=yes bridge=bridge_free

 interface bridge port print
Flags: X - disabled, I - inactive, D - dynamic 
 #    INTERFACE              BRIDGE              PRIORITY  PATH-COST    HORIZON
 0    ether8                 bridge_work             0x80         10       none
 1    ;;; master1
      ether1                 bridge_work             0x80         10       none
 2    ;;; master2
        ether7                 bridge_work             0x80         10       none
 3 I  wlan_work              bridge_work             0x80         10       none
 4 I  ether6                 bridge_work             0x80         10       none
 5    ether9                 bridge_work             0x80         10       none
 6    ether10                bridge_work             0x80         10       none
 7 I  wlan_guest             bridge_free             0x80         10       none
 8 ID cap7                   bridge_work             0x80         10       none
 9  D cap8                   bridge_free             0x80         10       none
10 ID cap9                   bridge_work             0x80         10       none
11  D cap10                  bridge_free             0x80         10       none

[/size]

karlisi · Wed May 13, 2015 3:22 pm

2. now i use wireless-fp to use capsman, and i got 2 routers in configuration, and i got 2 bridges in master router
i got datapath1 configurated to add all master-wifi's in first bridge_work
and cap on master router did it, but no packets pass through router to, even when cap is in bridge_work, inet working but no local connect
on my second datapath2 configuration the slave-wifi's added to bridge_free
i make simple rules to allow bridge_free clients access to 2 of bridge_work adresses and its worked, like it should

when i use capsman2 on 6.28 i didnt have such trouble, all my master-wifi's client with datapath1 can connect each others and every bridge_work (lan) clients

CAPsMAN v1 works fine if you have separate device for CAPsMAN and separate wireless devices, but if you are using for CAPsMAN router with wireless, it won't allow packets between wireless interface and other interfaces on this router. This bug apparently is corrected in v2. There is no exact mention about it in changelog, only this: ' improved CAP<->CAPsMAN data connection protocol'

dmi3 · Wed May 13, 2015 5:00 pm

CAPsMAN v1 works fine if you have separate device for CAPsMAN and separate wireless devices, but if you are using for CAPsMAN router with wireless, it won't allow packets between wireless interface and other interfaces on this router. This bug apparently is corrected in v2. There is no exact mention about it in changelog, only this: ' improved CAP<->CAPsMAN data connection protocol'

Thx fo reply!
I would gladly use capsmanv2, on my running 29rc18, but i didnt know where can i pick a npk file for RC

and one more time in 6.28 with v2 all works great

i got vicious circle
6.27 cant fasttrack
6.28 have "sector writes"
6.29rc doesnt have capsmanv2

what should i do? back to 6.27?

grusu · Wed May 13, 2015 5:21 pm

CAPsMAN v1 works fine if you have separate device for CAPsMAN and separate wireless devices, but if you are using for CAPsMAN router with wireless, it won't allow packets between wireless interface and other interfaces on this router. This bug apparently is corrected in v2. There is no exact mention about it in changelog, only this: ' improved CAP<->CAPsMAN data connection protocol'
Thx fo reply!
I would gladly use capsmanv2, on my running 29rc18, but i didnt know where can i pick a npk file for RC
and one more time in 6.28 with v2 all works great

i got vicious circle
6.27 cant fasttrack
6.28 have "sector writes"
6.29rc doesnt have capsmanv2

what should i do? back to 6.27?

Link for capsmanv2:

http://www.mikrotik.com/download/share/ ... mipsbe.npk

Change "mispbe" with you router architecture.

dmi3 · Wed May 13, 2015 5:53 pm

Link for capsmanv2:

http://www.mikrotik.com/download/share/ ... mipsbe.npk

Change "mispbe" with you router architecture.

THX alot!
there are you get this? any archive or beta page with list of stuffs, or you simply write it with own logic?

pukkita · Wed May 13, 2015 6:14 pm

I am well aware of the increased self-interference . We plan sites very carefully to avoid this as much as possible. I also agree Nstream is allot better for PTP however it has proven to be almost useless when it comes to the new AC radios.

Have yet to test, does this apply also if set in N mode?

grusu · Wed May 13, 2015 9:13 pm

Link for capsmanv2:

http://www.mikrotik.com/download/share/ ... mipsbe.npk

Change "mispbe" with you router architecture.
THX alot!
there are you get this? any archive or beta page with list of stuffs, or you simply write it with own logic?

The information I got from another forum post.