v6.47.2 [stable] is released!

emils · Wed Aug 19, 2020 12:27 pm

RouterOS version 6.47.2 has been released in public "stable" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.47.2 (2020-Aug-13 06:39):

Changes in this release:

*) arm - improved stability when forcing 25G speed on unsupported interface;
*) crs3xx - fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+;
*) crs3xx - fixed QSFP+ interface linking after reboot for CRS326-24S+2Q+ (introduced in v6.47);
*) discovery - use "static" interface list by default instead of "!dynamic";
*) fetch - show status "uploaded" instead of "downloaded" when uploading a file;
*) hotspot - do not verify Hotspot interface status when detecting if HTTP/HTTPS login method is allowed;
*) interface - added new builtin "static" interface list;
*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47);
*) lora - fixed "spoof-gps" parameter padding (introduced in v6.47.1);
*) lte - fixed dynamic DHCP client creation when editing APN profile;
*) ospf - fixed case when changing one distribution metric changed metrics for other distribution options;
*) ppp - fixed PPP interface editing for the first time after reboot or after 20 seconds;
*) qsfp - fixed break-out cable linking after reboot (introduced in v6.47);
*) routerboot - fixed memory test on CCR2004-1G-12S+2XS ("/system routerboard upgrade" required);
*) sfp - stabilized CRS212 SFP port functionality and improved monitoring of optical modules;
*) sftp - fixed "flash" directory access (introduced in v6.46);
*) smb - fixed file path validation (introduced in v6.46);
*) smb - fixed possible memory leak;
*) smb - fixed SMB server (introduced in v6.47);
*) smb - limit active session count to 5 per connection;
*) snmp - fixed "current" value reporting on CCR series devices;
*) snmp - fixed "fan-speed" value reporting on CCR series devices;
*) wireless - added support for U-NII-2 for cAP ac;
*) wireless - updated "indonesia5" regulatory domain information;
*) www - improved WWW service stability when receiving bogus packets;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this particular RouterOS release.

KARaSb · Wed Aug 19, 2020 1:46 pm

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

pe1chl · Wed Aug 19, 2020 2:19 pm

*) smb - fixed file path validation (introduced in v6.46);
*) www - improved WWW service stability when receiving bogus packets;

Please include the relevant CVE number for fixes like this, so we can independently evaluate the urgency of an upgrade.

anav · Wed Aug 19, 2020 2:21 pm

not much here for me to get excited about........... but good that they continue to seek and rectify bugs.

KARaSb · Wed Aug 19, 2020 2:25 pm

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

At the moment, the download has dropped. But I would like to know what it was, if there is any information.

emils · Wed Aug 19, 2020 2:35 pm

Information was in the supout.rif file which you should have generated when the issue was present. As funny as it may sound, even we can not tell anything about the issue by looking at a screenshot (if you can call 360x176 pixels a screenshot) showing 100% unclassified load.

pe1chl, first one is not even a vulnerability, but related to directory accessing over SMB. The second one - it was possible to load one CPU core to 100% by sending a crafted packet to router's www service. As always, you are safe if the service is not exposed to the Internet.

Kindis · Wed Aug 19, 2020 3:08 pm

*) wireless - added support for U-NII-2 for cAP ac;

Can someone enlighten me about this one? I have 3 of these and one of them run channel ch54-5270 and this works and this is within U-NII-2 or I'm I just plain stupid after the vacation as my brain has yet to start working, which is most likely the case :)

Edit: Ok I think I got the answer from Reddit. This is a US thing which explain why my EU units can operate in this band and also U-NII-3 if I want it to.

shahjaufar · Wed Aug 19, 2020 3:20 pm

Why is my RB4011, changes 5G frequency from 5220 to Auto when I open wireless interface or Quick set window. & Crashes 5G indoor wifi.

I am Using "US" Version of RB4011

mozerd · Wed Aug 19, 2020 3:30 pm

Just updated my CRS326-24G-2S+ switch from v6.47.1 to v6.47.2 and now I am not able to login to the switch using Winbox 3.24 to update the firmware.
Switch is functional but Winbox cannot connect to switch.

Update on my CCR1009-7G-1C-1S+ worked without issue

What is my option to fix my CRS326-24G-2S+ switch ? Netinstall ?

[edit -- update] I removed the switch power supply waited for 2 minutes then re-powered ... now I can login using Winbox and upgrade the firmware.

DanAtCommon · Wed Aug 19, 2020 8:40 pm

I don't see any fixes for the w60g reliability issues introduced with v6.47 Any word on that?

honzam · Wed Aug 19, 2020 8:56 pm

I don't see any fixes for the w60g reliability issues introduced with v6.47 Any word on that?

What issues?

DanAtCommon · Wed Aug 19, 2020 10:41 pm

I don't see any fixes for the w60g reliability issues introduced with v6.47 Any word on that?
What issues?

Constant disconnects. See for example:
viewtopic.php?f=21&t=163482&p=808429&#p808429
viewtopic.php?f=7&t=163643
viewtopic.php?f=7&t=164307

nichky · Thu Aug 20, 2020 1:48 am

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

i can't properly see your picture, can you make bigger for us

vecernik87 · Thu Aug 20, 2020 4:28 am

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

At the moment, the download has dropped. But I would like to know what it was, if there is any information.

well, likely some script/task which has to run after startup. E.g. scheduled script downloading firewall rules? BGP with large table? etc...

NetStr · Thu Aug 20, 2020 10:26 am

Hi,
I am sorry but I am still having the same problem on this point :
*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47); any advice ?

al3xeezer · Thu Aug 20, 2020 11:15 am

Is this a bug? (Uploading file via SFTP from Mikrotik Router to remote server)

/tool fetch upload=yes url="sftp://server/path/file" user=example password=example src-path=file src-address=ip
failure: only http[s]/sftp supports src-address

ErfanDL · Thu Aug 20, 2020 12:27 pm

hAP Lite - not enough space for upgrade

lucasimo88 · Thu Aug 20, 2020 10:29 pm

Are you guys serious? The second update, in the last couple of months, with problems you don't expect at all. One core is constantly 100% loaded with something incomprehensible.

i can't properly see your picture, can you make bigger for us

open image link ohne "t" (thumbnail)

https://c.radikal.ru/c39/2008/2c/6e9b16a53516t.jpg

Full image: https://c.radikal.ru/c39/2008/2c/6e9b16a53516.jpg

Guscht · Fri Aug 21, 2020 1:54 am

hAP Lite - not enough space for upgrade

Thats a ~18 Euro hardware, dont expect much from such a device...

vecernik87 · Fri Aug 21, 2020 2:29 am

hAP Lite - not enough space for upgrade
Thats a ~18 Euro hardware, dont expect much from such a device...

That may apply for other manufacturers but not for Mikrotik. It is expected that software release will work on every supported device, no matter the price.

Anyway, not enough space means most likely the RAM is almost full. Easiest way to fix this is restart the device and try it again. After restart, memory is usually pretty empty, allowing to store the packages.
If that does not help, there is always the "netinstall" way

nichky · Fri Aug 21, 2020 2:57 am

Hi,
I am sorry but I am still having the same problem on this point :
*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47); any advice ?

need more info about this..can anyone add something

Fri Aug 21, 2020 6:52 am

shahjaufar, NetStr - Please send a supout file from this router to support@mikrotik.com. Generate it right after you have experienced such an issue.
mozerd - What is the error that you receive? Can you access the router over the MAC connection?
DanAtCommon - This is a MikroTik user forum. If you have an actual problem with the software or hardware, contact support@mikrotik.com. Or use our servicedesk https://help.mikrotik.com/servicedesk.
al3xeezer - We will look into this.
ErfanDL, vecernik87 - hAP lite and other SMIPS architecture devices are tested on every release and can be upgraded while running default configuration. You can, for example, put files or huge configuration on any of devices in the World and fill up all the storage that there is and will not be able to upgrade. If you are not able to upgrade a router that has basic/common configuration and router does not have files on it, then please write to support@mikrotik.com.

VadimS7 · Fri Aug 21, 2020 8:48 am

Hi,
I am sorry but I am still having the same problem on this point :
*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47); any advice ?
need more info about this..can anyone add something

does not work on my CCR1036

Jotne · Fri Aug 21, 2020 10:41 am

hAP Lite - not enough space for upgrade

Downgrade to an older smaller version like 6.44, then upgrade to latest. PS this may give problem with your current configuration.

pe1chl · Fri Aug 21, 2020 12:45 pm

ErfanDL, vecernik87 - hAP lite and other SMIPS architecture devices are tested on every release and can be upgraded while running default configuration.

I think your test is not OK because this issue is very common and reported everywhere.
It probably is not caused by files stored on the flash, but by use of the RAM memory which is required for storage of the update files. Not enough RAM can be made available for that and the upgrade fails in the downloading phase.
Maybe it can sometimes be made working by first rebooting the device before the upgrade is attempted, so more memory is available. That could also explain why a simple test in the development lab always succeeds, while people in practice have issues.

I work around it by installing separate packages and installing only what I need, but that workaround is going away with v7.
Maybe you would need to throw the towel and make the SMIPS devices a separate class that does not support all the features.
Maybe some users use them to build a toy lab, but usually they will be running only system and wireless, maybe advanced-tools.
But MPLS, BGP, OSPF, IPsec, Hotspot... REALLY?

mozerd · Fri Aug 21, 2020 1:29 pm

mozerd - What is the error that you receive? Can you access the router over the MAC connection?

@strods
My apologies for not identifying the Winbox error message for the Switch connection. I cannot remember the message now.

After Software update using Winbox v3.24 I could not access my CRS326-24G-2S+ switch via MAC connection.
Winbox Neighbors would not display the Info for the Switch .... hit refresh a number of times but no info for the switch would show up.

Removing the Switch power supply then re-powering the Switch solved the problem.

santyx32 · Fri Aug 21, 2020 2:28 pm

Maybe some users use them to build a toy lab, but usually they will be running only system and wireless, maybe advanced-tools.
But MPLS, BGP, OSPF, IPsec, Hotspot... REALLY?

Agreed, maybe MT can make v7 lite and v7 full buillds

pe1chl · Fri Aug 21, 2020 2:39 pm

Maybe some users use them to build a toy lab, but usually they will be running only system and wireless, maybe advanced-tools.
But MPLS, BGP, OSPF, IPsec, Hotspot... REALLY?
Agreed, maybe MT can make v7 lite and v7 full buillds

The same could be done with 6.47. Make the "combined" package (a thing that IMHO never should have been made in the first place...) include only
the basic things that would be used on a NAT router/AP, and allow the install of the other (already existing) packages for those that want to experiment.
(mpls, routing, security, hotspot, ipv6)

That will reduce the package size and solve the problem for now.

Fri Aug 21, 2020 4:33 pm

I have been uselessly asking mikrotik to stop using the combined package and put only the essential packages directly into the routers during the manufacturing process for many years. They had never heard me.

pe1chl · Fri Aug 21, 2020 6:06 pm

I have been uselessly asking mikrotik to stop using the combined package and put only the essential packages directly into the routers during the manufacturing process for many years. They had never heard me.

I fully agree with that! The router also should have a selection menu where you can select additional packages to be downloaded from the upgrade server, instead of first having to download an all-packages .zip (carefully watching the architecture and version), extracting the wanted package from there, and upload it to the router. The router already knows how to download those packages, the only thing that it could require is an URL at the download server that serves a list of available packages. Cannot be too hard.

eworm · Fri Aug 21, 2020 6:22 pm

No, it is not too hard. My scripts collection (see signature) has a function for that. Just run...

$DownloadPackage wireless

... and reboot to install the package. (The also supports downloading packages in other version or for different architecture, for example to use with capsman.)

staticsafe · Fri Aug 21, 2020 6:42 pm

Was the SFP bug introduced in 6.47 fixed yet? The one that causes SFP interfaces to not come up at all.

It was supposedly fixed in 6.47.1 but I heard otherwise, don't particularly want to test .2 on my network's primary router..

pe1chl · Fri Aug 21, 2020 10:37 pm

No, it is not too hard. My scripts collection (see signature) has a function for that. Just run...
Code: Select all
$DownloadPackage wireless

I think the system->packages menu should list all available packages, also those not installed, and then allow to download+install them with an install button similar to the "enable/disable/uninstall" buttons.

eworm · Fri Aug 21, 2020 11:01 pm

Yes, I got that, and I second your request.
But for now only my method is available. ;)

wojtek2 · Sat Aug 22, 2020 2:57 am

New firmware, but still NetPower switch type unknown !. How long the same problem ??. In firmware 4.59 there is no problem identyfication type switch.

shahani · Sat Aug 22, 2020 5:08 am

ErfanDL, vecernik87 - hAP lite and other SMIPS architecture devices are tested on every release and can be upgraded while running default configuration.
I think your test is not OK because this issue is very common and reported everywhere.
It probably is not caused by files stored on the flash, but by use of the RAM memory which is required for storage of the update files. Not enough RAM can be made available for that and the upgrade fails in the downloading phase.

Maybe you would need to throw the towel and make the SMIPS devices a separate class that does not support all the features.
Maybe some users use them to build a toy lab, but usually they will be running only system and wireless, maybe advanced-tools.
But MPLS, BGP, OSPF, IPsec, Hotspot... REALLY?

Many people in poor countries use hAP lite.
They usually do not have the ability to buy better equipment.
Features like IPsec and hotspot are essential for them.
All you have to do is back up your settings before upgrading and reset the router to default configuration, then upgrade router and then restore your backup.

for example
Many people in Iran work hard all month without leave and earn one hundred dollars a month.
Due to the high price of food, it is impossible for them to buy a $ 20 router.
So they try to get the most out of their device.

Tubeorange667 · Sat Aug 22, 2020 7:12 am

I have a hap ac which was running on 6.47.1. I upgraded to 6.47.2 and it went well, then on reboot I upgraded the firmware too. But on reboot I couldn't login using winbox. The system was not responding to reset for 4 attempts. On the fifth time it got reset and I could login using winbox. What did I do wrong? Do I need to reset the device before updating? What is the best practice for upgrading routeros?

Sat Aug 22, 2020 8:05 am

Even poor admins should not restore backup on other device or version that differs from where it was made.

bgp4 · Sat Aug 22, 2020 12:45 pm

An ipipv6 tunnel problem in 6.47.2. When pppoe client disconnect and then reconnect, ipv6 address of device is changed , but local address of ipipv6 tunnel is not changed (ipv6 firewall connection print), and the tunnel is down actually.
I didn't configure "local-address" value. I think it should be changed automatically. Please fix it.
My config:

[admin@MT] > int ipipv6 print detail
Flags: X - disabled, R - running
0 R name="v6tun" mtu=auto actual-mtu=1440 local-address=::
remote-address=xxxxxxxxxxx.sn.mynetname.net
current-remote-address=240e:3a1:1234:5678::1
dscp=inherit clamp-tcp-mss=yes

pe1chl · Sat Aug 22, 2020 2:36 pm

An ipipv6 tunnel problem in 6.47.2. When pppoe client disconnect and then reconnect, ipv6 address of device is changed , but local address of ipipv6 tunnel is not changed (ipv6 firewall connection print), and the tunnel is down actually.
I didn't configure "local-address" value. I think it should be changed automatically. Please fix it.

It is easy to create a PPP profile for your PPPoE client and add some scripts to it, to handle this (and other) small problems resulting from down/up state changes!
Just disable your ipipv6 tunnel in the down script and enable it again in the up script.

tyoma53 · Sat Aug 22, 2020 2:59 pm

hi,

i have following dhcp client script, that's not working until i replace $interface variable with real interface name. according to wiki interface variable should be known for dhcp client script - https://wiki.mikrotik.com/wiki/Manual:I ... Properties
please check.

not working code:

:if ($bound=1) do={
    :local pdns [/ip dhcp-client get value-name=primary-dns [find interface=$"interface"]]
    :local sdns [/ip dhcp-client get value-name=secondary-dns [find interface=$"interface"]]
    /ip route add gateway=$"gateway-address" dst-addres=$"pdns" comment="Route to DNS"
    /ip route add gateway=$"gateway-address" dst-addres=$"sdns" comment="Route to DNS"
} else {
    /ip route remove [find comment="Route to DNS"]
}

working code:

:if ($bound=1) do={
    :local pdns [/ip dhcp-client get value-name=primary-dns [find interface=ether2]]
    :local sdns [/ip dhcp-client get value-name=secondary-dns [find interface=ether2]]
    /ip route add gateway=$"gateway-address" dst-addres=$"pdns" comment="Route to DNS"
    /ip route add gateway=$"gateway-address" dst-addres=$"sdns" comment="Route to DNS"
} else {
    /ip route remove [find comment="Route to DNS"]
}

bratislav · Sat Aug 22, 2020 3:31 pm

I have a hap ac which was running on 6.47.1. I upgraded to 6.47.2 and it went well, then on reboot I upgraded the firmware too. But on reboot I couldn't login using winbox. The system was not responding to reset for 4 attempts. On the fifth time it got reset and I could login using winbox. What did I do wrong? Do I need to reset the device before updating? What is the best practice for upgrading routeros?

Maybe you should wait a bit longer after reboot for system to finish upgrade ...

bratislav · Sat Aug 22, 2020 3:42 pm

Many people in poor countries use hAP lite.
They usually do not have the ability to buy better equipment.
Features like IPsec and hotspot are essential for them.
All you have to do is back up your settings before upgrading and reset the router to default configuration, then upgrade router and then restore your backup.

That sounds like too much hustle for most users ... seems to me that for most people making main package for SMIPS smaller without unnecessary features would solve upgrade issues, and for those who need something more extra packages are always available to play with ...

bgp4 · Sun Aug 23, 2020 5:05 am

An ipipv6 tunnel problem in 6.47.2. When pppoe client disconnect and then reconnect, ipv6 address of device is changed , but local address of ipipv6 tunnel is not changed (ipv6 firewall connection print), and the tunnel is down actually.
I didn't configure "local-address" value. I think it should be changed automatically. Please fix it.
It is easy to create a PPP profile for your PPPoE client and add some scripts to it, to handle this (and other) small problems resulting from down/up state changes!
Just disable your ipipv6 tunnel in the down script and enable it again in the up script.

I've tried that PPP profile scripts , disable and enable tunnel do not handle the problem of "local-address" which remained old value before down/up state changed !

shahani · Mon Aug 24, 2020 6:17 am

Even poor admins should not restore backup on other device or version that differs from where it was made.

There is no problem restoring the backup to the new version.
It is better to make a text backup and restore the backup after Reset Configration in No Defualt Configration mode
It is better to return the backup line by line in the terminal.

vecernik87 · Mon Aug 24, 2020 10:43 am

All you have to do is back up your settings before upgrading and reset the router to default configuration, then upgrade router and then restore your backup.
Even poor admins should not restore backup on other device or version that differs from where it was made.
There is no problem restoring the backup to the new version.

This seems to me that you are all arguing due to simple jargon confusion.
Usually: "backup" = binary backup (from command

/system backup

) which is version and hardware sensitive, meanwhile "export" = textual export (from command

/export

) of the config which can be imported almost anywhere as long as HW and version supports required features.

trancenet · Mon Aug 24, 2020 5:15 pm

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!

Chupaka · Mon Aug 24, 2020 5:58 pm

hi,

i have following dhcp client script, that's not working until i replace $interface variable with real interface name. according to wiki interface variable should be known for dhcp client script - https://wiki.mikrotik.com/wiki/Manual:I ... Properties
please check.

Yeah, you need to use some temporary variable with different name: https://wiki.mikrotik.com/wiki/Manual:S ... able_names

bpwl · Mon Aug 24, 2020 7:26 pm

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!

The "stable" stack has a very misleading name. It is an advanced version that is only used when you really need the new features. Otherwise stick with the "long term" stack, that is the most stable set. Or rely on your own validation. E.g. 6.45.6 is a very stable version in the stable stack for me.

You are also in the 5 GHz world. There are some pitfalls, like the mandatory 1 minute or even 10 minutes radar test period for DFS frequencies. 5 GHz will be totally dead for that time, with interface enabled.. This is not Mikrotik specific, but a mandatory requirement for all wifi equipment sold.

trancenet · Mon Aug 24, 2020 8:24 pm

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!
The "stable" stack has a very misleading name. It is an advanced version that is only used when you really need the new features. Otherwise stick with the "long term" stack, that is the most stable set. Or rely on your own validation. E.g. 6.45.6 is a very stable version in the stable stack for me.

You are also in the 5 GHz world. There are some pitfalls, like the mandatory 1 minute or even 10 minutes radar test period for DFS frequencies. 5 GHz will be totally dead for that time, with interface enabled.. This is not Mikrotik specific, but a mandatory requirement for all wifi equipment sold.

I checked the problem, and found that the 5GHz network appears only 10 minutes after restarting the router, if the 5GHz network is unavailable, it has the status "radar detected". But the fact is that before updating to version 6.47.2, this problem never it was, the 5GHz network always appeared immediately after restarting the router.

trancenet · Mon Aug 24, 2020 8:30 pm

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!

I downgraded the firmware to version 6.45.9 and the problem is solved! Now the 5GHz network is available immediately after starting the router. The problem was 100% in the new version 6.47.2. I will never update to a new version again!

Jotne · Mon Aug 24, 2020 10:31 pm

I will never update to a new version again!

Did you try to setup the config from scratch, or did you just upgrade and it stopped working.
I have seen some stuff changes when upgrade so you need to manually configure it to get it working.
If 5 GHz did stops working for every one, 6.47.2 would be removed quick.
Works fine fro me.

bpwl · Tue Aug 25, 2020 1:09 am

you need to manually configure it to get it working.

Yes. Without config we can only guess. But it's most probably a config that just allows random behavior.

Things like letting the device select the frequency by using "auto" can be unpredictable. How will it decide? On what sample of electromagnetic signal and noise that hits it for just a few seconds? What is the logic of the software? Channel with weakest signal level? Channel with lowest activity?
For 2.4 MHz: Preference for 1, 6 11, or does it take 1,5,9,13 ? Or no preference at all? So it chooses the dip between 1 and 6, the worst value it could pick ?
For 5 MHz: preference for DFS or not. Indoor freq or any freq? Avoiding weather radar or not ? Keeping 5 MHz distance from the adjacent channels or not?
It's unpredictable if ever "auto" is used for the channel selection.

So why can it be different after the upgrade? It's almost pure random to start with. But there is more. The logic in RouterOS has been touched (option to skip DFS and skip weather radar has been added). And also the U-NII-2 channels have been added for the FCC region, and those are all DFS channels! So the auto selection will almost certainly be different from the previous version. There are many more channels to choose from, and quite some now are DFS channels, and the weather radar channels are there as well.

So the older version starts immediately, because a non-DFS channel is choosen (there were no DFS channels allowed for FCC to choose from, I believe, so it's consistently non-DFS then). The newer version waits 10 minutes because there was this time a weather channel in the freq/bandwidth selection chosen by "auto". It can be different at next startup, depending on the electromagnetic activity of that moment, what is almost the same as "pure random".

kd2pm2 · Tue Aug 25, 2020 2:27 am

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!
I downgraded the firmware to version 6.45.9 and the problem is solved! Now the 5GHz network is available immediately after starting the router. The problem was 100% in the new version 6.47.2. I will never update to a new version again!

Not sure of you tried changing your wireless settings so it does not scan the radar band or not. There is a setting that will hold it for 10 min to find a clear frequency..or..you could just skip that band and not wait at all.

Wangz · Tue Aug 25, 2020 2:27 am

(edit)
Do anyone experience opening the address-list in Winbox causes the cpu to get loaded? I mean the green graph keeps spiking per second and the cpu stucks at 1%-2% without throughput load. Even turning off all entries in address-list it still happens also turning off all my firewall and mangle rules. I am at the version 6.47.1 right now and i can't afford to update to 6.47.2 because of some issues. Maybe the issue still exist in 6.47.2

Device: Mikrotik Hap Ac2

UserT24 · Tue Aug 25, 2020 2:42 am

Hi,
I'm new here. I have HAP AC with Wireless Atheros AR9300 on the 2GHz. My download speed was very low after the upgrade to 6.47.2. I switched my band to B/G/N and back to N-only which seems to have helped.
I'm in the UK and last year after an upgrade my Wireless range dropped as I had dead spots in the house which was not there before. I have not moved the router but at the time I thought it could have been some other devices I installed in the house. A friend suggested changing the country for the wireless settings which I completed by selecting Vietnam. This seemed to have have boost it a little but still not as good as it was before. Looking at this now I can see I only made the change on the 5 GHz channel and not the 2 GHz.
Testing now proof that if my 2GHz band is set to country UK and my 5 GHz to Vietnam I get very low download speed (13Mbps) on the 2Ghz and 5 Ghz is fine (80Mbps). Switching both wireless bands country to Vietnam boost the download speed on the 2GHz to 53Mbps and the 5GHz to 84Mbps.

Hope this help someone.

If you have any advise to help me sort out dead wifi spots in the house without extra hardware, I'll welcome it. Which settings should I adjust?
HAP AC
Firmware 6.46.5
United Kingdom

vecernik87 · Tue Aug 25, 2020 6:45 am

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!
I downgraded the firmware to version 6.45.9 and the problem is solved! Now the 5GHz network is available immediately after starting the router. The problem was 100% in the new version 6.47.2. I will never update to a new version again!

That likely means your router is in violation of legislation relevant to the DFS and you may receive fine if your local authorities find you. The old firmware probably did not follow DFS specs correctly (or maybe they were updated?).

There are plenty of non-DFS channels in 5GHz band, so pick your favourite and you won't have to wait even with the new firmware.

I am at the version 6.47.1 right now and i can't afford to update to 6.47.2 because of some issues. Maybe the issue still exist in 6.47.2
Device: Mikrotik Hap Ac2

I have heaps of these around and I am not aware of any trouble introduced in 6.47.2 so I don't understand what would prevent you from upgrading.
Also, I don't suffer from any issue with CPU spike as you described. As long as the CPU is within few %, you can't possibly call it "spike", merely a statistical error - nothing worth of worrying about.

goodbye · Tue Aug 25, 2020 7:44 pm

You are also in the 5 GHz world. There are some pitfalls, like the mandatory 1 minute or even 10 minutes radar test period for DFS frequencies. 5 GHz will be totally dead for that time, with interface enabled.. This is not Mikrotik specific, but a mandatory requirement for all wifi equipment sold.

The "problem" is exactly this; MIkrotiks and many other vendors have never properly been in legal compliance with the way DFS-reqired channels (Dynamic Frequency Selection required, the entirety of UNII-2 in the US) is required to be handled.

The unlicensed use of 802.11 in the UNII-2 band qualifies us as secondary users of the band in the US. There are paid/licensed users of the band that have preexisted before the FCC opened up the band for us secondary users. The thing about being a secondary user is the firm, clear, and unwavering requirement that we do everything feasible to avoid causing interference to a licensed user (e.g. radar and the like).

If you're using anything in that band, there's a statutory "10 minute listen" to be super sure there's no radar or the like detected before being allowed to transmit.
Anything that's willingly used a UNII-2 frequency without a 10-minute listen is in violation of FCC licensing requirements.

Yes, it's 'super nice' when the AP just starts using those frequencies on startup. It's also illegal.

It is annoying being a secondary user. What's more annoying? Not being able to use that spectrum at all... which was the case prior to opening UNII-2 up for wifi and could be the case again if too many primary users complain about wifi users not being compliant and interfering with them.

Do with that what you will.

It sounds like MIkrotik finally fixed a compliance problem as part of finally pursuing the needed certifications for use of UNII-2, which I for one have been really looking forward to in the US, and good for them! I'm really happy to see it!

Just because 802.11a/b/g/n/ac/ad spectrum is unlicensed doesn't mean we're not on the hook for being compliant when using it. When Mikrotik was allowing you to operate illegally, which is the behavior you likely unwittingly grew accustomed to, they were literally opening you up to fines.

Unlicensed doesn't mean unregulated; it's on us to be aware of and be compliant with FCC regulations when operating any electronic devices in the US, especially when using those that intentionally transmit RF energy.

Mikrotik becoming FCC compliant here is literally saving the unwitting from themselves.

Say thank you! :-)

Jotne · Tue Aug 25, 2020 10:23 pm

@trancenet and other regarding 5Ghz DFS legal compliance. This has nothing to do with 6.47.2 It was change several version back, so trancenet did only see this because he skipped many upgrade.

trancenet · Wed Aug 26, 2020 4:51 pm

I will never update to a new version again!
Did you try to setup the config from scratch, or did you just upgrade and it stopped working.
I have seen some stuff changes when upgrade so you need to manually configure it to get it working.
If 5 GHz did stops working for every one, 6.47.2 would be removed quick.
Works fine fro me.

The first setting of my router was two years ago, the problem was discovered after updating to 6.47.2

trancenet · Wed Aug 26, 2020 4:58 pm

@trancenet and other regarding 5Ghz DFS legal compliance. This has nothing to do with 6.47.2 It was change several version back, so trancenet did only see this because he skipped many upgrade.

No, I have always the latest (stable) version, I did not skip new updates. The problem appeared only after updating to firmware 6.47.2

trancenet · Wed Aug 26, 2020 5:03 pm

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!
I downgraded the firmware to version 6.45.9 and the problem is solved! Now the 5GHz network is available immediately after starting the router. The problem was 100% in the new version 6.47.2. I will never update to a new version again!
That likely means your router is in violation of legislation relevant to the DFS and you may receive fine if your local authorities find you. The old firmware probably did not follow DFS specs correctly (or maybe they were updated?).

There are plenty of non-DFS channels in 5GHz band, so pick your favourite and you won't have to wait even with the new firmware.

Probably the problem is related to DFS in the new version 6.47.2, but there were no problems with the previous version. My router not violation of legislation, since the region of the wireless network is set according to my country, I do not use another region;

pe1chl · Wed Aug 26, 2020 5:15 pm

Probably the problem is related to DFS in the new version 6.47.2, but there were no problems with the previous version.

You have not even tested the previous version! You compare it with an older version, from before things changed in the DFS handling.
This is not a MikroTik-specific issue. You will find these problems with most manufacturers. At some point in time they get a nasty letter from FCC or other authorities that tells them to improve their DFS software, then they change it (this kind of changes is usually omitted from change lists in the release notes) and suddenly you have problems.
Similarly, you will find that there suddenly are restrictions in the output power or antenna gain you can set, and existing settings are suddenly declared invalid and changed to defaults.
The manufacturers are forced to do this in order to keep their certification in some countries.

bpwl · Wed Aug 26, 2020 6:58 pm

"You have not even tested the previous version!" and not even checked the frequencies used. When on 6.45.9 (your downgrade) what is the frequency used? When upgraded to 6.47.2 what is it then?

It all points towards: Different behavior is not 6.45.9 versus 6.47.2 , but non-DFS channel versus DFS channel including a weather radar channel (120-124-128) being used. In that case all you get with both releases is perfectly normal.

Jotne · Wed Aug 26, 2020 7:47 pm

@trancenet and other regarding 5Ghz DFS legal compliance. This has nothing to do with 6.47.2 It was change several version back, so trancenet did only see this because he skipped many upgrade.
No, I have always the latest (stable) version, I did not skip new updates. The problem appeared only after updating to firmware 6.47.2

Since you did write that you downgraded to 6.45.9 and did not write what version you did upgrade from, it seems that you completely skipped the 6.46 stabel tree??
https://mikrotik.com/download/changelogs

l0ft13 · Thu Aug 27, 2020 1:27 pm

We are experiencing problems with the dude since upgrade to 6.47.2 - viewing maps is fine but as soon as you open a node to edit or view detail the dude exits and reconnects.

TimurA · Thu Aug 27, 2020 2:08 pm

eddieb · Thu Aug 27, 2020 4:50 pm

updating to 6.47.2 went smooth ... from 6.47.1 to 6.47.2 done thru the dude ;-) No problems so far
Still running OSX 10.14.x to be able to run the 32bit Dude in Dude4Mac 6.47.2

trancenet · Thu Aug 27, 2020 11:33 pm

@trancenet and other regarding 5Ghz DFS legal compliance. This has nothing to do with 6.47.2 It was change several version back, so trancenet did only see this because he skipped many upgrade.
No, I have always the latest (stable) version, I did not skip new updates. The problem appeared only after updating to firmware 6.47.2
Since you did write that you downgraded to 6.45.9 and did not write what version you did upgrade from, it seems that you completely skipped the 6.46 stabel tree??
https://mikrotik.com/download/changelogs

Read my previous posts again. Before updating to 6.47.2, I had version 6.47.1 installed, there were no problems. The problem appeared immediately after updating to version 6.47.2! For the test, I downgraded back to the latest "long term" version in the router update settings, this decision was adopted after the recommendation to use "long term" firmware, which are stable. Although I'm sure there will be no problems the same on 6.47.1.

trancenet · Thu Aug 27, 2020 11:36 pm

@trancenet and other regarding 5Ghz DFS legal compliance. This has nothing to do with 6.47.2 It was change several version back, so trancenet did only see this because he skipped many upgrade.
No, I have always the latest (stable) version, I did not skip new updates. The problem appeared only after updating to firmware 6.47.2
Since you did write that you downgraded to 6.45.9 and did not write what version you did upgrade from, it seems that you completely skipped the 6.46 stabel tree??
https://mikrotik.com/download/changelogs
Please, read my previous posts again. Before updating to 6.47.2, used version 6.47.1, there were no problems. The problem appeared immediately after updating to version 6.47.2! For the test, I downgraded back to the latest "long term" version in the router update settings, this decision was adopted after recommendation to use "long term" firmware, which are stable. Although I'm sure there will be no problems the same on 6.47.1.

bpwl · Fri Aug 28, 2020 1:11 am

"Read my previous posts again. Before updating to 6.47.2, I had version 6.47.1 installed" .... not mentioned in your 8 posts in this forum. Everyone reading your posts was convinced you came from your 2 year old version.
6.47.1 and even 6.45.9 do NOT skip the radar detect sequences. If there was no wait time, you where not on a DFS channel. Now that there is a wait time you have a DFS channel somewhere in your bandwidth. If it jumps from one case to another, it is because you did not fix the channel, but left it on auto. Or because there is "radar detected" and the DFS logic moves on to the next channel.

Something did apparently change in the list or sequence of possible channels in the later case : viewtopic.php?f=21&t=165166&p=813588#p812276
Adding U-NII-2 channels is one such change.

Ixander · Fri Aug 28, 2020 1:09 pm

On version 6.47.2 command repartition (e.g. "/partitions repartition partitions =3") causes the router's cyclic reboot (about every 10 seconds). On version 6.47.1 situation the same.
Reset didn't help, I've been able to repare it only with netinstall

model: 951Ui-2HnD
revision: r2
firmware-type: ar9344
factory-firmware: 6.46.1
current-firmware: 6.47.2
upgrade-firmware: 6.47.2

Wangz · Sat Aug 29, 2020 6:23 pm

Very bad! I have hAP ac, after updating to version 6.47.2 I can no longer connect to the 5GHz network, only the 2.4GHz network is available, although the 5GHz module in the router settings has the status "running". I would never recommend MikroTik products because the software is very unstable!
I downgraded the firmware to version 6.45.9 and the problem is solved! Now the 5GHz network is available immediately after starting the router. The problem was 100% in the new version 6.47.2. I will never update to a new version again!
That likely means your router is in violation of legislation relevant to the DFS and you may receive fine if your local authorities find you. The old firmware probably did not follow DFS specs correctly (or maybe they were updated?).

There are plenty of non-DFS channels in 5GHz band, so pick your favourite and you won't have to wait even with the new firmware.

I am at the version 6.47.1 right now and i can't afford to update to 6.47.2 because of some issues. Maybe the issue still exist in 6.47.2
Device: Mikrotik Hap Ac2
I have heaps of these around and I am not aware of any trouble introduced in 6.47.2 so I don't understand what would prevent you from upgrading.
Also, I don't suffer from any issue with CPU spike as you described. As long as the CPU is within few %, you can't possibly call it "spike", merely a statistical error - nothing worth of worrying about.

Yeah i also think that it was just a statistical error more like winbox bug i guess. I just updated mine to 6.47.2. Seems to be better than 6.47.1

dakotabcn · Sat Aug 29, 2020 10:46 pm

*) l2tp - fixed multiple tunnel establishment from the same remote IP address (introduced in v6.47);

I was excited about this in the changelog, I hoped that with this they would solve the problem of connecting several L2TP connections from the same IP when there is NAT in the middle of both the client and the router, I just did a test on a client with an RB3011 that is behind A router with NAT from my house (RB4011 with IP public in WAN Interface) and two computers, when I connect the first session OK, I launch the second L2TP connection and the first one cuts, very disappointed that this has not been solved yet

pe1chl · Sun Aug 30, 2020 11:31 am

hAP mini has a mode-button but it is not shown in winbox/webfig under System->Routerboard, only the reset-button is shown.
However, the mode-button command works in terminal.
For other devices, e.g. the RB750Gr3, the mode-button is shown in winbox/webfig System->Routerboard.
Please add the Mode Button in the System->Routerboard panel for devices that have it.

Chupaka · Mon Aug 31, 2020 2:27 pm

Do anyone experience opening the address-list in Winbox causes the cpu to get loaded? I mean the green graph keeps spiking per second and the cpu stucks at 1%-2% without throughput load. Even turning off all entries in address-list it still happens also turning off all my firewall and mangle rules. I am at the version 6.47.1 right now and i can't afford to update to 6.47.2 because of some issues. Maybe the issue still exist in 6.47.2

You mean, the green graph in the top right corner of WinBox? It's WinBox network traffic, not CPU load or anything else.

msatter · Mon Aug 31, 2020 2:42 pm

Do anyone experience opening the address-list in Winbox causes the cpu to get loaded? I mean the green graph keeps spiking per second and the cpu stucks at 1%-2% without throughput load. Even turning off all entries in address-list it still happens also turning off all my firewall and mangle rules. I am at the version 6.47.1 right now and i can't afford to update to 6.47.2 because of some issues. Maybe the issue still exist in 6.47.2
You mean, the green graph in the top right corner of WinBox? It's WinBox network traffic, not CPU load or anything else.

The CPU graphic box always to the max and that is the case as long I know Miktrotik.

@Chupaka
Switch between the tabs in /ip firewall to address lists and then to mangle and you will see the green lines fill the box on the tab address lists and quiet fall back to almost not lines.

Then click on plus that you want to create a new entry in address lists and leave that box open and switch back to let's say tab filters. You will see the green lines go up and down all the time. I don't that think that this is caused by traffic flowing.

Chupaka · Mon Aug 31, 2020 2:47 pm

It's still not about CPU: viewtopic.php?f=2&t=27814&p=134483#p134483

WildRat · Mon Aug 31, 2020 6:05 pm

After upgrading my hAP ac from v6.47.1 to v6.47.2 i loose all my DHCP, DNS, Certificates settings. Reverted back.
Tried second time - all go smooth. May be some Winbox thing? Between this I upgraded Winbox.

msatter · Mon Aug 31, 2020 6:54 pm

It's still not about CPU: viewtopic.php?f=2&t=27814&p=134483#p134483

That was more than a decade ago and that it is a long time.

I can reproduce every time at any time so Mikrotik must be playing a cruel trick on me.

The with multiple core processors a little total load of 20% is represented as 100%. I only check it to see if I am in /ip firewall addreslist or have a covered input window open for addresslist which is represented by a pulsing green stacked bars.

For real CPU information I have the CPU load counter also in the top bar.

redbullsteve · Mon Aug 31, 2020 11:27 pm

Installed on a number of units to notice that the Hotspot Host table is now empty. It appear the Hotspot is still working as clients are able to connect and logon and then appear in the active table.
Seen this on all platforms. Also present in v6.45.9
Is it just me or is anyone else seeing this?

Capture1.JPG

Capture2.JPG

Chupaka · Tue Sep 01, 2020 1:22 am

It's still not about CPU: viewtopic.php?f=2&t=27814&p=134483#p134483
That was more than a decade ago and that it is a long time.

But current manual tells the same: https://wiki.mikrotik.com/wiki/Manual:W ... e_Overview

Traveller · Tue Sep 01, 2020 8:02 am

It's still not about CPU: viewtopic.php?f=2&t=27814&p=134483#p134483

This is the most amazing thing I read lately :) .

msatter · Tue Sep 01, 2020 12:10 pm

Hmmmm Winbox traffic makes more sence to me than Winbox network traffic.

The Wiki label indeed shows that the green box is only shows traffic between the addressed router/device and Winbox.

However it can be mistaken as CPU , not in any way accurate, because that also increases to generate the traffic to the Winbox. As I wrote earlier it indicates hidden windows that are generated by using Winbox or that you have a active window open that makes the router work extra.

Thanks for the link to the Wiki page on this.

pe1chl · Tue Sep 01, 2020 1:53 pm

You can add a CPU indicator by right-click on the status bar and click "Add CPU".
Unfortunately, the CPU is shown as a numeric value and the network traffic has that nice green bar.
Of course it should have been the other way around, as CPU is a percentage (so that bar can be black...fully green) while the network traffic is a number, not a percentage.
So showing it as such a partly filled bar makes no sense. You need the number of Kbit/s to have any idea what is going on. Maybe it should be shown when hovering on the status bar.

Volkk · Tue Sep 01, 2020 3:10 pm

I have problems with random reboots in my mikrotik core BGP, we are an ISP company and this affects us a lot, we already generate many supout files and send them but we have no response from technical support!! SUP-26105

krafg · Tue Sep 01, 2020 8:11 pm

Updated without issues.

Regards.

UXA · Wed Sep 02, 2020 10:20 am

Thank you Mtik :)

emils · Thu Sep 03, 2020 12:35 pm

New version 6.47.3 has been released in stable RouterOS channel:

viewtopic.php?f=21&t=165761

Who is online