RouterOS version 6.46.8 has been released in public "long-term" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.46.8 (2020-Oct-29 8:29):

Changes since 6.46.7:

*) cap - fixed L2MTU path discovery;
*) chr - fixed file system quiescing;
*) crs3xx - fixed IGMP snooping for CRS312, CRS326-24S+2Q+ and CRS354 devices;
*) crs3xx - fixed switch rules for CRS309 and CRS317 devices (introduced in v6.46.7);
*) crs3xx - improved system stability on CRS354 devices;
*) defconf - fixed default configuration loading on RBmAP-2nD;
*) defconf - improved default configuration generation on devices with changed wireless interface names;
*) dhcpv6-server - improved stability when changing server for static bindings;
*) dhcpv6-server - properly save bindings when executing "make-static" command;
*) fetch - fixed "src-address" usage for SFTP;
*) fetch - improved SSL handshake processing;
*) hotspot - do not verify Hotspot interface status when detecting if HTTP/HTTPS login method is allowed;
*) leds - fixed LED type setting;
*) lte - fixed multiple APN passthrough on R11e-4G;
*) lte - limit allowed APN count to 3 on R11e-LTE;
*) mpls - fixed duplicate "LabelRelease" message sending;
*) ospf - optimized LSA printing for smaller message sizes;
*) poe - fixed automatic PoE firmware upgrade procedure;
*) poe - improved PoE-out status detection;
*) ppp - allow specifying pool name for "remote-ipv6-prefix-pool" parameter;
*) radius - added "Service-Type" attribute to Access-Request for IPv4 and IPv6 DHCP servers;
*) smips - reduced RouterOS main package size;
*) sms - fixed SMS sending when both "interface" and "smsc" parameters are specified;
*) snmp - fixed "/tool snmp-get" functionality (introduced in v 6.46beta43);
*) switch - fixed Ethernet padding for small packets;
*) user - improved WinBox and The Dude authenticated session handling;
*) user-manager - updated PayPal's root certificate authorities;
*) vrrp - made "password" parameter sensitive;
*) w60g - general stability and performance improvements;
*) wireless - added support for US FCC UNII-2 and Canada country profiles for NetMetal series devices;
*) wireless - fixed incorrect wireless capability information in association response frames;
*) wireless - updated "kazakhstan" regulatory domain information;

For a full changelog please visit https://mikrotik.com/download/changelogs

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this specific RouterOS release.

Prev 6.46.7 [long-term] is released!

Hey guys.
I could be wrong, but it seems that DOH is unavailable on this release.
Could you please check this?
Thanks.

Updated one wAP R and one CRS326-24G-2S+RM all without issues.

Hey guys.
I could be wrong, but it seems that DOH is unavailable on this release.
Could you please check this?
Thanks.

Of course it is not available, in v6.46.x because it was implemented only in v6.47

MAJOR CHANGES IN v6.47:
----------------------
!) dns - added client side support for DNS over HTTPS (DoH) (RFC8484);

Hey guys.
I could be wrong, but it seems that DOH is unavailable on this release.
Could you please check this?
Thanks.

Of course it is not available, in v6.46.x because it was implemented only in v6.47

MAJOR CHANGES IN v6.47:
----------------------
!) dns - added client side support for DNS over HTTPS (DoH) (RFC8484);

OMG, sorry, I'm dumb :)

Offtopic disscussion moved to: viewtopic.php?f=2&t=168474

Temperature and voltage sensors are gone in this version on Hex POE (RB960PGS).

downgrade to 6.46.7 works!

Temperature and voltage sensors are gone in this version on Hex POE (RB960PGS).

I had this too on some devices with that and similar boards, i.e. hEX PoE, Powerbox and OmniTik PoE (ac). Temperature showed -252°C right after update. It's working again after firmware upgrade (another reboot).

Btw, thanks to MikroTik for backporting PoE power cycle fix for these devices! I know it happened in 6.46.7 already, but this is a really important patch for me.

hap ac2 after less than 24 hours after upgrade crash with reboot. No message in logs at all. Support case created with supout.rif attached.

write slowly downgrade to 6.46.7
he didn't write
I use hex

Dhcpv6 server "make static" still doesn't work properly.

If client router is rebooted which causes the IAID to change dhcpv6 server creates a new dynamic entry for the same DUID but with different IAID. due to this; dual stack queuing isn't possible as new address will no longer be queued.

Can you make it so that bindings are only based off of DUID? and if the same DUID renews it just updates the IAID instead of creating a new binding for the same DUID?

Sent from my SM-G955W using Tapatalk

I just had a ccr1007 loose all connectivity until reboot. I plugged in my laptop and access the router and could ping any ip on the router itself but any ip off the router even the switch sitting beside it would not ping. Rebooted and it all restored. This unit had been running 6.45.6 for a long time with no issues and upgraded to 6.46.8 two nights ago.

I had the same issue with stable läßt week twice. That's why I downgrade to longterm. So im still hoping.

Hi,

the antenna-gain parameter is not visible in Winbox. Using the command line it's possibile to change the parameter. The Winbox version is 3.27 and with the RouterOS 6.45.9 version there's no problems

Thanks

Correct. It's by design :)

Temperature and voltage sensors are gone in this version on Hex POE (RB960PGS).

downgrade to 6.46.7 works!

This is what I see :

MikroTik RouterOS 6.46.8 (c) 1999-2020 http://www.mikrotik.com/

/command Use command at the base level
[admin@MikroTik] > sys health
[admin@MikroTik] /system health> pr
voltage: 24V
temperature: 35C
[admin@MikroTik] /system health> print oid
voltage: .1.3.6.1.4.1.14988.1.1.3.8.0
temperature: .1.3.6.1.4.1.14988.1.1.3.10.0

After upgrading some of our 2011 we found that there is a loss of connectivity between the router and computers connected to ports 6-10 on second switch chip while HW offloading for these ports in bridge is on. Though the macs on those ports are correct and everything looks ok.

Opened a support ticket.

.
hEX PoE powering 48V three wAP ac (RBwAPG-5HacT2HnD) for a few years, iterating through long-term versions, however when upgrading from v6.46.7 to v6.46.8 suddenly port ether4 requires poe-out=forced-on or wAP ac on the port starts POE cycling endlessly. (any cable, firmware upgraded, rebooted three times)

If reverting hEX PoE to v6.46.7 the issue goes away.
...

Changelog:

Updated a CRS106-1C-5S from RouterOS and RouterBOOT 6.45.9. It wouldn't boot. On the console it showed
and went into the endless bootp booting loop. Worked ok after a Netinstall.

It turns out the CRS106-1C-5S may be faulty, so ignore that report.

Updated a CRS106-1C-5S from RouterOS and RouterBOOT 6.45.9. It wouldn't boot.

My new RB1100x4 hung twice in last week. I had to make factory reset to return it to life both times

Does anyone have RB1100x4 working stable with this version?

My new RB1100x4 hung twice in last week. I had to make factory reset to return it to life both times

Does anyone have RB1100x4 working stable with this version?

yes，it works fine...

hEX PoE powering 48V three wAP ac (RBwAPG-5HacT2HnD) for a few years, iterating through long-term versions, however when upgrading from v6.46.7 to v6.46.8 suddenly port ether4 requires poe-out=forced-on or wAP ac on the port starts POE cycling endlessly. (any cable, firmware upgraded, rebooted three times)

We have same problem on many hEX _POE and PowerBOX PRO... Nothing helps...

My new RB1100x4 hung twice in last week. I had to make factory reset to return it to life both times

Does anyone have RB1100x4 working stable with this version?

Is it rev 2?
/system routerboard print
revision: r2

There is no revision here :-(

> /system routerboard print
routerboard: yes
board-name: RB1100AHx4
model: RB1100x4
serial-number: -----
firmware-type: al2
factory-firmware: 6.44.5
current-firmware: 6.46.8
upgrade-firmware: 6.46.8

Do you mean I'm there?
viewtopic.php?t=149062

No revision stated usually means version 1 (not only in the Mikrotik world).

Hi !

I have a RBwAPG-60ad Wireless wire link that came pre-configured. https://mikrotik.com/product/wireless_wire

I make updates via Winbox with "check for updates"

I want you to know if I loose the configuration and the link goes down I do not know to to configure it.

Currently I have 6.47.8 Stable and I want ro know if I can change to 6.46.8 Long term directly from Winbox without loose my configuration.
It is safe ?
it is a good ideea ? Or should I remain on Stable?

Hi !

I have a RBwAPG-60ad Wireless wire link that came pre-configured. https://mikrotik.com/product/wireless_wire

I make updates via Winbox with "check for updates"

I want you to know if I loose the configuration and the link goes down I do not know to to configure it.

Currently I have 6.47.8 Stable and I want ro know if I can change to 6.46.8 Long term directly from Winbox without loose my configuration.
It is safe ?
it is a good ideea ? Or should I remain on Stable?

You shouldn't have any issue, but take backups from each end as you should do with any upgrade, or this case downgrade.

Cheers!

Rock solid on CCR1009 ... i like that build ...

https://faxxe.dyndns.org/ccr.jpeg

-faxxe

I've experienced some random reboots on RB4011 with this version. Haven't been able to pinpoint why (and no supout file is generated). Today again I had a reboot and could see it happen at the same time as I connected a new switch to the network so this made me think it might have something to do with RSTP. I could replicate it by connecting the switch once again. I downgraded to 6.45.9 which worked flawlessly (no reboots). Anyone experincing similar issues?

random reboots on RB4011

running this firmware from day 3 it was released on my 4011 (no wifi version)
had first random reboot this week, but have no idea why it happened because it was at night when for sure nobody was doing anything
didn't found anything to blame (was suspicious about watchdog) and decided to run local syslog server to duplicate all the logs for the next time

random reboots on RB4011

I had 1 reboot in the first week or so after I installed it, but I wasn't sure if it wasn't due to power outage.
Since that 64 days uptime with no other issues.

DDOS? Some addresses triggered your port-scan-blocker on 192.172.100.225. And now you log any further attempt from those blocked IP address.

add action=drop chain=forward log=yes protocol=tcp src-address-list=\
PortscanAttacker

This is not related to an upgrade. This is related to what "happens" on you internet connection.
I see no outgoing rules with log enabled. It's not the only place in MT where src/dst is swapped in the logging. (TORCH can have this too)

Might be triggered by running Torrent or other peer-2-peer network software.

Very stable on all HW we throw this release on. Great Version!

I have just had a strange issue on my RB4011iGS-2HacQ2HnD, after about 80 days uptime on v6.48.8.

I noticed I cannot logon locally nor via VPN from the outside. It was returning the message that the router does not support secure connection, described here: viewtopic.php?t=159085

I had to force-reboot the router. Checking the logs afterwards showed this, repeating many times, for several of the DHCP pools:

After the restart all seems to work ok again.
Has anyone else experienced the same problem?

New version 6.47.9 has been released in long-term RouterOS channel:

viewtopic.php?f=21&t=172429