v6.33rc release candidate (final testing)

Thu Sep 03, 2015 2:26 pm

What's new in 6.33rc1 (2015-Sep-02 15:45):

*) ipsec - fix sockaddress buffer size on id generation for ipv6 address;
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) rb493G - fixed reboot loop (introduced in 6.32);
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
*) defconf - fix default configuration for routers without wireless package;
*) mesh - fix router lock-up when interface is added/removed;
*) RB911/912 - fixed lock-up (introduced in 6.32).

onnoossendrijver · Thu Sep 03, 2015 3:09 pm

*) wlan - improve single connection TCP performance for ac chipset with cm2 package;

Sounds nice!

Will 6.32 return in a fixed form or do we have to wait for 6.33 to become stable?

Thu Sep 03, 2015 3:14 pm

*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Sounds nice!

Will 6.32 return in a fixed form or do we have to wait for 6.33 to become stable?

we will have a fixed one return as well, yes

bajodel · Thu Sep 03, 2015 3:17 pm

I can confirm that my lab RB912UAG-2HPnD (broken by 6.32rc6 & 6.32 final) now has booted correctly on 6.33rc2 and I can winbox in it

n21roadie · Thu Sep 03, 2015 4:47 pm

What's new in 6.33rc1 (2015-Sep-02 15:45):

*) ipsec - fix sockaddress buffer size on id generation for ipv6 address;
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) rb493G - fixed reboot loop (introduced in 6.32);
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
*) defconf - fix default configuration for routers without wireless package;
*) mesh - fix router lock-up when interface is added/removed;
*) RB911/912 - fixed lock-up (introduced in 6.32).

Can I ask as a general rule what (basic) tests are done before releasing a RC ?
I mean a RC having reboot loop and lock-up ?
or are new issues like above just added to release checklist before releasing the RC.

Thu Sep 03, 2015 5:04 pm

I am repetitively asking for publishing quality assurance policies that mikrotik works according to, but I haven't got any answer to it. I wonder if you will get info how they test the rc...

n21roadie · Thu Sep 03, 2015 5:23 pm

I am repetitively asking for publishing quality assurance policies that mikrotik works according to, but I haven't got any answer to it. I wonder if you will get info how they test the rc...

If we got a general checklist to what is tested before release, then we can decide how much we want to deploy into
our test network and a short time later maybe a section of the live network (?) and how much more testing maybe required before full deployment, in short we are trying to conduct a risk assessment to updates.

Thu Sep 03, 2015 5:59 pm

Actually you should not deploy any new version until it is publicly proved and you have made all your necessary tests.

Thu Sep 03, 2015 6:13 pm

What's new in 6.33rc1 (2015-Sep-02 15:45):
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;

Very good. Does this help with mixed environment .ac AP and .n CPEs ?
Can you share some background information what is happening (packet reordering ? ack aggregation effect ?).

Lupin · Thu Sep 03, 2015 6:29 pm

What's new in 6.33rc1 (2015-Sep-02 15:45):
*) wlan - improve single connection TCP performance for ac chipset with cm2 package;
Very good. Does this help with mixed environment .ac AP and .n CPEs ?
Can you share some background information what is happening (packet reordering ? ack aggregation effect ?).

Is this an improves also using NV2 protocol?
Any details about percentage of improvment?

patrick7 · Thu Sep 03, 2015 7:36 pm

Usually in software development, there are 3 (or even more) different types of versions:

Beta -> Unstable. New features are added in this phase
RC -> Release Candidate. In this phase, no new features will be added. If testing is OK, it will be released
Stable -> Released version

Most of the past releases, I would describe as "Beta".

I have no idea how MikroTik can publish new RCs every day.

https://en.wikipedia.org/wiki/Software_ ... life_cycle

vortex · Thu Sep 03, 2015 9:22 pm

Maybe this would make people happy:

Call rc Beta
Call Current RC
Call Bugfix Stable

Thu Sep 03, 2015 9:39 pm

It is not about how we understand the naming. It is about our approach to the mikrotik software development life cycle. I would like to see newly released version that none will download and try just because none will want to risk the consequences.

vortex · Thu Sep 03, 2015 9:46 pm

Maybe this would make people happy:

Call rc Beta
Call Current RC
Call Bugfix Stable

And call RouterOS Beta RouterOS Alpha

marrold · Fri Sep 04, 2015 1:46 am

Maybe this would make people happy:

Call rc Beta
Call Current RC
Call Bugfix Stable

Surely if you want to use the word 'beta' then 'RC' should be 'alpha'?

Personally I think people should stop b*tching about the new release schedule, be greatful on the fact it's better than the old system, and give it a few versions to bed in before they complain.

Fri Sep 04, 2015 9:15 am

We have managed to reproduce issue with mangle rules disappearing. It will be fixed in upcoming 6.33rc versions.

As for rc version testing - Release Candidate is more likely to a nightly build. We will not do intensive testing before publishing these, only quick check if upgrade can be done and if most features work fine.

You are not forced to upgrade your router to rc version. Versions are released for those who has some problems on router and fix or possible fix is included in these packages. Basically rc is released for those who actually need it and for those who wants to do some testing and give us feedback.

Fri Sep 04, 2015 12:32 pm

6.33rc3 is released.

New fixes:
*) RB532/RB564 - fixed no link after ethernet disable/enable;
*) firewall - do not lose firewall mangle rules on start-up (introduced in 6.32);
*) tile - fixed occasional deadlock on module unload;

juanvi · Fri Sep 04, 2015 12:44 pm

6.33rc3 is released.

New fixes:
*) tile - fixed occasional deadlock on module unload;

Is this related to [Ticket#2015073166000411] Lost capsman confing when upgrading ?

Fri Sep 04, 2015 1:58 pm

juanvi - No, it is not related. This fix is for SFP module unload.

105547111 · Sun Sep 06, 2015 12:37 am

Strods,

What will happen to 6.32 The fixed version that's planned, now will the mangle rules being dropped in 6.32 will this be fixed in 6.32 fixed?

Dropping mangle rules on a reboot is pretty serious issue to leave unresolved to 6.33 unless its planned to fasttrack 6.33

IntrusDave · Sun Sep 06, 2015 7:11 pm

I have a CCR1009 still getting kernel crashes with GCM encryption. (6.33rc3)

Mon Sep 07, 2015 3:54 pm

105547111 - Sorry, but I did not understand your question. Mangle rules are fixed in 6.33rc version. It means that fix will be included in 6.33 full version.

105547111 · Mon Sep 07, 2015 5:10 pm

105547111 - Sorry, but I did not understand your question. Mangle rules are fixed in 6.33rc version. It means that fix will be included in 6.33 full version.

Hi Strods,

I meant what about version 6.32 is the dropping of mangle rules going to be fixed in the re-release of 6.32 or is a faster track to 6.33 going to happen?

I've got devices on 6.32 I don't want to touch until either a 6.32 re-release with fixed mangle rules, or a 6.33 final. I couldn't imagine a 6.32 would be re-released with the mangle dropping issue still left, but I'm asking to be sure...

ochyst · Tue Sep 08, 2015 5:30 am

6.33rc3 seems to be stable version...

Tue Sep 08, 2015 7:58 am

Mangle rules fix is included in v6.32.1, released today

igor88 · Wed Sep 09, 2015 1:00 pm

i am on 6.33rc1 now

looks like all is ok

Wed Sep 09, 2015 1:55 pm

6.33rc4 is released.

New fixes:

*) ppp - fixed ppp interface stuck in not running state;
*) ipsec - fixed kernel failure when packets were not ordered on first call;
*) upnp - randomize action urls to fix "filet-o-firewall" vulnerability;

JB172 · Wed Sep 09, 2015 2:02 pm

6.3rc4 is released.

6.33rc4

Wed Sep 09, 2015 2:11 pm

6.3rc4 is released.
6.33rc4

Thank you. Fixed that.

okoun · Thu Sep 10, 2015 1:52 pm

I would very much like to see the re-added feature to download the upgrade package manager, and so by default withdrew only stable version of the RC version but as it is now.
In an earlier Verich it was quite good and I do not understand why this is so changed, for us it's a problem, because we have a lot of scripts that we have to change too.

For example, this is totally dysfunctional in the latest version:
/system package update check-for-updates; /system package update upgrade;

Thu Sep 10, 2015 2:07 pm

okoun - All you have to do is change "/system package update upgrade" to "/system package update install".

If you did set channel to current, then upgrade process for you will go same as always.

hapi · Thu Sep 10, 2015 3:25 pm

[admin@mikrotik] > /system package update install 
          channel: current
  current-version: 6.32.1
   latest-version: 6.32.1
           status: Downloaded 87% (13.8MiB)

and install again, again and again... same version

hapi · Thu Sep 10, 2015 3:29 pm

[admin@admin] > /system package update install 
          channel: release-candidate
  current-version: 6.33rc4
   latest-version: 6.33rc4
           status: Downloaded 71% (11.2MiB)

and last rc version... again downloading and installing same version.

hapi · Thu Sep 10, 2015 3:35 pm

/system package update check-for-updates;
/system package update install;

This script in scheduler will update again and again the same version.

During the same version will remain on disk packages and the next update with a different version take full disc.

Why do not you give the option manually selecting your own server. I do not want your last version. On own DNS server changes the DNS record (upgrade.mikrotik.com) on your own web server.

Add the option to enter your own url and show all the system directories on the web server. Each can then choose which version locally will be used depending on what you recorded on your own web server.

OmniSurf · Thu Sep 10, 2015 7:40 pm

Issue: IPv4 - router locks up and must be power cycled when adding or removing an IPv4 address.

Notes: We are not changing the IP we are using to connect to the router. Occurs over WinBox and SSH. Works fine on 5.26.

Affected Versions: v6.33rc4, v6.30.4, v6.32.1, v6.32
Hardware: hEX Lite

Next step on our side: Test above on RB750, x86 hardware. Test on versions between 5.26 and 6.29.

Fri Sep 11, 2015 2:11 pm

6.33rc5 will be released today!

New fixes:

*) CAPsMAN - fix 100% CPU usage when trying to upgrade RouterOS on CAP;
*) ethernet - added support for new ASIX USB Ethernet dongles.

okoun · Fri Sep 11, 2015 2:32 pm

fixed:
*) update again and again the same version ??

wake up

hapi · Fri Sep 11, 2015 4:09 pm

6.33rc5 will be released today!

New fixes:

*) ethernet - added support for new ASIX USB Ethernet dongles.

USB Ethernet add, but support for new Intel chips do not add? OMG!!

Fri Sep 11, 2015 4:12 pm

It is easy to add USB devices and modems. Not so easy to add new Kernel.

w0lt · Fri Sep 11, 2015 7:16 pm

6.33rc5 will be released today!

New fixes:

*) ethernet - added support for new ASIX USB Ethernet dongles.
USB Ethernet add, but support for new Intel chips do not add? OMG!!

Same issue as before, "ether1 excessive broadcast/multicast".
See attached image below.
Using a CRS112-8G-4S Firmware v3.23
Has this issue been looked at yet?

Back to v6.30.4 yet again..

G2Dolphin · Sat Sep 12, 2015 12:53 am

*) ethernet - added support for new ASIX USB Ethernet dongles.

Which ones? AX88179 USB3.0 Gigabit adapter isn't working.

Mon Sep 14, 2015 11:41 am

Upgrade loop was not caused by RouterOS. Now it is fixed.

Mon Sep 14, 2015 11:42 am

6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) pptp - improved encryption;
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;

ufm · Mon Sep 14, 2015 12:28 pm

6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);

OMFG! Hardly wait! Thnx!

marekm · Mon Sep 14, 2015 12:35 pm

*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);

One of the PPPoE server features (already supported by accel-ppp) I asked for some time ago - thanks!
How about the other two:
- Delegated-IPv6-Prefix RADIUS attribute (supported by accel-ppp)
- RFC4638 negotiation (supported by rp-pppoe)

5nik · Mon Sep 14, 2015 12:47 pm

*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";

Any details? Please update documentation or post some explanation.

hapi · Mon Sep 14, 2015 12:51 pm

Upgrade loop was not caused by RouterOS. Now it is fixed.

excellent

Mon Sep 14, 2015 3:00 pm

6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) pptp - improved encryption;
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;

Great news on the CoA !

dadoremix · Tue Sep 15, 2015 12:36 am

after 6.33 rc5 upgrade to 6.33 rc7 get these errors

RB 493AH
RB435G

okoun · Tue Sep 15, 2015 10:04 am

Hello, can you please add the SNMP OID for reading CCQ with wireless? I know it's going to do using the API, but it seems quite complicated to it that it is quite a substantial figure. thank you

bajodel · Tue Sep 15, 2015 3:30 pm

*) ethernet - added support for new ASIX USB Ethernet dongles;

Mine is not working..

Tue Sep 15, 2015 3:56 pm

Supout.rif file and to support@mikrotik.com, there is no point posting it here

Tue Sep 15, 2015 5:10 pm

Hello, can you please add the SNMP OID for reading CCQ with wireless? I know it's going to do using the API, but it seems quite complicated to it that it is quite a substantial figure. thank you

I have no problems to read the ccq via snmp. You just need to select the interface number in the oid correctly as each device has different interfaces...

Tue Sep 15, 2015 5:39 pm

6.33rc10 is released!

Changes since 6.33rc7:
*) mipsle - fixed missing second level menu in CLI;
*) sstp - avoid routing loops on client when adding default route;
*) sstp - fixed problem where sometimes sstp ip addresses were invalid;
*) switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
*) tftp - fix request file name reading from packet
*) cerm - also accept downloaded CRLs in PEM format;
*) cerm - show crl nextupdate time.

okoun · Tue Sep 15, 2015 5:55 pm

Hello, can you please add the SNMP OID for reading CCQ with wireless? I know it's going to do using the API, but it seems quite complicated to it that it is quite a substantial figure. thank you
I have no problems to read the ccq via snmp. You just need to select the interface number in the oid correctly as each device has different interfaces...

I found some OID: .1.3.6.1.4.1.14988.1.1.1.3.1.10.2 however no value at all it does not, on the AP or to the side of the station.
I use mostly OID for Rx and Tx CCQ

Tue Sep 15, 2015 6:12 pm

Each wlan interface provides its own tx ccq. Get the other side tx ccq from the second device directly.

w0lt · Tue Sep 15, 2015 6:30 pm

6.33rc10 is released!

Changes since 6.33rc7:
*) switch - fixed bogus log messages about excessive broadcasts/multicasts on master-port;
.

ROS v6.33rc10 has in fact fixed the excessive broadcast/multicast messages with the exception of the "tile" versions which I am now seeing the message where I didn't before.
All in all, good show so far.

Also, 6.33rc10 is not showing up as available in the "Package List" updates so I had to manually download it

.

CCR1009-8G-1S-1S+ (tile)

okoun · Wed Sep 16, 2015 10:10 am

Each wlan interface provides its own tx ccq. Get the other side tx ccq from the second device directly.

I repeat once again that this OID .1.3.6.1.4.1.14988.1.1.1.3.1.10.2 not give any value from either side of the joint! Nor station nor on the bridge. Even in winbox box is completely empty on both sides.
Moreover, the approach that I Rx blame on one side and on the other Tx is unfortunate ..

Wed Sep 16, 2015 10:25 am

w0lt,

I have also tested v6.33rc10 on CCR1009-8G-1S-1S+ and have not found the unwanted log messages appearing anymore.
If you see them on a port which is not a master-port and there is a lot of traffic, then they might be real.
Send a supout file from your CCR1009-8G-1S-1S+ to MikroTik support if you want us to investigate it.

w0lt · Wed Sep 16, 2015 4:30 pm

w0lt,

I have also tested v6.33rc10 on CCR1009-8G-1S-1S+ and have not found the unwanted log messages appearing anymore.
If you see them on a port which is not a master-port and there is a lot of traffic, then they might be real.
Send a supout file from your CCR1009-8G-1S-1S+ to MikroTik support if you want us to investigate it.

You are in fact correct !

It appears that my upgrade from ROS 6.33rc7 to 6.33rc10 did not go through and I didn't notice it right away.
After reloading the upgrade and ensuring it had completed, I did not see anymore multicast/broadcast messages!

So far, so good.. Very Happy !

-tp

gradash · Thu Sep 17, 2015 11:07 am

dadoremix, i have this errors spam in log on 6.27

Thu Sep 17, 2015 3:21 pm

6.33rc11 version will be available today.

Changes since 6.33rc10:
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) certificate - also accept downloaded CRLs in PEM format.

w0lt · Fri Sep 18, 2015 1:08 am

6.33rc11 version will be available today.

Changes since 6.33rc10:
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) certificate - also accept downloaded CRLs in PEM format.

Installed ROS 6.33rc11 in quite a few different models today. For me, rock solid!! Keep it up!

ufm · Fri Sep 18, 2015 2:15 pm

If your developers work with ppp and radius attributes, may be chance Ticket#2015041166000124 ?

carrierlost · Fri Sep 18, 2015 4:15 pm

Tested and compared 6.33rc11 with 6.30.4 on SXT AC from wireless PTP performance point of view.

NV2 seems to have been improved. Clear difference between this and previous release is that single stream TCP speed link has been improved.

6.33rc11.png

As seen from graph TCP throughput seems now peaks much higher than before, but is not consistant (ramps up and down). This is not due to noise, (as can be seen from UDP graph to the left of it), but from something else. Nevetheless I'd say that the the throughput of NV2 is now better than 802.11 and nstream in TCP scenario and similar to 80211 in UDP. 80211 sometime peaks higher, but is not always consistent.

Test were done via iperf on separate PCs. CPU on SXT was not maxed out unlike before. Noticed that much of the CPU usage on station side of bridged link is now on something called "unclassified".

What bothers me little with NV2 now is that the latency even in no usage scenario is in 2-4ms range vs. 80211/nstream sub 1ms.

What I cannot make any sense of is how CCQ and Rx/Tx Rate behaves. CCQ in shown about 10% lower than in other modes. Also the CCQ is now displayed much more calmly.

Rx/Tx Rate in essence now stays stable once it ramps up (at around 650 for me) vs. constant fast fluctuations with 802.11. With 80211 it goes to 866, but doesn't stay there and pretty instantly drops to 6Mbps when link goes idle.

AP side for some reason does not display Overall Tx CCQ anymore.

Fri Sep 18, 2015 5:34 pm

carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.

ibm · Fri Sep 18, 2015 5:43 pm

carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.

Hi Uldis, why do you choose to improve 802.11 rather than NV2? NV2 is more important for ISP due to PTMP implementations, please put this in the priority list.

vortex · Fri Sep 18, 2015 6:23 pm

Hardly any office/home users need NV2 themselves.

honzam · Fri Sep 18, 2015 9:54 pm

carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.
Hi Uldis, why do you choose to improve 802.11 rather than NV2? NV2 is more important for ISP due to PTMP implementations, please put this in the priority list.

yes.
+1

gradash · Fri Sep 18, 2015 10:45 pm

wason 6.27....now on 6.33rc11....same... ok i got working L2TP, but this error spam in log, wtf ? no vpn connections, just trivial internet usage...

Capture.PNG

gradash · Fri Sep 18, 2015 11:57 pm

hehe...something new ! ^)

Capture.PNG

rpingar · Sat Sep 19, 2015 6:03 pm

Uldis,
I think that the improvments on 802.11ac on single tcp stream definitely prduced a better results in NV2 too.

We did some extensive test and in all cases we had bettere NV2 performance also in non AC radio.
The only for the low signal (less than -75) clients we had the same performance than pre rc2, in all other cases we had great increments also in PtMP........

regards
Ros

ibm · Sat Sep 19, 2015 6:16 pm

Uldis,
I think that the improvments on 802.11ac on single tcp stream definitely prduced a better results in NV2 too.

We did some extensive test and in all cases we had bettere NV2 performance also in non AC radio.
The only for the low signal (less than -75) clients we had the same performance than pre rc2, in all other cases we had great increments also in PtMP........

regards
Ros

Good news

Mon Sep 21, 2015 1:13 pm

6.33rc12 will be released today.

Changes since previous version:
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery.

solaoxo · Tue Sep 22, 2015 5:20 pm

Why ROS recent version of the meter number is not accurate.

QQ截图20150922204808.png

QQ截图20150922204756.png

QQ截图20150922204740.png

QQ截图20150922210429.png

akschu · Wed Sep 23, 2015 10:22 am

*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
Any details? Please update documentation or post some explanation.

It allows some port information to be passed from pppoe through to radius. See my request here:

http://forum.mikrotik.com/viewtopic.php?t=95696

I can confirm this works, and I'm really happy with it:

Calling-Station-Id = "00:23:6A:A1:DB:6B"
Called-Station-Id = "pppoe_server"
NAS-Port-Id = "B6256-1-wsll atm 0/DSL2:0/35"
ADSL-Agent-Circuit-Id = "B6256-1-wsll atm 0/DSL2:0/35"
ADSL-Agent-Remote-Id = "B6256-1-wsll"

Now we can see what the actual DSLAM port is in our radius log database.

The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

cpu.png

Thanks for doing this Mikrotik!

Wed Sep 23, 2015 12:07 pm

6.33rc14 will be released today.

Changes since 6.33rc12:
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not send data packets before we have negotiated connection with other
side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) defconf - fix for boards that had bridge with only wlan ports;
*) pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) nv2 - fixed kernel failure with frame size accounting;
*)ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) fetch - fixed error message when error code 200 was received;
*) winbox - fixed context menu actions to apply to all selected items;
*) ssh - allow to specify pass as argument for private key import.

ufm · Wed Sep 23, 2015 4:06 pm

The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

Thanks for doing this Mikrotik!

Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.

rpingar · Wed Sep 23, 2015 5:47 pm

The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

Thanks for doing this Mikrotik!
Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.

This is a well known limitation, discussed in many other posts, that has the current release, that MikroTik has never been able to mitigate or reproduce.

So we have only to hope that rel 7 with major multicore improvement is able to workaround.

regards
Ros

ufm · Wed Sep 23, 2015 6:51 pm

Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.
This is a well known limitation, discussed in many other posts, that has the current release, that MikroTik has never been able to mitigate or reproduce.

So we have only to hope that rel 7 with major multicore improvement is able to workaround.

regards
Ros

In this Ticket MikroTik confirm this problem.
And says - will be fixed in 7.
About 7 says - first beta will be in this year. Remains three months.
We are waiting. :-/

okoun · Thu Sep 24, 2015 10:11 am

Moderate packet loss which is already reflected in the low load on the CRS will also resolved to version 7? As until now no one corrects me and I really resent this.
Moderate packet loss I mean, it falls one packet of 100 pings. However, this is a professional network has become.

bclewl1ns · Thu Sep 24, 2015 10:56 am

carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.
Hi Uldis, why do you choose to improve 802.11 rather than NV2? NV2 is more important for ISP due to PTMP implementations, please put this in the priority list.
yes.
+1

IF this is the case then mikrotik is going to lose all of my business. it seams to me that they are more interested in home users then the WISPS that actually use there products. We have post after post of complaints about NV2's TCP throughput. I even wrote into support on this and Received this Ticket#2015090466000165

"Hello,

Thanks for detailed explanation, we are aware of TCP issue and we have addressed
them in latest 6.33rc version we have included : improve single connection TCP
performance when ar9888 used in cm2 package you can test them and see what
improvements you can get in your specific case.

Regards,
Kristaps S."

IF this is only for 802.11 Mirkrotik has truly lost their way. BTW my case was titled speed discrepancy with NV2

New ticket to mikrotik support.

Kristaps.

I am highly disappointed. I wrote into support on this ticket in regards to the descrpntenies in tcp performance with NV2. You replied that you addressed this in the lasted 6.33 release candidate. Now going through the forums i see this.

uldis wrote:
carrierlost, the single TCP optimization is only for the 802.11 wireless protocol and not for the Nv2.

Why would you respond to my ticket that you have address the problem when you did it on 802.11. Do you all realize most of your customer base are WISPS like myself. and your making changes to the 802.11 protocol and not doing ANYTHING on your own proprietary NV2. With BTW TCP through on it SUCKS.

I have been posting on this topic in the forums for over a year. Hoping you all would take notice. Countless users have submitted tickets. and you fix 802.11 Can i ask what your target market it now. As i need to find a company that still works to take care of their Carrier companies.

Thank you

akschu · Thu Sep 24, 2015 6:20 pm

The biggest issue now is pppoe/cpu performance. It's not quite multi-threaded:

Thanks for doing this Mikrotik!
Still waiting for your discovery of the problem Ticket#2014122166000217 - when in system many interfaces, and you delete one of them - mikroik hangs on some time and loses packets. "Interface" - any type of interface, ppp - also interface. "Many" - depends on the CPU.

We haven't noticed that, but we don't have more than 1000 pppoe sessions per host, and our host is intel and fast.

What hardware are you running on? It seems the issue is that the router looses traffic when the cpu goes to 100% to re-generate the interface list, which would lead me to think that the current workaround would be making sure you have super fast hardware.

schu

ochyst · Thu Sep 24, 2015 10:57 pm

When will be implemented the AC spectral-scan/history?

napismizpravu · Fri Sep 25, 2015 8:59 am

(6.33rc14) Proxy problem > not used USB Flash
created only in the directory disk1/web-proxy1 > files „version” „.type”

[admin@RB433UAH] > ip proxy pr
                 enabled: yes
             src-address: ::
                    port: 8080
               anonymous: no
            parent-proxy: ::
       parent-proxy-port: 0
     cache-administrator: xxx@yyy.zz
          max-cache-size: 1840960KiB
   max-cache-object-size: 92048KiB
           cache-on-disk: yes
  max-client-connections: 1600
  max-server-connections: 5000
          max-fresh-time: 4w2d
   serialize-connections: no
       always-from-cache: no
          cache-hit-dscp: 4
              cache-path: disk1/web-proxy1

Fri Sep 25, 2015 9:35 am

6.33rc15 will be released today.

Changes since 6.33rc14:

*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to specify dns name in all the tunnels;
*) winbox - allow to enter dns name in email server;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) ups - fix console oid print;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) tunnel - fix loopback keepalives on gre and ipip.

ibm · Fri Sep 25, 2015 10:14 am

6.33rc15 will be released today.

*) pppoe - added support for MTU > 1492 on PPPoE;

Hi Strods, can you explain this?
I always used PPPoE at 1500Byte.

Fri Sep 25, 2015 10:27 am

PPPoE now will support RFC4638
https://tools.ietf.org/html/rfc4638

MrYan · Fri Sep 25, 2015 10:30 am

6.33rc15 will be released today.

*) pppoe - added support for MTU > 1492 on PPPoE;

Hi Strods, can you explain this?
I always used PPPoE at 1500Byte.

Hopefully they mean RFC4638 support.

ibm · Fri Sep 25, 2015 11:02 am

PPPoE now will support RFC4638
https://tools.ietf.org/html/rfc4638

Very good. Thanks.

Fri Sep 25, 2015 12:57 pm

napismizpravu - Is your USB recognized as disk1? Maybe name has been changed and now it is called as disk2?

napismizpravu · Fri Sep 25, 2015 2:33 pm

napismizpravu - Is your USB recognized as disk1? Maybe name has been changed and now it is called as disk2?

disk1 the name is correct
To disk1 writing file log.txt (scheduler script), ftp access possible

(Google translator)

--------------------------------------------------------------------------------------------

edit:
proxy deaktivate - activate no works writing USB Flash cache
reboot -//-

deactivate proxy delete disk1 „web-proxy1" winbox .... enable proxy > works (numeric directory created)

kometchtech · Fri Sep 25, 2015 3:35 pm

It is not know what has occurred from which version a little, but in ROS6.33rc15, Enabling TCP Syncookies, problems that can not be successfully redirect a page that requires a part of the authentication has occurred.

How many people have similar problems have occurred?

MAYAKNET · Fri Sep 25, 2015 10:19 pm

EN:

There is a problem in the CCR-1072
Several times in the last 2-3 days he noticed that two times more accurate rebooted CCR-1072

Attached 2 Scrin, in which case 2 reboot. Look here please.

======================================

RU:

Есть такая проблема, в CCR-1072
Уже несколько раз за последние 2-3 дня сам замечал что 2 раза ТОЧНО перезагружался CCR-1072

Во вложении 2 скрина, в которых 2 случая перезагрузки. Посмотрите пожалуйста.

Sat Sep 26, 2015 5:15 am

Есть такая проблема, в CCR-1072
Уже несколько раз за последние 2-3 дня сам замечал что 2 раза ТОЧНО перезагружался CCR-1072

1. somebody is trying to hack you by ssh. disable ssh access for unknown users with firewall
2. to see why you have this reboot, make supout.rif file and email to support. from screen we can't say, please send the file. thank you

MAYAKNET · Sat Sep 26, 2015 10:01 am

Написал в support@mikrotik.com тема:
Re: [Ticket#2015020666000138] Проблема обновления

это предыдущие мои обращения были по этому тикету. Спасибо за оперативность!

jondavy · Sat Sep 26, 2015 11:37 pm

in the Caps Manager on Access-List
the interface option does not work, the station continues connecting into any Radio

kometchtech · Sun Sep 27, 2015 1:22 am

It is not know what has occurred from which version a little, but in ROS6.33rc15, Enabling TCP Syncookies, problems that can not be successfully redirect a page that requires a part of the authentication has occurred.

How many people have similar problems have occurred?

This, there has been a problem elsewhere.
Was self resolved.

dadoremix · Sun Sep 27, 2015 1:24 am

i see that version rc15 cant downgrade
not with older pack, not with downgrade command in package list
only net install

MAYAKNET · Sun Sep 27, 2015 9:05 pm

More add to his post, which lost access SNMP and rush hour traffic disappears. And more often again during peak hours (once or twice a minute) traffic falls by half. (CCR-1072-1G-8S+)

================RU

Ещё добавлю к своему посту, что пропадает доступ по SNMP и в час пик пропадает траффик. А чаще, опять таки в часы ПИК (раз-два в минуту) трафик падает на половину. (CCR-1072-1G-8S+)

okoun · Sun Sep 27, 2015 11:43 pm

Hello, after upgrading to this latest RC version still errs switch CRS. Packet loss is small but still there is that is not normal. Packet loss occurs only when they begin to flow at around 50-60Mb on the uplink to the switch. If the switch runs under 50Mb can see that it is OK, it is, for example, at night.

Please can finally focus on this and fix it. Thus it is perhaps since version 6.10 !!!
I do not know what I have to do. They make me absolutely all these switchs that I have on the network. I have 3 of these devices.
I turned on all the switches in hardware mode switch mod thus as a master uplink port.

Mon Sep 28, 2015 10:21 am

6.33rc16 will be released today.

Changes since 6.33rc15:
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) ppp - added on-up & on-down scripts to ppp profile

Mon Sep 28, 2015 10:38 am

MAYAKNET, okoun - Please write to support@mikrotik.com about your problem. Remember to generate supout file on your router after problem has appeared and attach this file to your message.

paoloaga · Mon Sep 28, 2015 12:50 pm

6.33rc16 will be released today.
*) ppp - added on-up & on-down scripts to ppp profile

Yeah!! Very useful!

It would be nice, handy and useful to have something similar for the wireless interface (at least in station mode).

Why not a trigger that tracks the "Running" status of any interfaces?

cREoz · Mon Sep 28, 2015 1:22 pm

PPPoE Client not working after update from 6.33rc14 to 6.33rc16

Mon Sep 28, 2015 1:43 pm

cREoz - Please send supout file from latest rc version (in which tunnel is not working) to support@mikrotik.com

Mon Sep 28, 2015 4:04 pm

*) ppp - added on-up & on-down scripts to ppp profile

Would be nice to have something similar for DHCP client.

MAYAKNET · Mon Sep 28, 2015 6:14 pm

MAYAKNET, okoun - Please write to support@mikrotik.com about your problem. Remember to generate supout file on your router after problem has appeared and attach this file to your message.

Ok. Already sent

LinFor · Mon Sep 28, 2015 6:35 pm

*) ppp - added on-up & on-down scripts to ppp profile
Would be nice to have something similar for DHCP client.

+100500

JB172 · Mon Sep 28, 2015 10:41 pm

"Reset All Counters" button is not working in Winbox in 6.33rc16

Tue Sep 29, 2015 12:26 pm

"Reset All Counters" button is not working in Winbox in 6.33rc16

Works here? Where did you tried that exactly?.

JB172 · Tue Sep 29, 2015 12:34 pm

"Reset All Counters" button is not working in Winbox in 6.33rc16
Works here? Where did you tried that exactly?.

I have RouterOS X86
In IP-Firewall-Filter Rules and in IP-Firewall-NAT the button "Reset All Counters" is not working.

The button "Reset Counters" is working.

Tue Sep 29, 2015 1:41 pm

maybe you have some wine problem - winbox v3.0rc16 on Win10Pro on x86 running RouterOS v6.33rc16 - reset all counters work just fine.

JB172 · Tue Sep 29, 2015 2:05 pm

maybe you have some wine problem - winbox v3.0rc16 on Win10Pro on x86 running RouterOS v6.33rc16 - reset all counters work just fine.

Winbox 2.2.18 in Win7Pro and on Win8.1Pro on X86 running RouterOS v6.33.rc16 - reset all counters not working

Tue Sep 29, 2015 2:17 pm

So old winbox problem -solution use new winbox

JB172 · Tue Sep 29, 2015 2:47 pm

So old winbox problem -solution use new winbox

When I download winbox from webfig, the version is 2.2.18
I just use 3.0rc16 and is working. Thank you.

Wed Oct 07, 2015 3:29 pm

What's new in 6.33rc21 (2015-Oct-07 13:23):

*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30;
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;

ddejager · Wed Oct 07, 2015 4:15 pm

Why does the changelog for rc21 seem to include some but not all of the changes listed for prior 6.33rc releases?

Wed Oct 07, 2015 4:35 pm

Why does the changelog for rc21 seem to include some but not all of the changes listed for prior 6.33rc releases?

let me know what is missing. RC versions are daily builds, since we skipped some releases (publicaly), there might be some mixup in the changelog I posted.

JB172 · Wed Oct 07, 2015 7:40 pm

After installed v6.33rc21 in x86, the router reboots infinetely.
I tried to downgrade in v6.32.2 but with no success.
The supout.rif file it's created only 17% and then the router reboots.
What's the next step?

pbr3000 · Wed Oct 07, 2015 8:07 pm

After installed v6.33rc21 in x86, the router reboots infinetely.
I tried to downgrade in v6.32.2 but with no success.
The supout.rif file it's created only 17% and then the router reboots.
What's the next step?

Netinstall?

JB172 · Wed Oct 07, 2015 8:45 pm

After installed v6.33rc21 in x86, the router reboots infinetely.
I tried to downgrade in v6.32.2 but with no success.
The supout.rif file it's created only 17% and then the router reboots.
What's the next step?
Netinstall?

The RouterOS is installed in CF.
Are you sure that I don't lose my license ?

pbr3000 · Wed Oct 07, 2015 9:00 pm

You can retrieve your license through the site. Go to https://www.mikrotik.com/client and look for "For already created software keys"

pbr3000 · Wed Oct 07, 2015 9:03 pm

Just saw a typo on SFP detail:

Vendor Part Number: S-31DLC20D
Wavelenght: 131000 nm

Edit: corrected in rc21. Typo was from rc15.
Vendor Part Number: S-53LC20D
Wavelenght: 1550.00 nm

napismizpravu · Thu Oct 08, 2015 12:33 am

RB433UAH - 6.33rc21 no graf interface ether2 (LAN) ether3 (WAN) no traffic statistic > 0 B .... 6.33rc16 functional

bad version 6.33rc21 > downgrade 6.33rc16

PtDragon · Thu Oct 08, 2015 1:10 am

6.33.rc21 - on my router(CCR1036-12G-4S) bootloops(kernel crash) if bonding interface acts(if pull all cables from bonding it does not crash).
Tried several modes of bonding but it just crashes(reboots).
Please fix it

bajodel · Thu Oct 08, 2015 12:08 pm

let me know what is missing. RC versions are daily builds, since we skipped some releases (publicaly), there might be some mixup in the changelog I posted.

only following "some" mixup ..

What's new in 6.33rc16 (2015-Sep-28 08:52):

*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) ppp - added on-up & on-down scripts to ppp profile
*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to specify dns name in all the tunnels;
*) winbox - allow to enter dns name in email server;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) ups - fix console oid print;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) tunnel - fix loopback keepalives on gre and ipip;
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not sen*) email - allow server to be specified as fqdn which is resolved on each send;
*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may
    take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect
   at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30; 
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if
   both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
d data packets before we have negotiated connection with other 
side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) defconf - fix for boards that had bridge with only wlan ports;
*) pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) nv2 - fixed kernel failure with frame size accounting;
*)ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) fetch - fixed error message when error code 200 was received;
*) winbox - fixed context menu actions to apply to all selected items;
*) ssh - allow to specify pass as argument for private key import 
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery;
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) cerm - also accept downloaded CRLs in PEM format;
*) cerm - show crl nextupdate time;
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

What's new in 6.33rc21 (2015-Oct-07 13:23):

*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30; 
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;

Thu Oct 08, 2015 12:10 pm

look at the changelog you posted. some lines are stuck together, and many lines are repeated. does not look correct to me

Nero · Thu Oct 08, 2015 1:37 pm

RB450G, 6.33rc21, Winbox 2.2.18.

Doesn't work:
1. Flush Cache in DNS
2. Reset All Counters in Firewall

bajodel · Thu Oct 08, 2015 1:45 pm

look at the changelog you posted. some lines are stuck together, and many lines are repeated. does not look correct to me

So far ..that where the changelogs provided with the two versions (taken from your official web site download page in the last days).
If something is mixed up, and it's clearly not my fault, I hope it's up to you to fix

Thu Oct 08, 2015 1:56 pm

look at the changelog you posted. some lines are stuck together, and many lines are repeated. does not look correct to me
So far ..that where the changelogs provided with the two versions (taken from your official web site download page in the last days).
If something is mixed up, and it's clearly not my fault, I hope it's up to you to fix

Yes, that is what I meant. Our previous changelog was mixed up. This one is cleaned

105547111 · Thu Oct 08, 2015 2:03 pm

I've posted this in the winbox beta but can this please be fixed added to 6.33

IPv6 / firewall / address lists

There's no timeout field at all hidden otherwise. We use IPv4 and ipv6 address lists, be damn lovely if I knew how long an ip in there has left...

Thanks!

Thu Oct 08, 2015 2:39 pm

Thank you very much for the report about bonding.
It is correct, bonding interface causes reboot on CCR1036, we are working on the fix!

bajodel · Thu Oct 08, 2015 3:04 pm

Yes, that is what I meant. Our previous changelog was mixed up. This one is cleaned

ah.. ok, thanks for the clarification

marekm · Thu Oct 08, 2015 10:43 pm

*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

I see this in rc16 but not in rc21 changelog anymore, does this mean the improvement was reverted?

bajodel · Thu Oct 08, 2015 10:51 pm

*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

I see this in rc16 but not in rc21 changelog anymore, does this mean the improvement was reverted?

In fact, despite of claims of normis (sorry about that), ..I'm quite sure current changelog is messed up

Fri Oct 09, 2015 9:59 am

*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package.

I see this in rc16 but not in rc21 changelog anymore, does this mean the improvement was reverted?
In fact, despite of claims of normis (sorry about that), ..I'm quite sure current changelog is messed up

check again please

like I said, it has many duplicate lines

Fri Oct 09, 2015 10:41 am

rc22 released. we have fixed the latest few problems and are getting ready for v6.33 release.

*) certificate - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) certificate - also accept downloaded CRLs in PEM format;
*) userman - added 'history clear' to allow flushing undo history, which may take up significant amount of memory for huge databases whith hundreds of users;
*) userman - refresh active user/session view when opened;
*) health - fix voltage for CRS109, CRS112 and CRS210 if powered from external adapter
*) userman - added phone number support to signup form;
*) ip pool6 - try to acquire the same prefix if info matches recently freed;
*) ipsec - fix transport mode ph2 ID ports when policy selects specific ip protocol on initiator;
*) ipsec - use local-address for phase 1 matching and initiation;
*) pptp, l2tp, sstp, pppoe clients - fixed problem where they failed to connect at startup and only reboot helped;
*) route - fixed crash on removing route that was aggregated;
*) ipsec - fix replay window, was accidently disabled since version 6.30;
*) ssh - allow host key import/export;
*) ssh - use 2048bit RSA host key when strong-crypto enabled;
*) ssh - support RSA keys for user authentication;
*) wireless - improved WMM-PowerSave support in wireless-cm2 package;
*) pptp & l2tp - fixed problem where android client could not connect if both dns names were not provided (was broken since v6.30);
*) auto upgrade - added ability to select which versions to select when upgrading;
*) quickset - fixed HomeAP mode;
*) lte - improved modem identification to better support multiple identical modems;
*) snmp - fix system scripts table;
*) tunnels - eoip,eoipv6,gre,gre6,ipip,ipipv6,6to4 tunnels now support dns name as remote address;
*) fastpath - active macwinbox or mactelnet session no longer suspends fastpath;
*) fastpath - added per interface fastpath counters;
*) fastpath - added trafflow support in basic ipv4 and fasttrack ipv4 fastpaths;
*) quickset - create proper firewall rules when PPPoE is used for address acquisition;
*) ppp - added on-up & on-down scripts to ppp profile
*) sstp - fixed kernel crash when other party started to fragment ppp packets in the middle;
*) ippool6 - optimize same prefix acquisition;
*) winbox - Shift+Ins & Shift+Del did not work in multi entry fields;
*) winbox - allow to specify ipv6 address in traffic flow target;
*) winbox - allow to specify eap-radius-accounting in CAPsMAN;
*) winbox - allow to specify dns name in all the tunnels;
*) winbox - allow to enter dns name in email server;
*) pppoe - added support for MTU > 1492 on PPPoE;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) cerm - fix scep server certificate-reply degenerate PKCS#7 signed-data content;
*) ups - fix console oid print;
*) ppp-client - added default channels for Alcatel OneTouch L100V;
*) tunnel - fix loopback keepalives on gre and ipip;
*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not send data packets before we have negotiated connection with other
side (happens on dial-on-demand interfaces), this brakes when connecting to other party servers;
*) email - allow server to be specified as fqdn which is resolved on each send;
*) defconf - fix for boards that had bridge with only wlan ports;
*) pptp,l2tp,sstp - make it work when add-default-route & dial-on-demand both are enabled;
*) nv2 - fixed kernel failure with frame size accounting;
*) ovpn: support OpenWRT ovpn clients (or any other with enable-small option enabled);
*) cerm - use certificate file name for imported cert name;
*) ovpn client - fixed crash when ovpn didn't receive it's ip address;
*) lcd - fix slideshow for CCR1072, and possible sign issues for temperatures;
*) winbox - make console notice correct screen size;
*) fetch - fixed error message when error code 200 was received;
*) winbox - fixed context menu actions to apply to all selected items;
*) ssh - allow to specify pass as argument for private key import
*) winbox - refetch hotspot walled garden hit counter;
*) winbox - added client-connections & server-connections to web proxy status;
*) cerm - rebuild crl for local ca if crl file does not exist;
*) winbox - make directed broadcasts work for neighbor discovery;
*) upnp: automatically adjust mappings to new external ip change;;
*) bgp - specific BGP networks were changed to different ones;
*) cerm - allow export for all types except templates;
*) wlan - update brazil-anatel country;
*) ppp - added ppp interface to upnp internals/externals if requested
*) ppp - when adding ipv6 default route use user provided distance;
*) userman - allow to correctly enable CoA on router;
*) cerm - also accept downloaded CRLs in PEM format;
*) cerm - show crl nextupdate time;
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit, Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - refresh active sessions/users view dynamically;
*) package - added version tag and show everywhere alongside of version number;
*) wlan - improved 802.11 protocol single connection TCP performance for ac chipset with cm2 package
*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting - allow-fast-path - ~no~ for existing tunnels, ~yes~ for new ones). Encapsulated tunnel packets will bypass firewall, connection tracking, simple queues, queue tree with parent=global, ip accounting, ipsec, hotspot universal client, vrf assignment. Note that allowing fast path for tunnel does not guarantee that all packets will go fastpath, so for slowpath packets regular processing happens as before;

ufm · Fri Oct 09, 2015 1:57 pm

rc22 released. we have fixed the latest few problems and are getting ready for v6.33 release.

*) pptp,l2tp,sstp,pppoe: fixed bug #7586: do not sen*) email - allow server to be specified as fqdn which is resolved on each send;

Fix this, pls.

Fri Oct 09, 2015 1:58 pm

Fix this, pls.

fixed

rzirzi · Fri Oct 09, 2015 2:00 pm

[admin@MikroTik] > system package update check-for-updates
channel: current
current-version: 6.31
latest-version: 6.33rc22
status: New version is available

"Download & Install" button (at WInBox) also doesn't work

Fri Oct 09, 2015 2:18 pm

[admin@MikroTik] > system package update check-for-updates
channel: current
current-version: 6.31
latest-version: 6.33rc22
status: New version is available

"Download & Install" button (at WInBox) also doesn't work

try once more. actually in Winbox you must select RC, not current

KBV · Fri Oct 09, 2015 2:59 pm

rc22 released. we have fixed the latest few problems and are getting ready for v6.33 release.

You are crazy! 6.33rc21 and 6.33rc22 does not work on rb850gx2. Completely (reboots infinetely).
I thought that this is just a beta and nothing serious. But you're going to let release. When users update will be a disaster!

Fri Oct 09, 2015 3:11 pm

Stay calm. Rc versions are for testing purposes so you should count with total malfunction when you install rc version. Therefore never use it on productive device when you haven't done your own tests before.

Fri Oct 09, 2015 3:12 pm

RB433 - update works OK.

revellion · Fri Oct 09, 2015 6:01 pm

6.33rc22 is broken on RB750G,RB450G and it boot loops. Had to downgrade to 6.33rc16

freemannnn · Fri Oct 09, 2015 11:54 pm

*) quickset - create proper firewall rules when PPPoE is used for address acquisition;

just tried that but it messed the order of the filter default rules in winbox window (forward chain rules went on top and input on bottom).

visalink · Sat Oct 10, 2015 12:19 am

[admin@MikroTik] > system package update check-for-updates
channel: current
current-version: 6.31
latest-version: 6.33rc22
status: New version is available

"Download & Install" button (at WInBox) also doesn't work
try once more. actually in Winbox you must select RC, not current

"Download & Install" button does not work in winbox v.2.2.18 only in winbox3

artemlight · Mon Oct 12, 2015 12:49 am

Bootloop on CCR1009-8G-1S

tomaskir · Mon Oct 12, 2015 11:48 am

Confirming reboot loop on CCR1036 and CCR1009.

revellion · Mon Oct 12, 2015 11:49 am

For those affected by the bootloop with 6.33rc22. A tip from my own experience on the RB450G and RB750G.

If the device is in such a state it can help if the device is isolated.
In my case i disconnected the WAN connection to my RB450G and 750s. And the device would atleast stay alive for the upload of 6.33rc16 and downgrade in System->Packages.

If i kept the WAN in it would crash as soon as it started to see traffic. Exactly what triggered the boot loop i'm not sure of. My devices managed to acquire link and get DHCP IP. And start to initialize some of my GRE/BGP tunnels and sessions before it looped.

okoun · Mon Oct 12, 2015 4:31 pm

Hello, my ticket: #2015092866000236 that is sent over a week no one responding. All CRS still show little packetloss a small load.

artemlight · Mon Oct 12, 2015 8:30 pm

Exactly, GRE tunnels caused bootloop on 6.33rc22.

Confirmed on CCR1009.

CRS125, RB951, RB941, RB2011 without GRE are running correctly.

Tue Oct 13, 2015 11:54 am

If you downgrade to older RC, does the reboot loop stop? Can you make a supout.rif file then, so we can see the config?

juanvi · Tue Oct 13, 2015 12:17 pm

Can you Mikrotik check this before final release?

Using user-manager and hotspot in a CCR a user paid for a month of service and no account was created. Paypal payment completed succesfully.

Testing a Little more is shown that users created in sign-in portal are shown in user manager web if paypal is not completed, but can't access because "user<xxx>not found" is displayed in login captive portal page.

Under Winbox Radius tab i can see the rejects for the users created from web form. Added profiles manually but "user not found" anyway. Works well with direct created users in user-manager web.

Here is and similar old report: http://forum.mikrotik.com/viewtopic.php?f=10&t=97737

Ticket created and supout submitted: Ticket#2015101366000323

revellion · Tue Oct 13, 2015 12:23 pm

If you downgrade to older RC, does the reboot loop stop? Can you make a supout.rif file then, so we can see the config?

For me it stops looping with downgrade to 6.33rc16 on rb450g and rb750g

Tue Oct 13, 2015 12:34 pm

If you downgrade to older RC, does the reboot loop stop? Can you make a supout.rif file then, so we can see the config?
For me it stops looping with downgrade to 6.33rc16 on rb450g and rb750g

please send the supout.rif file to support. we will replicate your config and try to see how to repeat the loop

paulsa · Tue Oct 13, 2015 12:45 pm

Normis - Is trafficflow fixed? We are implementing a CCR1072 at our core, and want to run the latest ROS - however we are still using 6.27 on our CCR1036 due to the trafficflow egress ingress issue in the later versions. Can you confirm this has been 100% fixed, I know it's listed in the changelogs as fixed.

cdemers · Thu Oct 15, 2015 3:45 pm

With 6.33rc22 I am unable to see ipv6 addresses in winbox neighbor view, tested in winbox 2.2.18 and 3.0rc16

Anyone else seeing this behavior?

Sent from my Nexus 5 using Tapatalk

juanvi · Fri Oct 16, 2015 11:14 am

Routerboard upgrade does not work from winbox 2.2.18 on 2011UiAS-2HnD with rc22. The system must upgrade to v.3.24 and does nothing. From new terminal works with no problems.
When resetting config from same winbox with "Keep user config" checked all users config is lost.

kristaps · Fri Oct 16, 2015 2:43 pm

6.33rc24 will be released later today to web. With latest fixes and improvements.

@juanvi and @cdemers
please open ticket at support@mikrotik.com attaching screenshots with this issue.

Fri Oct 16, 2015 2:59 pm

With 6.33rc22 I am unable to see ipv6 addresses in winbox neighbor view, tested in winbox 2.2.18 and 3.0rc16
Anyone else seeing this behavior?
Sent from my Nexus 5 using Tapatalk

I have 2 win10 PCs (one stationary other laptop) connected to the same network, i can see IPv6 entries on one winbox but can't on other, i'm assuming that is some kind of Win10 "feature", but so far i'm unable to find exact reason for this behavior.

and in ip neighbor all entries have corresponding IPv6 address values, so it looks like it works.

w0lt · Fri Oct 16, 2015 4:23 pm

6.33rc24 will be released later today to web. With latest fixes and improvements.

@juanvi and @cdemers
please open ticket at support@mikrotik.com attaching screenshots with this issue.

Has this release addressed the constant reboots when using GRE tunnels or has this not been identified yet.

-tp

hedele · Fri Oct 16, 2015 5:40 pm

I see that there has been fastpath support added for eoip, ipip and gre tunnels, which I think is an amazing improvement! Are there any figures available as to how much this speeds up tunnel forwarding performance?
Also, is there any hope of getting fastpath support for ppp-type interfaces (pptp, l2tp, sstp) as well?

By the way, what happens if the eoip tunnel itself allows fastpath, but the eoip packages are sent/received over an interface type that does NOT support fastpath, like a lte interface or an unsupported ethernet interface? Does fastpath also work when packet fragmentation/reassembly is needed?

w0lt · Fri Oct 16, 2015 6:29 pm

I have installed ROS 6.33rc24 in CRS1009, RB1100AHX2, QRT, RB433, CRS125, CRS210, CRS112...
So far, no reboots...looking GOOD !!

Thanks boys !!

-tp

KBV · Fri Oct 16, 2015 6:34 pm

Has this release addressed the constant reboots when using GRE tunnels or has this not been identified yet.

At first glance the problem is solved.
I updated to RC24 without incident

MAYAKNET · Sat Oct 17, 2015 12:10 am

Instead, here 6-24 6-22

dadoremix · Sat Oct 17, 2015 2:35 am

I have also udated to rc24
Working, 493/435g rb

tesme33 · Sat Oct 17, 2015 5:39 pm

Hi
i had on a CCR1009 L2TP to my MAC OSX working.

Now it look like that 6.33rc24 breaks it.

17.10.15 16:24:56,433 racoon[871]: IPsec-SA established: ESP/Transport 10.213.213.164[4500]->95.142.x.x[4500] spi=53895329(0x33660a1)
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: vpn control writing 20 bytes
17.10.15 16:24:56,433 racoon[871]: ===
17.10.15 16:25:16,435 racoon[871]: caught rtm:2, need update interface address list
17.10.15 16:25:16,438 racoon[871]: configuring default isakmp port.
17.10.15 16:25:16,438 racoon[871]: 16 addrs are configured successfully
17.10.15 16:25:16,438 racoon[871]: vpn_control socket closed by peer.
17.10.15 16:25:16,438 racoon[871]: received disconnect all command.
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x

Can anybody confirm ?

IntrusDave · Sun Oct 18, 2015 4:04 am

Instead, here 6-24 6-22

same issue in WinBox. 24 is 404

pbr3000 · Mon Oct 19, 2015 4:53 am

Hi
i had on a CCR1009 L2TP to my MAC OSX working.

Now it look like that 6.33rc24 breaks it.

17.10.15 16:24:56,433 racoon[871]: IPsec-SA established: ESP/Transport 10.213.213.164[4500]->95.142.x.x[4500] spi=53895329(0x33660a1)
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: >>>>> phase change status = Phase 2 established
17.10.15 16:24:56,433 racoon[871]: vpn control writing 20 bytes
17.10.15 16:24:56,433 racoon[871]: ===
17.10.15 16:25:16,435 racoon[871]: caught rtm:2, need update interface address list
17.10.15 16:25:16,438 racoon[871]: configuring default isakmp port.
17.10.15 16:25:16,438 racoon[871]: 16 addrs are configured successfully
17.10.15 16:25:16,438 racoon[871]: vpn_control socket closed by peer.
17.10.15 16:25:16,438 racoon[871]: received disconnect all command.
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x
17.10.15 16:25:16,438 racoon[871]: IPSec disconnecting from server 95.142.x.x

Can anybody confirm ?

It's working fine for me. OSX 10.11 and RB2011 with v6.33rc24.

w0lt · Mon Oct 19, 2015 6:54 pm

So far, ROS 6.33rc25 seems to be working just fine !!

-tp

rmmccann · Tue Oct 20, 2015 4:31 pm

Are the fixes listed in this release included in the latest CURRENT 6.32.3 (ipsec replay window, for example)?

timoid · Wed Oct 21, 2015 2:50 am

*) ppp - when adding ipv6 default route use user provided distance;

this appears to be working:

if i have two IPv6 routes from two PPP sessions it will always use the route with the configured lower distance

A cosmetic issue is the route under /ipv6 route does not reflect the distance:

[admin@titan] /ipv6 route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
# DST-ADDRESS GATEWAY DISTANCE
0 ADS ::/0 Internode-NBN 1
1 DS ::/0 Internode-FAB 1

[admin@titan] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 10.255.255.1 1
1 DS 0.0.0.0/0 10.255.255.2 2

marekm · Thu Oct 22, 2015 3:00 pm

PPPoE now will support RFC4638
https://tools.ietf.org/html/rfc4638

Good to hear that. Is it supported for both PPPoE client and server?
Any chance for Delegated-IPv6-Prefix RADIUS attribute for PPPoE server, while you're at it?

Mon Oct 26, 2015 3:03 pm

6.33rc33 version is now available at our download site:

Changes since 6.33rc30:
*) userman - fix report generation problem which could result in some users being skipped from it;
*) winbox - fix to allow cpu-port as mirror-target
*) proxy - error.html parsing enhancement to improve performance
*) CCR1072 - improve ether1 performance under heavy load
*) routerboard - indicate RouterBOOT type in /system routerboard print
*) mpls - properly use mpls mtu for routes
*) cerm - fix key decription for signed certificates
*) trafflow - report flow addresses in v1 and v5 without NAT awerness
*) dhcpv6 - small fixes for dhcp-pd client and ippool6

MAYAKNET · Wed Oct 28, 2015 7:22 am

Доброго времени суток.

В CCR1072 в BGP участвует только одно ядро, это исправят?

EN:

Good day.

In CCR1072 into BGP involved only one core, fix it?

Wed Oct 28, 2015 9:00 am

Доброго времени суток.
В CCR1072 в BGP участвует только одно ядро, это исправят?
EN:
Good day.
In CCR1072 into BGP involved only one core, fix it?

Short answer - improvements will be in RouterOS v7

Long answer - it is not BGP it is operations with routing table that is and will be limited to single core, but in RouterOS v7 all other things will be optimized so that routing table load is significanly reduced.
(slide 32 and 33):
http://tiktube.com/video/GJil3aqniCGJCI ... rClGoJGJo=

MAYAKNET · Wed Oct 28, 2015 9:45 am

А прогнозы есть какие нибудь? Когда ждать RoterOS v7. Мне чтобы спланировать к этому времени изменение структуры сети и возложенные операции на CCR1072
На сегодня он выполняет роль PPPoE сервера, и всё ((

EN:

And there are some projections? When will Routeros v7. I have to plan for this time of changing the structure of the network and assigned to the operation CCR1072
Today, he serves as a PPPoE server, and all ((

Wed Oct 28, 2015 2:12 pm

Version 6.33rc36 is released.

Changes since 6.33rc33:
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
*) webfig - some of the setting were shifted to the right;
*) packages - allow to reinstall from bundle to separate packages & vice versa;
*) packages - prefer out of bundle packages when both of them are installed;
*) packages - fix a problem of upgrading bundle package to non bundled ones;
*) ipsec - force flow cache validation once in 1h;
*) dhcpv6-client - show current server address;
*) dhcpv6-client - split out IA ops;
*) winbox - make sure that all setting names get shown in full;
*) winbox - added poe power-cycle-ping settings to ethernet interfaces;
*) ppp - handle properly case were ppp client is given same address for local & remote end;
*) winbox - added vlan-mode & vlan-id to virtual-ap interface;
*) winbox - added timeout column to ipv6 address lists;
*) winbox - show SFP Tx/Rx Power properly;
*) winbox - added min-links to bonding interface;
*) winbox - do not show health menu on RB951Ui-2HnD;
*) winbox - added support for Login-Timeout & MAC-Auth-Mode in hotspot;
*) cerm - added option to disable crl download in '/certificate settings';
*) winbox - make user ssh key import work again;
*) webfig - make "Copy to Access List" work in CAPsMAN Registration Table;

chojrak11 · Wed Oct 28, 2015 6:07 pm

Wow that's impressive list of changes/fixes for 6.33

Version 6.33rc36 is released.
*) winbox - added poe power-cycle-ping settings to ethernet interfaces;

Just small misspelligs here:

2015-10-28_16-44-12.png

*) routerboard - indicate RouterBOOT type in /system routerboard print;

I'm not sure it works here.

2015-10-28_16-49-46.png

*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");

Not available in Winbox.

Anastasia · Wed Oct 28, 2015 7:30 pm

which version is best installed on the router (MikroTik RB951Ui-2HnD). I need a stable job, once set up and forget. It is the current version (6.33RC36) stable and reliable? or better put 6.32.3

Wed Oct 28, 2015 7:38 pm

which version is best installed on the router (MikroTik RB951Ui-2HnD). I need a stable job, once set up and forget. It is the current version (6.33RC36) stable and reliable? or better put 6.32.3

Definitely the most reliable version is the bugfix version, it has all known bugs fixed.

Here is description for new RouterOS release system:
http://forum.mikrotik.com/viewtopic.php?f=21&t=98580

pbr3000 · Thu Oct 29, 2015 2:04 am

Bugfix version is 6.30.4 for now.

skuykend · Thu Oct 29, 2015 3:12 am

Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.

KBV · Thu Oct 29, 2015 12:21 pm

*) fastpath - eoip,gre,ipip tunnels support fastpath (new per tunnel setting "allow-fast-path");
Not available in Winbox.

As a result you can not create tunnel (eg GRE) with IPSEC via Winbox
See attach
And you can not turn fastpath off /Not available in Winbox/

How to create a tunnel?

Thu Oct 29, 2015 4:09 pm

How to create a tunnel?

like real hackers - from CLI...

did anyone notice???

*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;

It is like one of the oldest, most wanted features on this forum ever. and no reaction... I'm disappointed.

hedele · Thu Oct 29, 2015 5:13 pm

I didn't get around to testing the LNS functionality yet, but according to a separate thread where this feature was requested, it seems to work perfectly.

doneware · Thu Oct 29, 2015 9:27 pm

did anyone notice???
Code: Select all
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
It is like one of the oldest, most wanted features on this forum ever. and no reaction... I'm disappointed.

yes, i was totally stunned! this is pretty cool.
not sure however it has the same RADIUS support as other vendors... [rfc2868]
but if not, i hope it will have it soon.

timoid · Thu Oct 29, 2015 9:29 pm

How to create a tunnel?
like real hackers - from CLI...

did anyone notice???
Code: Select all
*) l2tp: implemented PPPoE over L2TP in LNS mode, RFC3817;
It is like one of the oldest, most wanted features on this forum ever. and no reaction... I'm disappointed.

I don't think that is what you think it is.

I think RFC2341 will be the loudly celebrated implementation.

timoid · Fri Oct 30, 2015 1:38 am

Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.

+1 also on mipsbe.

also noticed if you have multiple ::1/64 from different ipv6 pools on one interface all but one disappears on reboot.

docmarius · Fri Oct 30, 2015 11:06 pm

Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.

I can confirm this behavior on RB1100AHx2, too.

Mon Nov 02, 2015 9:53 am

6.33rc37 will be released today.

Changes since 6.33rc36:
*) net - fix possible never ending loop when bad CDP discovery packet is received;
*) log - make default disk file name to reside in flash dir if it exists;
*) romon - change port list to be unordered in export;
*) capsman - limit number of simultaneous DTLS handshakes;
*) capsman - fixed memory leak on CAP joining CAPsMAN when ssld is used;
*) DHCP-PD client - timer problem fixed;
*) winbox - added allow-fast-path to eoip, gre & ipip;
*) winbox - do not show power-cycle properties on non poe ports;

skuykend · Mon Nov 02, 2015 10:24 pm

Upgraded to 6.33rc36 on CCR1009.
IPv6 dhcp-client does not initially get bound on reboot. 'Error' shows in Status column, no info in log.

Do a disable and enable on the dhcp-client and it get's bound properly until next reboot.

IPv6 still not working properly.

rc37 now shows bound IPv6 on bootup/reboot, but still does not route IPv6 until I do a renew of the IPv6 address.

Tue Nov 03, 2015 8:30 am

skuykend - Please send supout.rif file to support@mikrotik.com. Make sure that supout file is generated after you have experienced issue and fixed it with renew.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
http://www.mikrotik.com/support.html

skuykend · Tue Nov 03, 2015 9:37 am

skuykend - Please send supout.rif file to support@mikrotik.com. Make sure that supout file is generated after you have experienced issue and fixed it with renew.
http://wiki.mikrotik.com/wiki/Manual:Su ... utput_File
http://www.mikrotik.com/support.html

Sent. [Ticket#2015110366000181]

jondavy · Thu Nov 05, 2015 6:36 pm

the CAP should have a mandatory option: discovery-method =
and in it one of the required attributes:
By interface, by CAPsMAN-Address, or by CAPsMAN-Name,
because without any of these attributes the CAP is not adopted by CAPsMANAGER and does not work

anothers possible bug:

in CAPsMAN> Channel to tx-power option does not work (because it shows another value in CAP)
in CAPsMAN> datapath the Bridge option does not work
in CAPsMAN> Configuration SSID does not work
in CAPsMAN> Access-list Interface does not work

tested with RC37 with HAP lite (smips)

bradg · Thu Nov 05, 2015 10:52 pm

I updated a factory-fresh hEX PoE lite last night, going from 6.30.2 to 6.33rc37 and experienced an instant reboot loop. A netinstall down to 6.33rc36 resolved the issue. FYI. --Brad

Zorro · Fri Nov 13, 2015 9:15 pm

rc33 briked HEX of mine after i updatred bootloader, rebooted and disabled WAN interface on first port from winbox.
then its hang, disconnect and reboot w/o sound from buzzer for long, but emit weird scratchy noise over looong time.

adrcomms · Tue Jan 12, 2016 10:03 am

6.33rc7 is released!

Changes since 6.33rc5:
*) ppp - added CoA support to PPPoE, PPTP & L2TP (Mikrotik-Recv-Limit, Mikrotik-Xmit-Limit,
Mikrotik-Rate-Limit, Ascend-Data-Rate, Ascend-XMit-Rate, Session-Timeout);
*) pptp - improved encryption;
*) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id";
*) userman - added 'history clear' to allow flushing undo history, which may
take up significant amount of memory for huge databases whith hundreds of users;

whats does this do? ) ppp - added new option under "ppp aaa" - "use-circuit-id-in-nas-port-id"