v6.42.3 [current]

Fri May 25, 2018 10:24 am

RouterOS version 6.42.3 has been released in public "current" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.42.3 (2018-May-24 09:20):

*) lte - fixed automatic LTE band selection for R11e-LTE;
*) wireless - improved client "channel-width" detection;
*) wireless - improved Nv2 PtMP performance;
*) wireless - increased stability on hAP ac^2 and cAP ac with legacy data rates;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this concrete RouterOS release.

lomayani · Fri May 25, 2018 12:29 pm

I have started testing this version. So far the issue of one client having high download causing slowness to other clients has been resolved. Mikrotik great and good work on this. We are going somewhere now

One question is dynamic downlink ratio behaviour changed? In 6.42.2 with ratio of 60% ap can shoot to 90-100mbps download speed to a client but now in 6.42.3 I can only shoot to around 60-70mbps. I changed the ratio to 70% in 6.42.3, I can see the same results as 6.42.2(with 60% ratio) but with better sharing between clients than previous versions

105547111 · Fri May 25, 2018 1:19 pm

No issues on my network 15 devices. Thanks for the update!

joserudi · Fri May 25, 2018 1:38 pm

Good morning, I wanted to know if there are improvements regarding version 6.42 where the same was announced or there are improvements in this regard:

Release 6.42

*) wireless - improved Nv2 PtMP performance;

joserudi · Fri May 25, 2018 1:41 pm

I have started testing this version. So far the issue of one client having high download causing slowness to other clients has been resolved. Mikrotik great and good work on this. We are going somewhere now

One question is dynamic downlink ratio behaviour changed? In 6.42.2 with ratio of 60% ap can shoot to 90-100mbps download speed to a client but now in 6.42.3 I can only shoot to around 60-70mbps. I changed the ratio to 70% in 6.42.3, I can see the same results as 6.42.2(with 60% ratio) but with better sharing between clients than previous versions

Dear friend, I have been testing with dynamic downlink ratio and I have not noticed any difference in altering this value. Do you really notice difference in leaving it at 50%? Thank you

upower3 · Fri May 25, 2018 2:32 pm

I'll repeat my question here:

I have a ccr1009 with flash partitioned into 2 partitions. So each of that flash parts are of 32 Mb, which was ok for me so far.

After recent upgrade to 6.42.1 I found all of my flash almost taken by unknown (invisible) files or data. Right now I have only 10 Mb of flash and the upgrade to 6.42.2 needs ~15Mb. I asked this in different topic and got viewtopic.php?f=2&t=134713&p=663589#p663890 this answer saying I'm not along with the problem, so looks like 6.42.1 upgrade script won't do its job well, or something. Not sure is this can be more widespread or not, and surely don't know if this can happen to any new version.

What should I do? The device is on remote location so it's not an option to netinstall it. So far I can not upgrade to any new version.

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it?

MartijnVdS · Fri May 25, 2018 3:36 pm

What should I do? The device is on remote location so it's not an option to netinstall it. So far I can not upgrade to any new version.

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it?

I can't guarantee that this'll work for you, but it worked for me (try at your own risk, and try on some local devices first):

Download the "all packages" zip for your device's architecture from the Mikrotik website
Extract the .npk files you need (at least "system", and additionally wireless, mpls, etc.). You only the ones that are currently enabled on the device and/or that you are using features from (for instance, you don't need to get the "dhcp" one if you don't have a DHCP server or client on the device).
Upload those NPK files to the router
Reboot

On my devices, this replaced the big "bundle" system package (which contains ppp, dhcp, mpls, routing, etc.) with the smaller "unbundled" one (which only contains "system", the other packages are separated out), and it also upgraded the other packages and their configuration.

Chupaka · Fri May 25, 2018 3:43 pm

I would try to repartition it to 1 partition, upgrade and repartition back to 2 partitions. But:
1. Don't forget about backup.
2. Make sure that new version does not leak free space

Kindis · Fri May 25, 2018 3:44 pm

Upgrades two CHR (running on Hyper-V), two 3011, one 493G and 2 wAP AC without any issues.

upower3 · Fri May 25, 2018 3:48 pm

I can't guarantee that this'll work for you, but it worked for me (try at your own risk, and try on some local devices first):

Frankly this was my plan, too, but once I did that and out of sudden cleared the device config (don't know the reason why) so it was a bit... bad idea.

And also will this clear up invisible files? Looks like no, it'll just fit the new ROS into tiny 10 Mb space I still have.

Will format flash erases the boot OS files, it ROS loads not from accessible (and formatable) flash?

P.S. Is the upgrade code messes up and won't remove the temp files afterward?

timoid · Fri May 25, 2018 4:43 pm

Anyone know more about this:
*) tile - fixed Ethernet interfaces becoming unresponsive;

MEV · Fri May 25, 2018 6:03 pm

I have 2 locations. Location A and location B.

From A to B working EoIP tunnel.

In tunnel going multicast traffic in direction from A to B.

On side "B" I do EoIP tunnel disable, it show like not active.
Multicast flow stop on side "B", but income traffic on my WAN port
on side "B" is still going.

Why so, if EoIP tunnel not active and no connection through EoIP?

Traffic on side "B" on WAN port stop going only if I disable EoIP tunnel on
source side "A".

mrz · Fri May 25, 2018 6:07 pm

Is EoIP active on router A (meaning that you have disabled keepalive) ?

Chupaka · Fri May 25, 2018 6:08 pm

I have 2 locations. Location A and location B.

From A to B working EoIP tunnel.

In tunnel going multicast traffic in direction from A to B.

On side "B" I do EoIP tunnel disable, it show like not active.
Multicast flow stop on side "B", but income traffic on my WAN port
on side "B" is still going.

Why so, if EoIP tunnel not active and no connection through EoIP?

Traffic on side "B" on WAN port stop going only if I disable EoIP tunnel on
source side "A".

If you don't have 'Keepalive' enabled, side A doesn't know that the tunnel is disabled on side B, so it keeps sending packets.

TL;DR: Enable Keepalive on EoIP tunnel

P.S. And create separate topic for your question if it's not specific to RouterOS 6.42.3

upower3 · Fri May 25, 2018 6:11 pm

I would try to repartition it to 1 partition, upgrade and repartition back to 2 partitions. But:
1. Don't forget about backup.
2. Make sure that new version does not leak free space :)

The only thing I need is some confirmation from someone wise that repartition won't crear up whole disk so ROS won't be able to load.
I will do the backup but it is useless as device is on remote place. And the leakage is something that should be commented by Mikrotik engineers I think :)

Fri May 25, 2018 6:55 pm

I have started testing this version. So far the issue of one client having high download causing slowness to other clients has been resolved. Mikrotik great and good work on this. We are going somewhere now

One question is dynamic downlink ratio behaviour changed? In 6.42.2 with ratio of 60% ap can shoot to 90-100mbps download speed to a client but now in 6.42.3 I can only shoot to around 60-70mbps. I changed the ratio to 70% in 6.42.3, I can see the same results as 6.42.2(with 60% ratio) but with better sharing between clients than previous versions

Dear friend, I have been testing with dynamic downlink ratio and I have not noticed any difference in altering this value. Do you really notice difference in leaving it at 50%? Thank you

You most notice the dynamic downlink radio settings is really doing something when your APs are getting close to client throughput saturation (such as peak hours when everybody is doing something). Under light throughput loads (non-peak usage periods), you should not normally see much of a difference.

I normally use a setting of 75 or 80 percent on all of my APs. This mostly helps when everybody is doing something where you want near 80 percent of traffic to be from Internet to clients. A setting of 20 percent kills client download speeds during peak usage but boosts the 1 percent of clients who are uploading.

payday · Fri May 25, 2018 11:32 pm

My terminal doesn't work in Webfig. It shows just an empty space.
Can you please check if it is me only or you also have that problem?

Mackiavelly · Fri May 25, 2018 11:46 pm

if

/interface bridge settings set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes

then have promlems:
1. dont work simple queues (upload)
2. and then other mikrotik connect to this mikrotik by pppoe then have 0.1 mbit/s download speed, and unlocked speed upload (promlem 1)

if

/interface bridge settings set use-ip-firewall=no

all ok

SnakeSK · Fri May 25, 2018 11:48 pm

Still no fix for chr hyperv?

joserudi · Fri May 25, 2018 11:53 pm

With nv2 and the new update we get 96 mbps per sector with 15 users and good signal. Great news

Now we need to improve in nv2 ptp since we can not get past those 100 mbps in ptp mode as well.

vecernik87 · Sat May 26, 2018 12:31 am

My terminal doesn't work in Webfig. It shows just an empty space.
Can you please check if it is me only or you also have that problem?

I guess just you: https://www.screencast.com/t/V6dfdHvv
I tested this on two hAP ac^2 where one is 6.42.1 and second 6.42.3 ... Both working well

If you open dev panel, can you see some errors in console or failed requests ?

Still no fix for chr hyperv?

Can you describe is wrong with CHR on Hyper-V?
I have one CHR on Hyper-V and I did not notice some issue. User Kindis is also reporting he upgraded his CHR on Hyper-V and had no issues

eddieb · Sat May 26, 2018 8:06 am

RB2011 / RB1100 / RB951 / RB962 (9pc) / CRS125 / CHR / CHR-Dude all updated to 6.42.3.
no problems

netflow · Sat May 26, 2018 9:56 am

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it?

A simple reboot usually removes those invisible left overs.

If still not enough, a trick I use on an overloaded 941-2nD. Push manually first only some core packages (system and as much as needed for accessing the device after reboot). Then after reboot push the rest of the packages needed for full operation. Hope it helps and MT team will eventually improve in this area as well.

anuser · Sat May 26, 2018 11:08 am

Version 6.43rc17 has been released.
*) wireless - fixed wireless interface lockup after period of inactivity;

It would be great if we get this fix into the next current release, aswell.

karina · Sat May 26, 2018 11:38 am

Confirm further aggregate throughput increase on AP. Almost there Mikrotik soon be overtaking the the competition in performance as well as price. Well done dev team excellent work, go have yourselves a well deserved beer

upower3 · Sat May 26, 2018 11:42 am

Confirm further aggregate throughput increase on AP. Almost there Mikrotik soon be overtaking the the competition in performance as well as price. Well done dev team excellent work, go have yourselves a well deserved beer :-)

Not that many competitors are there so far. AP mabe but not routers. VyOS on Ubiquity routers maybe?

upower3 · Sat May 26, 2018 11:44 am

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it?
A simple reboot usually removes those invisible left overs.

If still not enough, a trick I use on an overloaded 941-2nD. Push manually first only some core packages (system and as much as needed for accessing the device after reboot). Then after reboot push the rest of the packages needed for full operation. Hope it helps and MT team will eventually improve in this area as well.

Reboot won't helped at all, I tried that first. Will try mess with individual packages, but that looks risky.

amt · Sat May 26, 2018 2:33 pm

Now we need to improve in nv2 ptp since we can not get past those 100 mbps in ptp mode as well.

Definitely I agree with you..

tmcnulty1982 · Sun May 27, 2018 2:08 am

My wAP ac will not run this firmware.

I was running 6.40.8 previously. After installing 6.42.3 the wireless AP lights do not come on.

I have tried resetting the configuration (holding down reset for 5 seconds after start up). Still no wifi and ethernet port is not getting IP address.

I have tried enabling capsman (reset button for 10 seconds). Still no wifi and ethernet port is not getting IP address.

Tried installing 6.42.8 via netinstall and repeating the above. Still nothing.

The only way to get the router to start again is to install 6.40.8 via netinstall, and reset the configuration.

Please advise.

ofer · Sun May 27, 2018 11:35 am

Upgraded my 3 HAP AC units from without issues

Thanks!

MEV · Sun May 27, 2018 10:34 pm

Is EoIP active on router A (meaning that you have disabled keepalive) ?

EoIP was created with standard settings, in standard no keepalive set on both side.

S4bulba · Mon May 28, 2018 1:26 am

There is some issue with firewall rules or maybe they work differently now.I think it started with 42.2 version.
My ICMP rules made on input and/or forward chains are ignored.
They were working just fine in 42.1.
I usually drop ICMP Type 8 Echo Request when i am not playing online games from WAN (BF4 for example requires it otherwise you get kicked).
When this rule was enforced no ping could be seen in BF4 players list , now the ping shows up with the exact same rules

.So what s the problem ?
Why is ICMP going thru even when no rule is allowing it ?

Has something changed in relation to firewall rules since 42.2 ?

Mon May 28, 2018 7:22 am

joserudi - Also this release includes improvements regarding Nv2 performance when multiple clients are connected to the same AP;
upower3, Mackiavelly - Please contact support@mikrotik.com and send supout file from your router to us;
timoid - Please try to keep this forum topic strictly related to v6.42.3 release;
payday - I assume that problem did not appear in this release. Please try to keep this topic related to problems introduced in v6.42.3. Contact support regarding the Webfig terminal issue. Meanwhile, test if problem persist when using different WEB browsers;
SnakeSK - Could you be more specific? Your post does not indicate what kind of issue do you have and which fix you were expecting within this version. Have you reported your problem to support@mikrotik.com?
anuser - If this fix will be well tested and will introduce only improvements, then it will be included in next release;
tmcnulty1982 - Please send supout file from v6.40.8 to support@mikrotik.com. We will try to reproduce your problem in our lab;
S4bulba - There are no firewall changes in this release so the problem must be related to configuration problems. Please send supout file to support@mikrotik.com and we will try to trace cause of it.

Beone · Mon May 28, 2018 1:14 pm

I'll repeat my question here:

I have a ccr1009 with flash partitioned into 2 partitions. So each of that flash parts are of 32 Mb, which was ok for me so far.

After recent upgrade to 6.42.1 I found all of my flash almost taken by unknown (invisible) files or data. Right now I have only 10 Mb of flash and the upgrade to 6.42.2 needs ~15Mb. I asked this in different topic and got viewtopic.php?f=2&t=134713&p=663589#p663890 this answer saying I'm not along with the problem, so looks like 6.42.1 upgrade script won't do its job well, or something. Not sure is this can be more widespread or not, and surely don't know if this can happen to any new version.

What should I do? The device is on remote location so it's not an option to netinstall it. So far I can not upgrade to any new version.

How can I clean up these extra files/data? If I format the flash then the device won't boot afterwards, isn't it?

We have exactly the same issue, we reported it to Mikrotik with Ticket#2018051822005031, there beautiful answer was to remove the partitioning (which i've done) but just resulted in 1 bigger partition with still invisible files using up all the diskspace.

When reporting this, the answer of support was to just fully netinstall the device which i've reported not to be a working production solution. We cannot just go everywhere reinstalling all the devices just because of this issue.

Mon May 28, 2018 2:18 pm

We have provided an answer to you within e-mail conversation between you and support team.

Please note that provided steps in this case (and usually also within other support tickets) are first provided in order to debug the problem and when we can find a cause of it, we can work on a permanent solution.

heavyd · Mon May 28, 2018 8:26 pm

I got increased performance but broke the clients VoIP. Downgraded back to 6.41.3 and all is good again

pe1chl · Mon May 28, 2018 9:39 pm

I updated a CCR1009 which was running 6.42.1 with the combined package plus ntp. hotspot, mpls and wireless are disabled.
As I wanted to take the opportunity to migrate to individual packages and add multicast, I uploaded the individual packages for 6.42.3 and rebooted.
advanced-tools-6.42.3-tile.npk
dhcp-6.42.3-tile.npk
ipv6-6.42.3-tile.npk
multicast-6.42.3-tile.npk
ntp-6.42.3-tile.npk
ppp-6.42.3-tile.npk
routing-6.42.3-tile.npk
security-6.42.3-tile.npk
system-6.42.3-tile.npk

The upgrade went fine, however before this update there was 24.5 MB free of the 64MB partition (2 partitions), and after the update only 11.5 MB free
so no further updating will be possible. Apparently the same issue as some others had.
What is the solution? Netinstall is not an option, but I can switch to the second partition which holds a copy of the 6.42.1 and latest config.

Mackiavelly · Tue May 29, 2018 12:53 pm

if
Code: Select all
/interface bridge settings set use-ip-firewall=yes use-ip-firewall-for-pppoe=yes
then have promlems:
1. dont work simple queues (upload)
2. and then other mikrotik connect to this mikrotik by pppoe then have 0.1 mbit/s download speed, and unlocked speed upload (promlem 1)

if
Code: Select all
/interface bridge settings set use-ip-firewall=no
all ok

some one have this problems?

pe1chl · Tue May 29, 2018 12:53 pm

MikroTik:
Will there be any public followup on the topic of lost diskspace? where is the problem and how can it be solved or circumvented other than by netinstall?
Is it a problem in 6.42.1 that is going to occur not matter what you upgrade it to? Or is the right thing to do to go back to 6.42.1 (switch to other partition) and
then wait for 6.42.4 which will then not have this behaviour? Or will there be a 6.42.4 that can be installed by first going back to single partition, then install
it and to back to two partitions? Or will there be a small fixup package for 6.42.3 that can be installed to fix it and re-enable update with 2 partitions again?

Please give some details within a couple of days, so it is still an option to go back to 6.42.1 if required (without losing changes made in the meantime).
We all understand there sometimes can be mistakes, but we cannot understand the lack of information there sometimes seems to be.

S4bulba · Tue May 29, 2018 6:52 pm

There is some issue with firewall rules or maybe they work differently now.I think it started with 42.2 version.
My ICMP rules made on input and/or forward chains are ignored.
They were working just fine in 42.1.
I usually drop ICMP Type 8 Echo Request when i am not playing online games from WAN (BF4 for example requires it otherwise you get kicked).
When this rule was enforced no ping could be seen in BF4 players list , now the ping shows up with the exact same rules .So what s the problem ?
Why is ICMP going thru even when no rule is allowing it ?
Has something changed in relation to firewall rules since 42.2 ?

I have downgraded to 6.42.1 and the ICMP rules on the input chain are picking up traffic again and loging it.So in the 42.3 a simple rule that logs ICMP would not do anything while a ICMP rule on the forward chain would not pick up all ICMP traffic.On 6.42.1 the things seem to be working properly ,same firewall ruleset made from within the winbox interface keep in mind.
It s like ICMP would go around the firewall in 42.3 ,on it s own:)

0ldman · Wed May 30, 2018 3:26 am

The Dude 6.42.3 client link, "file not found".

gotsprings · Wed May 30, 2018 6:36 am

RB2011 Upgraded to 6.42.3
In the Bridge... selecting any port causes Winbox to close.

Disable the bridge... it reenabled itself and turned on hardware off loading on some ports. Still can't access
/interface bridge ports

Reboot router.
Now you can select ports.

middelink · Wed May 30, 2018 10:01 am

After upgrading to 6.42.3 I had lots of trouble with the Wifi on my CRS125-24G-1S-2HnD, clients kept being deauthed which I believe is more a side effect of the SSID not getting broadcasted

Downgraded to 6.42.2 and immediately it started broadcasting the SSID and my clients (17) popped back in and have been since.

Smell like a bug

anuser · Wed May 30, 2018 1:14 pm

wAP AC: With 6.43rc12 a user was able to connect with its Huawei smartphone. Now with 6.42.3 he is unable to connect at all, neither with WPA2/EAP nor with open/unprotected SSID. There´s no entry within the log when he tries to connect. After upgrading to 6.43rc12 he can happily connect again.

timoid · Wed May 30, 2018 1:52 pm

timoid - Please try to keep this forum topic strictly related to v6.42.3 release;

I would have if it wasn't locked.... *facepalm*

So please answer my question.

Wed May 30, 2018 3:09 pm

After upgrading to 6.42.3 I had lots of trouble with the Wifi on my CRS125-24G-1S-2HnD, clients kept being deauthed which I believe is more a side effect of the SSID not getting broadcasted
Downgraded to 6.42.2 and immediately it started broadcasting the SSID and my clients (17) popped back in and have been since.

Smell like a bug

Please be more specific on this problem - what is your configuration on the AP, can you provide us support output file to support@mikrotik.com?

Wed May 30, 2018 3:10 pm

wAP AC: With 6.43rc12 a user was able to connect with its Huawei smartphone. Now with 6.42.3 he is unable to connect at all, neither with WPA2/EAP nor with open/unprotected SSID. There´s no entry within the log when he tries to connect. After upgrading to 6.43rc12 he can happily connect again.

Is it happening on both 2.4ghz and 5ghz? Please provide support output file when this happens and send to support@mikrotik.com

WirelessRudy · Wed May 30, 2018 3:13 pm

RouterOS version 6.42.3 has been released in public "current" channel!

*) wireless - improved client "channel-width" detection;

Can we have an explanation on this one. How is it improved? What did not happen before? If client is set at 20Mhz where AP is at 40Mhz or higher client simply can't communicate on anything wider then 20Mhz isn't it? So what is improved now?

WirelessRudy · Wed May 30, 2018 3:17 pm

RouterOS version 6.42.3 has been released in public "current" channel!
*) wireless - improved Nv2 PtMP performance;

Does this improvement need an upgrade of AP only or all CPE's need to have the upgrade? Or if not, what minimal version do CPE's need to have to work with this improvement?

xrayd · Thu May 31, 2018 1:37 am

...+1

pe1chl · Thu May 31, 2018 2:40 pm

Will there be any solution to the abovementioned diskspace problem on the CCR?
For now I have rolled back to 6.42.1 but will that even solve it in the future?
Or is this installation doomed when no netinstall is done?

Chupaka · Thu May 31, 2018 4:41 pm

The problem is being solved, but definitely it will be solved not in current versions

pe1chl · Thu May 31, 2018 4:51 pm

I know that this kind of problem is often caused by the version you are running now, that does the update to the next version.
What I need to know is if there will be a next version that has fixes to undo the problem caused during the update (e.g. delete leftover files).

I find it puzzling that a "check installation" merely returns OK but does not free the space (when doing it in 6.42.3 after the update from 6.42.1).
I think it was announced before that such checks would also check for and remove unexpected files, and that should indeed be possible
as the packages would typically include a list of files and checksums. Apparently "check installation" now still only checks for expected
files and does not find (let alone remove) extra files. What does that mean for its capability to detect worms?

Remember this problem PREVENTS further updates. So when there is to be a workaround, it has to be made available (as a small package)
for current versions or it will be useless. (as it would require a netinstall)
As has been shown by CHR users, it would be probably quite easy to fix when there would be shell access. But even without that, a
simple package that only applies the fix should be easy.

lomayani · Fri Jun 01, 2018 12:10 pm

We were trying to establish ptp link of around 80Km with netmetals. Our configuration was cell radius set to 100Km and tdma size to auto. With tdma size auto we can scan and see the other side but we cant connect. After long troubleshooting we decided to change tdma size to 6ms and the link connected and throughput was very good around 90-100Mbps at 20Mhz channel beating other link from another manufacturer which was in operation

the os installed is 6..42.3 so am not sure if this is the bug or by design tdma size set auto will not work with very long links. We have other links of around 40km and tmda set to auto works well. Only we had issue with this 80km link. I have not tested this behaviour with previous os because this link is new and radios had this version installed

DummyPLUG · Sun Jun 03, 2018 9:03 pm

There is some issue with firewall rules or maybe they work differently now.I think it started with 42.2 version.
My ICMP rules made on input and/or forward chains are ignored.
They were working just fine in 42.1.
I usually drop ICMP Type 8 Echo Request when i am not playing online games from WAN (BF4 for example requires it otherwise you get kicked).
When this rule was enforced no ping could be seen in BF4 players list , now the ping shows up with the exact same rules .So what s the problem ?
Why is ICMP going thru even when no rule is allowing it ?
Has something changed in relation to firewall rules since 42.2 ?
I have downgraded to 6.42.1 and the ICMP rules on the input chain are picking up traffic again and loging it.So in the 42.3 a simple rule that logs ICMP would not do anything while a ICMP rule on the forward chain would not pick up all ICMP traffic.On 6.42.1 the things seem to be working properly ,same firewall ruleset made from within the winbox interface keep in mind.
It s like ICMP would go around the firewall in 42.3 ,on it s own:)

Try on my CCR1009, with 6.42.3 drop ICMP type 8 working correctly, it also work in raw(prerouting)

chimsee · Mon Jun 04, 2018 12:29 pm

Hi all,
I have successfullty set up Mikrotik WAP LTE Kit to work with LTE Provider. Everything works fine, except firmware upgrade process.
I have current firmware 6.42.2 installed. Avaliable firmware for my RouterBOARD wAP R-2nD is 6.42.3.
When I download this firmware and reboot router nothing changes (6.42.2 remains as current firmware). I've tried to use "Download and Install" button and drag'n'drop firmware file to files window. Both approaches does not appty firmware upgrade after reboot.
Also when I schedule to uninstall extra package (for example NTP package) it remains after reboot despite "scheduled to uninstall" status.

System resources:
Memory - 37.5Mb free (out of 64mb)
Free HDD space - 4.5mb free (out of 16Mb)

Log right before and after reboot shows nothing interesting:

Jun/04/2018 11:47:58 system,info,account user admin logged out from 192.168.1.250 via winbox
Jun/04/2018 11:48:02 system,info 
Jun/04/2018 11:48:02 system,info 
Jun/04/2018 11:48:02 system,info 
Jun/04/2018 11:48:02 system,info 
Jun/04/2018 11:48:02 system,info 
Jun/04/2018 11:48:03 system,info router rebooted
Jun/04/2018 11:50:04 system,info,account user admin logged in from 192.168.1.250 via winbox

Xymox · Tue Jun 05, 2018 6:52 am

I updated all the routers under my control from 6.41.4 to 6.42.3.. The only issues were that i needed to go thru my scripts and make sure they only had read/write/test/reboot and I needed a new Winbox. I used the Winbox "check for updates" and this worked perfectly. I updated CCRs, MIPSBEs like 2011's, a PPC and even a mAP. For my use I know of no issues.

guipoletto · Tue Jun 05, 2018 9:08 am

6.42.x breaks sometching quite badly in DHCP server.

I have a setup where a CCR1016 serves several VLANs, with a dedicated DHCP server to each VLAN.

6.41.4 works beautifully without any sort of hiccups.

6.42.x sometimes won't bring the DHCP instances up in the first boot.
If i reboot the CCR, then sometimes the system brings part of the DHCP servers up.
Sometimes all DHCP servers will be up at boot time, but an hour or so later customers start calling and... AHA! --All DHCP servers are RED again :headbang:

i had this happen in two different CCR1016's, they have twin configurations, altough the only unnusual condition in these is the sheer number of DHCP instances(600 and 1200) respectivelly.

Chupaka · Tue Jun 05, 2018 6:40 pm

Please write this to support@mikrotik.com. With supouts

JimmyNyholm · Wed Jun 06, 2018 1:02 pm

6.42.x breaks sometching quite badly in DHCP server.

I have a setup where a CCR1016 serves several VLANs, with a dedicated DHCP server to each VLAN.

6.41.4 works beautifully without any sort of hiccups.

6.42.x sometimes won't bring the DHCP instances up in the first boot.
If i reboot the CCR, then sometimes the system brings part of the DHCP servers up.
Sometimes all DHCP servers will be up at boot time, but an hour or so later customers start calling and... AHA! --All DHCP servers are RED again :headbang:

i had this happen in two different CCR1016's, they have twin configurations, altough the only unnusual condition in these is the sheer number of DHCP instances(600 and 1200) respectivelly.

I recon you have your reasons!? But to me it sounds like bad design, burdening down the router with 1200 instances of DHCP servers. One server could off course serve many more scopes or you perhaps should rethink your DHCP strategy and relay requests a couple of hops away into a redundant DHCPServer setup else where in your net....
I'm in no position to point fingers, just my thinking when reading your post.

PS. From MT's side of things if RouterOS lets you do the configuration it should work or you shouldn't be able to create more than the OS can handle. But that's another discussion I'm afraid. DS.

saaremaa · Thu Jun 07, 2018 12:33 am

FW: 6.42.3 (stable) If my Mikrotik router(RB433L) is configured in native Ipv6 mode(without IPV4 address) i cant get package update from mikrotik CDN.
It seems that Mikrotik does not receive AAAA from my DNS, but if I make a request through DIG - my DNS gives AAAA

[romas@ns0 unbound]# dig mikrotik.com AAAA

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.5 <<>> mikrotik.com AAAA
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21383
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;mikrotik.com.                  IN      AAAA

;; ANSWER SECTION:
mikrotik.com.           7200    IN      AAAA    2a02:610:7501:1000::2

;; AUTHORITY SECTION:
mikrotik.com.           6743    IN      NS      mimas.mt.lv.
mikrotik.com.           6743    IN      NS      moon.mt.lv.

;; Query time: 63 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Wed Jun  6 16:26:14 2018
;; MSG SIZE  rcvd: 102

Also there is an error: "No route to host", but I can do the trace to download.mikrotik.com manually without problems.

 > tool tracero 2a02:610:7501:4000::226
 # ADDRESS                          LOSS SENT    LAST     AVG    BEST   WORST
 1 2a07:4480:0:1401:0:1::             0%    4     4ms     3.9     3.3     4.1
 2 2a07:4480:0:1401::                 0%    4   3.3ms     3.1     2.7     3.3
 3 2a00:1248:8180:1::10               0%    4   2.7ms     3.4     2.7     4.8
 4                                  100%    4 timeout
 5 2a00:1248:7fff:fffe:c3ef:fca2...   0%    4  40.8ms    40.9    40.4    41.3
 6 10.222.78.133                      0%    4  52.8ms    53.1    52.1    54.5
 7 10.222.78.101                      0%    4  65.7ms    59.5    57.2    65.7
 8 2a02:2330:f:41::2                  0%    4    63ms    62.2    61.2      63
 9 2a02:2330:c:36::2                  0%    3  61.3ms    62.2    61.3    63.6
10                                  100%    3 timeout
11 2a02:610:7501:4000::1              0%    3  58.5ms    59.1    58.5      60
12 2a02:610:7501:4000::226            0%    3    59ms      59    58.8    59.2

,but the trace does not go like this

  > tool tracero download.mikrotik.com  
 # ADDRESS                          LOSS SENT    LAST     AVG    BEST   WORST
 1                                  100%    2 timeout
 2                                  100%    2 timeout
 3                                  100%    2 timeout
 4                                  100%    1 timeout
 5                                  100%    1 timeout

.

indjov · Thu Jun 07, 2018 2:00 pm

Any idea why sometimes WLAN drop my connection by this reason: Unicast key exchange timeout

WirelessRudy · Thu Jun 07, 2018 3:06 pm

Any idea why sometimes WLAN drop my connection by this reason: Unicast key exchange timeout

viewtopic.php?t=116480#p577004

mdxx · Fri Jun 08, 2018 4:25 pm

I had issue with RB3011UiAS, with USB3 port. After upgrade to 6.42.3 USB ports does not recognized USB Flash memory at all (Kingston Data travellers, one USB2, one USB3, tried one other USB3 too), nothing in section system / Disks. Did downgrade to 6.42.2, USB2 started to appear as before, USB3 still not recognized, same as previous versions - never had working usb3 on this board.

steen · Sat Jun 09, 2018 12:02 am

Hello Folks!

Unfortunately the WIFI (802.11N in this case) problems remains in this version.

Connecting to WiFI and Loading the router with some wifi traffic causes CPU go sky high 100% at all time, and traffic goes down from normal 20-30Mbit/s to 0.5Mbit/s and starts to interrupt all the time. Ultimately the router crashes after some time.

An attempt to downgrade to 6.41.3 lead to)
RouterBOOT booter 6.42.3

RouterBoard 411

CPU frequency: 300 MHz
Memory size: 32 MiB
NAND size: 64 MiB

Press any key within 2 seconds to enter setup..

loading kernel... OK
setting up elf image... OK
jumping to kernel code
Starting...
Generating SSH 2048bit RSA host key...
T��偳�ٕ�́��嵉��5r�Generating SSH 1024bit DSA?host key...
Too many levels of symbolic links

Then the device just sits there forever, next will now be a try using netinstall.

JimF · Sat Jun 09, 2018 1:49 am

Hello.
In mitigating VPNFilter, I have started upgrading, but now have stopped. I have bricked 3 RB750GL routers.

First one I thought it was my error for not getting all the add on packages. Just downloaded routeros-mipsbe-6.42.3.npk which states it is for RBxxx. Placed file in FILES and rebooted router, it went away and never returned. It is remote, so I have no clue.

Second try, I did the same thing, except also downloaded packages I knew I was running, (seen in PACKAGES) so this router received:
advanced-tools-6.42.3-mipsbe.npk
dhcp-6.42.3-mipsbe.npk
hotspot-6.42.3-mipsbe.npk
mpls-6.42.3-mipsbe.npk
ppp-6.42.3-mipsbe.npk
routeros-mipsbe-6.42.3.npk
routing-6.42.3-mipsbe.npk
security-6.42.3-mipsbe.npk
system-6.42.3-mipsbe.npk
All uploaded to FILES and I rebooted the router. This router rebooted, I was able to logon, I was able to pull up a console and see that it did upgrade from 5.4 to 6.42.3. It ran for about 2 minutes, I was moving on to the next one and my network started acting funky, dropped packets, remote desktops dropping connections. I went back and could not WinBox back into this router. I went to the closet and the router was acting really funky with crazy LED activity on the switch side. I shutdown the router and the network issues cleared up, removed the router to isolate it with just my notebook. It now boots, flashes all 1-5 led's for a split second, then out. A few seconds later all lights then nothing. Activity light on side is also flashing, doesn't seem to be any pattern with either. The router is a brick, not responding to any commands.

Afraid to move on at this point. I have 4 more RB750 HEX lites and a RB750 HEX v3.

Is it that 6.42.3 won't work on RB750GL's?
Is it that I could already have been infected with VPNFilter?

Anyone have suggestions?

jebz · Sat Jun 09, 2018 2:24 am

Is it that 6.42.3 won't work on RB750GL's?
Is it that I could already have been infected with VPNFilter?

Anyone have suggestions?

.
That's a very large jump in software. I recall 6.29 was a robust early version that might be worth using as an intermediate stepping version. From your brief summary it appears you haven't upgraded to the latest firmware, ( \system\routerboard ) you need to do this with each upgrade.
With your current situation I'd try a Netinstall with your laptop and router both connected to a dumb switch and no other devices.

steen · Sat Jun 09, 2018 8:58 am

Hello Folks!

Unfortunately the WIFI (802.11N in this case) problems remains in this version.

Connecting to WiFI and Loading the router with some wifi traffic causes CPU go sky high 100% at all time, and traffic goes down from normal 20-30Mbit/s to 0.5Mbit/s and starts to interrupt all the time. Ultimately the router crashes after some time.

An attempt to downgrade to 6.41.3 lead to)
RouterBOOT booter 6.42.3

RouterBoard 411

CPU frequency: 300 MHz
Memory size: 32 MiB
NAND size: 64 MiB

Press any key within 2 seconds to enter setup..

loading kernel... OK
setting up elf image... OK
jumping to kernel code
Starting...
Generating SSH 2048bit RSA host key...
T��偳�ٕ�́��嵉��5r�Generating SSH 1024bit DSA?host key...
Too many levels of symbolic links

Then the device just sits there forever, next will now be a try using netinstall.

Unfortunately netinstall did not work either, yet the device appairs in netinstall and you can begin an "install", but the completeness bar does not move and after some time the device goes goes back in ready.

z1022 · Sat Jun 09, 2018 1:01 pm

still have high ping time in hAP ac².

WirelessRudy · Sat Jun 09, 2018 6:01 pm

Hello Folks!

Unfortunately the WIFI (802.11N in this case) problems remains in this version.

Connecting to WiFI and Loading the router with some wifi traffic causes CPU go sky high 100% at all time, and traffic goes down from normal 20-30Mbit/s to 0.5Mbit/s and starts to interrupt all the time. Ultimately the router crashes after some time.

An attempt to downgrade to 6.41.3 lead to)
RouterBOOT booter 6.42.3

RouterBoard 411

CPU frequency: 300 MHz
Memory size: 32 MiB
NAND size: 64 MiB

Press any key within 2 seconds to enter setup..

loading kernel... OK
setting up elf image... OK
jumping to kernel code
Starting...
Generating SSH 2048bit RSA host key...
T��偳�ٕ�́��嵉��5r�Generating SSH 1024bit DSA?host key...
Too many levels of symbolic links

Then the device just sits there forever, next will now be a try using netinstall.
Unfortunately netinstall did not work either, yet the device appairs in netinstall and you can begin an "install", but the completeness bar does not move and after some time the device goes goes back in ready.

I have had this same issue in the past with 411 boards. But since I removed almost all 4xx, and 7xx boards from my system I don't have that issue. I think these 'old' boards are just not good enough anymore to run the latest ROS. No matter what they say about compatibility. I would start replacing these board for more modern (and thus faster) units and that way also stay out of these issues....
To give you some hope, I'd remember that some boards needed several attempts before they finally took the netinstall upgrade. And do the system package only. Needs less memory.
I had the feeling at those days it was more a memory issue with bad sectors after so many read/writes over the years so the new packages simply couldn't installed properly.

steen · Sat Jun 09, 2018 6:33 pm

Hello Folks!

Unfortunately the WIFI (802.11N in this case) problems remains in this version.

Connecting to WiFI and Loading the router with some wifi traffic causes CPU go sky high 100% at all time, and traffic goes down from normal 20-30Mbit/s to 0.5Mbit/s and starts to interrupt all the time. Ultimately the router crashes after some time.

An attempt to downgrade to 6.41.3 lead to)
RouterBOOT booter 6.42.3

RouterBoard 411

CPU frequency: 300 MHz
Memory size: 32 MiB
NAND size: 64 MiB

Press any key within 2 seconds to enter setup..

loading kernel... OK
setting up elf image... OK
jumping to kernel code
Starting...
Generating SSH 2048bit RSA host key...
T��偳�ٕ�́��嵉��5r�Generating SSH 1024bit DSA?host key...
Too many levels of symbolic links

Then the device just sits there forever, next will now be a try using netinstall.
Unfortunately netinstall did not work either, yet the device appairs in netinstall and you can begin an "install", but the completeness bar does not move and after some time the device goes goes back in ready.
I have had this same issue in the past with 411 boards. But since I removed almost all 4xx, and 7xx boards from my system I don't have that issue. I think these 'old' boards are just not good enough anymore to run the latest ROS. No matter what they say about compatibility. I would start replacing these board for more modern (and thus faster) units and that way also stay out of these issues....
To give you some hope, I'd remember that some boards needed several attempts before they finally took the netinstall upgrade. And do the system package only. Needs less memory.
I had the feeling at those days it was more a memory issue with bad sectors after so many read/writes over the years so the new packages simply couldn't installed properly.

Indeed they are aged, we have many of them still in production, we replace them when they fail or when customer experience some issues. But it does not happen to often I must say, so we still need our old RB411 devices. We actually freezed upgrading them some time ago, disabling but not uninstall all unneeded packages and so on to minimize the resource usage.
I think the device in question have problem with ether1, several other RB411 upgraded worked and did not show any signs of problems, but we followed a stepwise upgrade in some cases via latest bug fix. However WiFi 801.11N did not work properly in this release, at least not using RB411 so we are stuck at 6.41.2 and 6.41.3 and I should have stayed on bug fix only on them I guess.

vecernik87 · Sun Jun 10, 2018 1:01 pm

But to me it sounds like bad design, burdening down the router with 1200 instances of DHCP servers.

This approach was actually presented on recent MUM Melbourne where local ISP Tasmanet solved need to do DHCP with static reservations per each customer. They ended up with ton of /32 DHCP servers which each serve exactly one customer. If customer switch their router (come up with different MAC), DHCP will not get confused and customer will get same IP.

JimF · Mon Jun 11, 2018 5:00 pm

Is it that 6.42.3 won't work on RB750GL's?
Is it that I could already have been infected with VPNFilter?

Anyone have suggestions?
.
That's a very large jump in software. I recall 6.29 was a robust early version that might be worth using as an intermediate stepping version. From your brief summary it appears you haven't upgraded to the latest firmware, ( \system\routerboard ) you need to do this with each upgrade.
With your current situation I'd try a Netinstall with your laptop and router both connected to a dumb switch and no other devices.

You are correct, very large jump. Maybe that was it. Maybe I was already infected. Weekend of playing, luckily I had an older 750GL I could use offline to restore my old configs from backups. (I won't use this method again) so that I could export to a file the configuration script. Then I was able to bare metal the bricked 750GLs by using NetInstall and 15 second reset to put them in NetInstall mode. I loaded the new v6.42.3 and manually worked on importing the saved scripts on each. Modifying things that have changed since the old v5 versions of RouterOS.

I did finally get them up again and seem to be functioning just fine. I still did not update firmware, as 1.) the official statement said it did not effect firmware, just RouterOS. 2.) I was already nervous about the whole netinstall (never done that before) and permanently bricking the devices. ;-|

Wed Jun 13, 2018 5:44 pm

Virtual AP seems to be broken in 6.42.3, I upgraded an AP and a CPE and they did not reconnect. AP shows authentification errors. Moved the config of the virtual AP Interface to the main interface and connection comes up. Protocol is 802.11/WPA2 PSK. Updating the CPE was not the problem. As soon as the AP is upgraded problem started.

03:56:56 wireless,info 00:0C:42:2B:YY:XX@vapinterface: disconnected, received deauth: authentication not valid (2)

Vitalbanet · Fri Jun 15, 2018 8:55 pm

Error mac-ping with 6.42.3.
I have updated a RB921GS-5HPacD r2 to version 6.42.3, the mac-ping does not work properly, double reception sent 10 received 20.

[Toto@TOPPA-DIS1] > ping d4ca6d9eb709
  SEQ HOST                                     SIZE TTL TIME  STATUS                                                   
    0 D4:CA:6D:9E:B7:09                          70     33ms 
    0 D4:CA:6D:9E:B7:09                          70     33ms 
    1 D4:CA:6D:9E:B7:09                          70     29ms 
    1 D4:CA:6D:9E:B7:09                          70     29ms 
    2 D4:CA:6D:9E:B7:09                          70     21ms 
    2 D4:CA:6D:9E:B7:09                          70     22ms 
    3 D4:CA:6D:9E:B7:09                          70     14ms 
    3 D4:CA:6D:9E:B7:09                          70     14ms 
    4 D4:CA:6D:9E:B7:09                          70     14ms 
    4 D4:CA:6D:9E:B7:09                          70     15ms 
    5 D4:CA:6D:9E:B7:09                          70     20ms 
    5 D4:CA:6D:9E:B7:09                          70     20ms 
    6 D4:CA:6D:9E:B7:09                          70     14ms 
    6 D4:CA:6D:9E:B7:09                          70     14ms 
    7 D4:CA:6D:9E:B7:09                          70     12ms 
    7 D4:CA:6D:9E:B7:09                          70     12ms 
    8 D4:CA:6D:9E:B7:09                          70     16ms 
    8 D4:CA:6D:9E:B7:09                          70     16ms 
    9 D4:CA:6D:9E:B7:09                          70     13ms 
    9 D4:CA:6D:9E:B7:09                          70     13ms 
    sent=10 received=20 packet-loss=-100% min-rtt=12ms avg-rtt=18ms max-rtt=33ms

cdemers · Sat Jun 16, 2018 4:24 am

I just ran into this problem adding virtual interfaces in caps man. Fix for me was to manually change all the virtual mac addresses to unique ones.

Virtual AP seems to be broken in 6.42.3, I upgraded an AP and a CPE and they did not reconnect. AP shows authentification errors. Moved the config of the virtual AP Interface to the main interface and connection comes up. Protocol is 802.11/WPA2 PSK. Updating the CPE was not the problem. As soon as the AP is upgraded problem started.

03:56:56 wireless,info 00:0C:42:2B:YY:XX@vapinterface: disconnected, received deauth: authentication not valid (2)

Sent from my SM-A520W using Tapatalk

Vargas · Sat Jun 16, 2018 3:22 pm

Current version has an important memory leakage.

On my two CRS109-8G-1S-2HnD with 6.42.3 (stable) I am experiencing a continous memory leakage, which leads eventually and invariably in an unusable system.
The device boots-up using 32 MB of RAM, and after five to six days ends up using 128 MB (on board maximum available). When the memory is exhausted static routing and bridging work, but all other services (DHCP, DNS) fail. In this situation it is difficult or impossible to even log into the devices.

Trying to downgrade by just pushing the button on System Packages menu causes reboot but keeps the same version. Should I downgrade by manually downloading the previous packages?

Thank you and best regards,
AV

vecernik87 · Sat Jun 16, 2018 3:31 pm

Current version has an important memory leakage.

Are you certain that you do not have some feature which would consume lot of ram? Logs, packet sniffer, http proxy etc... ? Even if you did not set it up manually, check these things.
If memory leakage is real, then it is definitely worth of sending supout.rif to support@mikrotik.com once you reach some significant usage (100MB etc..). Only they can try to identify the issue behind this. (shouldn't be actually that hard - I am pretty sure there will be list of processes and their allocated memory.)

Modestas · Sat Jun 16, 2018 6:55 pm

FW: 6.42.3 (stable) If my Mikrotik router(RB433L) is configured in native Ipv6 mode(without IPV4 address) i cant get package update from mikrotik CDN.
It seems that Mikrotik does not receive AAAA from my DNS, but if I make a request through DIG - my DNS gives AAAA
[romas@ns0 unbound]# dig mikrotik.com AAAA

I don't think it's 6.42.3 specific or a new issue. Perhaps new dedicated thread or feature request could be good.
Management plane implementation on MT routers does not follow RFC6540, this was discussed earlier in MT forum. I would expect any IP-router sold after 2012 support IPv6 in all planes. No full RFC6540 support should mean router is "IPv4 only device with random IPv6 functions".

While you can force certain management plane functions use AAAA information, it seems to me package update procedure is hardcoded to IPv4 addresses.
You can verify that creating static AAAA only entries (2a02:610:7501:4000::226 and 2a02:610:7501:1000::196) for download.mikrotik.com. Just flush DNS cache and try "/system package update check-for-updates" in some 10 minutes.
My test results are in attachment.

Mon Jun 18, 2018 11:25 pm

Update of rb2011 from 6.41.something lead to bootloop. Netinstall was needed. 493ah and rbd52g accepted this version without any problems.

Tue Jun 19, 2018 11:27 am

Version v6.42.4 has been released in current channel:
viewtopic.php?f=21&t=135875

Who is online