v7.1 is released!

emils · Thu Dec 02, 2021 1:54 pm

Version 7.1 has been released.

Spanish: https://youtu.be/fzLxTl6VXRI
English: https://youtu.be/Zp-U7Anv5-0
Russian: https://youtu.be/xRGBbXJc1xA

PDF information: https://mt.lv/RouterOSv7

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 7.1 (2021-Dec-01 16:07):

MAJOR CHANGES
----------------------
!) updated Linux Kernel based on version 5.6.3;
!) completely new NTP client and server implementation;
!) completely new User Manager implementation;
!) merged individual packages, only bundle and a few extra packages remain;
!) new Command Line Interface (CLI) style (RouterOS v6 commands are still supported);
!) support for Let's Encrypt certificate generation;
!) support for REST API;
!) support for UEFI boot mode on x86;
----------------------

NETWORKING
----------------------
!) CHR FastPath support for "vmxnet3" and "virtio-net" drivers;
!) support for "Cake" and "FQ_Codel" type queues;
!) support for IPv6 NAT;
!) support for Layer 3 hardware acceleration on all CRS3xx devices;
!) support for MBIM driver with basic functionality support for all modems with MBIM mode;
!) support for MLAG on CRS3xx devices;
!) support for VRRP grouping and connection tracking data synchronization between nodes;
!) support for Virtual eXtensible Local Area Network (VXLAN);
----------------------

ROUTING
----------------------
!) completely new BGP implementation with performance improvements;
!) completely new IPv6 stack;
!) completely new MPLS implementation with interface lists, multipath and LDPv6 support;
!) completely new OSPF implementation with performance improvements;
!) completely new routing filtering with script-like rule syntax, RPKI support and large and extended community filtering;
!) support for IPv6 ECMP and VRF (including VRF-lite);
!) support for IPv6 recursive routing and policy routing;
----------------------

VPN
----------------------
!) support for L2TPv3;
!) support for OpenVPN UDP transport protocol;
!) support for WireGuard;
!) support for ZeroTier on ARM and ARM64 devices;
----------------------

WIRELESS
----------------------
!) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);
----------------------

Full changelog is available here: https://mikrotik.com/download/changelog ... lease-tree

Znevna · Thu Dec 02, 2021 1:57 pm

Changelog since 7.1rc7?

Thu Dec 02, 2021 2:00 pm

!) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);

Quite a lot of devices will lack new stack.

Thu Dec 02, 2021 2:01 pm

Quite a lot of devices will lack new stack

Yep, it is a shame, but at the same time understandable.

pe1chl · Thu Dec 02, 2021 2:04 pm

Due to the fact that we have made a huge progress in RouterOS v7 stability, we have decided to release it in the testing channel.

Ok so this is basically 7.1rc7 with a new version number? No need to install it when you already have 7.1rc7?

Please test it where you can and report your feedback on this forum page

Did you read all feedback on the previous v7.1rc forum pages and at least put the remarks about lacking or nonworking sub-features on a work-to-do list?

ROUTING
----------------------
!) completely new BGP implementation with performance improvements;

that looks exciting but unfortunately there are some critical omissions in the current status that make it unfit for production use.
and we all know that until it is fit for production use, it cannot really be tested either.

pe1chl · Thu Dec 02, 2021 2:06 pm

!) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);
Quite a lot of devices will lack new stack.

I have a RB4011 which fulfills the requirements for wifiwave2 but still I cannot use it because it doesn't co-exist with the normal package that is required to support 2.4 GHz WiFi.
Or did that change?

kivimart · Thu Dec 02, 2021 2:08 pm

Capsman Support in wifiwave2?

buset1974 · Thu Dec 02, 2021 2:09 pm

what about the MPLS module, is it stable?

Thu Dec 02, 2021 2:11 pm

CAPsMAN does not support WW2 at the moment.
Note that WW2 is planned for future devices, that's why there are additional requirements in terms of hardware.

jookraw · Thu Dec 02, 2021 2:12 pm

What I said on the 7.1rc7 topic (viewtopic.php?t=180675#p894492), still valid, the RB4011 switch is still useless.
I'm wondering if the wireguard peer IPv6 bug is still present, probably yes, as Mikrotik even did not acknowledged it ...

Edit: wireguard still broken.

jookraw · Thu Dec 02, 2021 2:14 pm

CAPsMAN does not support WW2 at the moment.
Note that WW2 is planned for future devices, that's why there are additional requirements in terms of hardware.

What about the cAP XL ac, it was lauched months ago, after the wifiwave2 was around?

jookraw · Thu Dec 02, 2021 2:35 pm

About the useless switch of the RB4011, here are the tests showing that the issue isn't solved.

With bridge vlan filtering on:

Screenshot 2021-12-02 133319.png

With bridge vlan filtering off:

Screenshot 2021-12-02 133101.png

Thu Dec 02, 2021 2:36 pm

v7.1 contains routing fixes and improvements in order to fully comply with 6.x setups.

jookraw · Thu Dec 02, 2021 2:41 pm

v7.1 contains routing fixes and improvements in order to fully comply with 6.x setups.

In other words, the 7.1 is a exact copy (as there is changelog between) of 7.1rc7, as the same well reported bugs are still here...

ivicask · Thu Dec 02, 2021 2:42 pm

v7.1 contains routing fixes and improvements in order to fully comply with 6.x setups.

Please give us more detailed changelogs, even if it only says briefly like you wrote now, if we have related issue, we than know to flash new version and check if issue is resolved..

Thu Dec 02, 2021 2:57 pm

In other words, the 7.1 is a exact copy (as there is changelog between) of 7.1rc7, as the same well reported bugs are still here...

no, like Sergejs clearly wrote, it contains several routing fixes, compared to rc7

Znevna · Thu Dec 02, 2021 2:58 pm

IPv6 NAT / netmap (WinBox / WebFig) missing fields:

7.1 IPv6 NAT netmap.PNG

WireGuard, broken IPv6 in allowed-address for peers.

/interface/wireguard/peers/print 
# INTERFACE   PUBLIC-KEY             ENDPOINT-PORT  ALLOWED-ADDRESS                
0 wireguard1  editedpubkeypeer0=                 0  172.22.88.12/32                
                                                    edited:7:0:12/128
1 wireguard1  editedpubkeypeer1=                 0  172.22.88.13/32                
                                                    edited:7:0:13/128

ping edited:7:0:12
    0 edited:7:0:12                56  64 90ms951us  echo reply

ping edited:7:0:13
    0 edited:7:0:12               104  64 75ms476us  net unreachable

reply from :12 ? um..

/interface/wireguard/peers> enable 1

ping edited:7:0:12
    0 edited:7:0:12                                  timeout

ping edited:7:0:13
    0 edited:7:0:13                56 128 10ms730us  echo reply

Also allowed-address "::/0" cannot be set from WinBox, it doesn't get saved. It works from CLI only.
I know I've written all this in the support ticket regarding WireGuard, but others might wanna know about the issue.
And yes @soheilsh, socks5 is still broken.

jookraw · Thu Dec 02, 2021 3:02 pm

In other words, the 7.1 is a exact copy (as there is changelog between) of 7.1rc7, as the same well reported bugs are still here...
no, like Sergejs clearly wrote, it contains several routing fixes, compared to rc7

I think that everyone would be happy to have, somewhere the full changelog, because sometimes, there is some "edge-case" that may affect someone and that person could see if this was solved...

Thu Dec 02, 2021 3:03 pm

About the useless switch of the RB4011, here are the tests showing that the issue isn't solved.

With bridge vlan filtering on:
Screenshot 2021-12-02 133319.png

With bridge vlan filtering off:
Screenshot 2021-12-02 133101.png

viewtopic.php?f=1&t=177092#p878135

Long story short, L3 Fastpath (FastTrack) support for vlan-filtered bridges is in development. It is a new feature, not a bug. While we understand your frustration, please consider that new features cannot be added during the stabilization phase of the project. We are hoping to deliver this feature in the upcoming v7 versions.

mafiosa · Thu Dec 02, 2021 3:33 pm

Do I need to mention outpu.network in bgp if I use out filter?

chubbs596 · Thu Dec 02, 2021 3:41 pm

Due to the fact that we have made a huge progress in RouterOS v7 stability, we have decided to release it in the testing channel.
Ok so this is basically 7.1rc7 with a new version number? No need to install it when you already have 7.1rc7?

Please test it where you can and report your feedback on this forum page
Did you read all feedback on the previous v7.1rc forum pages and at least put the remarks about lacking or nonworking sub-features on a work-to-do list?
ROUTING
----------------------
!) completely new BGP implementation with performance improvements;
that looks exciting but unfortunately there are some critical omissions in the current status that make it unfit for production use.
and we all know that until it is fit for production use, it cannot really be tested either.

Yes simple features like BFD

pe1chl · Thu Dec 02, 2021 3:46 pm

What I said on the 7.1rc7 topic (viewtopic.php?t=180675#p894492), still valid, the RB4011 switch is still useless.

It is your misunderstanding. Switch hardware accel has nothing to do with fastpath or fasttrack! It concerns L2 forwarding between switchports.
It is also not related to L3 accel as found in some recent devices.

pe1chl · Thu Dec 02, 2021 3:46 pm

Do I need to mention outpu.network in bgp if I use out filter?

Yes. output.network is the replacement for /routing bgp networks. It has nothing to do with filtering.

pe1chl · Thu Dec 02, 2021 3:49 pm

v7.1 contains routing fixes and improvements in order to fully comply with 6.x setups.

So it now does support "unreachable" routes and is not converting them to "blackhole"?
That would be very welcome...

Edit: apparently no... so routing does not fully comply with 6.x setups.

pe1chl · Thu Dec 02, 2021 3:58 pm

Yes simple features like BFD

Missing functionality in BGP:
- BFD
- display of received and advertised number of prefixes in connection table ("peer cache")
- display of connection uptime or time of last reconnection
- use of interface name as update source (in addition to a specified IP)
- proper ordering of /routing table and /routing bgp template in exports
- export of AS number 65530 (not imply it as default)
- proper logging messages that mention the connection name instead of a meaningless pointer

mhugo · Thu Dec 02, 2021 4:12 pm

In other words, the 7.1 is a exact copy (as there is changelog between) of 7.1rc7, as the same well reported bugs are still here...
no, like Sergejs clearly wrote, it contains several routing fixes, compared to rc7

He did not mention rc7 actually so I dident find it very clear.

This changelog is fine if coming from 6.x track but coming from rc7 there are no indications of what happened. I see some modifications in the routing status page (thanks for updating), but all rc info was removed so its from memory.

We run on our own risk rc7 in production due to 6.x limitations being bigger than rc7 issues, so a little detail would be great so we know if we should spend the time upgrading to 7.1 or wait for full release. Our problems are mainly related to the OSPF issues in rc6 and if there are improvements on 2004 packetloss.

/Mikael

Thu Dec 02, 2021 4:14 pm

- display of connection uptime or time of last reconnection
- use of interface name as update source (in addition to a specified IP)

7.1 shows connection uptime and works with interface names.

Amm0 · Thu Dec 02, 2021 4:14 pm

no, like Sergejs clearly wrote, it contains several routing fixes, compared to rc7
I think that everyone would be happy to have, somewhere the full changelog, because sometimes, there is some "edge-case" that may affect someone and that person could see if this was solved...

Impressive changelog – nice to see all the new stuff in one place!

Although not sure if "several routing fixes" is actual clear or useful – imagine every build has "routing fixes" ;). While V7 has been overall pretty stable for our use cases, it's some of the edge-cases / subtle changes from V6 that that be good to see documented.

Is there, or going to be at somepoint, a definitive list/wiki/RN of what specific things from V6 work differently than before? Really not sure the changelog is the place for what seem to be lacking documention on the specific "diffs" from V7 in terms of operations/config.

For example, "dynamic-in" route filter is removed in V7 – but following just the release notes won't have told me this. While cross-fig has seem to work when I've tried it, not all our configs in field are exactly the same... e.g. if crossfig can't convert some code needed for routing/etc, it being commended out isn't all that helpful if it was a remote upgrade.

Re-reading the "Help" pages for every config line certainly be one approach to verify a V6 config be okay for V7, and we're not missing anything... But then the worry be if the V7 docs are actually done/complete/accurate, and effort be wasted...

Anyway good if there was some "cheat sheet" to double-check a V6 config against some "config-oriented V7 gotchas list" that can be before upgrading/crossfig from V6.

OlofL · Thu Dec 02, 2021 4:15 pm

When IPv6 fasttrack?

Thu Dec 02, 2021 4:15 pm

pe1chl, connection uptime is added in 7.1. We continue work on other listed parameters, as we are also using our BGP and OSPF and required few of them as well.

Currently we are running 7.1 on 95% of devices in our network.

Thu Dec 02, 2021 4:17 pm

Our problems are mainly related to the OSPF issues in rc6

Since it is not possible to guess what problem you are referring to, all I can say is that even rc7 compared to rc6 had OSPF fixes, and 7.1 compared to rc7 includes even more OSPF fixes.

pe1chl · Thu Dec 02, 2021 4:22 pm

- display of connection uptime or time of last reconnection
- use of interface name as update source (in addition to a specified IP)
7.1 shows connection uptime and works with interface names.

Tested local.address with interface name and it works.
Connection uptime is nowhere to be found...

Edit: it apparently only exists in commandmode... not very useful, would like to see this in the winbox peer cache overview.
We run routers with up to 50 peers and it really needs a status overview like that.

mhugo · Thu Dec 02, 2021 4:26 pm

Since it is not possible to guess what problem you are referring to, all I can say is that even rc7 compared to rc6 had OSPF fixes, and 7.1 compared to rc7 includes even more OSPF fixes.

Thanks mrz for clarifying even more OSPF fixes is there. I think our main problem was with large LS updates since the issue with the routers next to a rebooting one getting unstable is gone since rc7.

Ill start upgrading the 17 routers I have running ROS7. Ill also test if the oddness with 2004s where we almost cant reach them after an upgrade and needs 2 reboots more to make them work as normal is still there.

I think it was a good decision to featurefreeze and stabilize ROS7.1 although we look forward to BFD etc but that wasent working in 6.x anyway.

/M

pe1chl · Thu Dec 02, 2021 4:28 pm

It might be useful to have "crossfig" as a separate tool so that it can be run on an exported v6 config to see what happens during conversion.
(either some executable or a service on the mikrotik.com account where you can paste a v6 export and see the v7 version)
That will be helpful during the next phase of deployment where we would do remote upgrades of routers without physical access.

Larsa · Thu Dec 02, 2021 4:29 pm

!) updated Linux Kernel based on version 5.6.3;

Just curious, why switch to a inbetween version as 5.6.3 when a more recent LTS version 5.10.x was available already the 13th December 2020?

!) completely new NTP client and server implementation;
!) completely new User Manager implementation;
!) merged individual packages, only bundle and a few extra packages remain;
!) new Command Line Interface (CLI) style (RouterOS v6 commands are still supported);
!) support for Let's Encrypt certificate generation;
!) support for REST API;
!) support for UEFI boot mode on x86;
!) completely new ...
!) completely new ...
!) completely new ...
!) completely new ...
!) completely new ...
. . .
. . .

Actually all this is really great and I'm truly impressed by all the new fresh stuff, indeed progress! When and where will the docs be available?

Thu Dec 02, 2021 4:29 pm

Connection uptime is nowhere to be found...

Look more more closely, /routing/bgp/session has "uptime" parameter.
And regarding received prefix count, it will be added eventually, but if you really need to see how many prefixes are received then there is a workaround you can /routing/route/print count-only where received-from="...."

SirPrikol · Thu Dec 02, 2021 4:29 pm

"Filters
Convert routing filters after upgrade from v6.x"

This is true? Has anyone tested it? Does it work exactly?
Otherwise, you don't really want to lose a lot of connections due to the curvature of the work

pe1chl · Thu Dec 02, 2021 4:36 pm

Connection uptime is nowhere to be found...
Look more more closely, /routing/bgp/session has "uptime" parameter.
And regarding received prefix count, it will be added eventually, but if you really need to see how many prefixes are received then there is a workaround you can /routing/route/print count-only where received-from="...."

Ah I just edited it: it apparently only exists in commandmode... not very useful, would like to see this in the winbox peer cache overview.
We run routers with up to 50 peers and it really needs a status overview like that.
What is up, were there recent interruptions, how many prefixes does it send (to indicate problems further down that path), etc.
Of course I can build an API script that does all kinds of queries and outputs them in a useful table, but it would be better when the router can do that by itself (as it can in RouterOS v6).

StubArea51 · Thu Dec 02, 2021 4:45 pm

Thanks for getting this out in 2021 MikroTik!

I know sometimes it probably feels like all you get is negative feedback but the pace of development has really stepped up for v7 and it is both noticed and appreciated :)

Amm0 · Thu Dec 02, 2021 4:45 pm

"Filters
Convert routing filters after upgrade from v6.x"

This is true? Has anyone tested it? Does it work exactly?

"Crossfig" works like magic when you upgrade from V6 to V7 - changing any config from V6 to V7 version. This includes most of the /routing/filters, which have a radically different way of working in V7, and generally pretty complex config to start...

So problem is the magic is maybe at 95%. That might sound good...but if you're in that 5%, you could have a broken router on your hands.

Since Mikrotik doesn't document the crossfig magic – in fact, it's just the name for the internal process that does the config conversion during upgrade process - no user sees it - just runs between the reboot. As such, they don't offer it a tool to try outside of upgrading an actual router, you can't know if you're in that 5%. And, if messed up the conversion in the previous rc/beta of V7, it doesn't run on upgrade from V7 to another V7 – only V6 to V7 once.

Mikrotik's answer is likely a fair one: test it and see if it works for you, be sure to backup if you do. With BGP, being pretty central to internet routing, you'd want to at close 100% otherwise you're not just messing up one router, but an entire network/company.

Thu Dec 02, 2021 4:51 pm

It would be nice to know what are those 5% that did not convert properly in your config?

Amm0 · Thu Dec 02, 2021 4:55 pm

It would be nice to know what are those 5% that did not convert properly in your config?

dynamic-in route rules, as stated previously. Functionality is gone in V7 - essentially what was a working config in V6 won't work V7. That ain't specifically "crossfig" problem, but a factor someone like to consider BEFORE upgrading.

@mrz, I was trying to make a compliment with 95% - if everything was 100% you'd ship it ;). Making the point if there was at least a list of what upgrade/crossfig might "comment out" or "adapt" be good to know. We been using V7 in the field on some devices for a while (for MBIM), been very stable for us though quite a few of the rc's. Kudos!

pe1chl · Thu Dec 02, 2021 5:18 pm

Also I normally have filter rules with chain=--------- action=log comment=------------- that I place between blocks of rules as a separator.
These were lost during conversion, did not yet try if 7.1 keeps them.
And the winbox interface to routing filters is still completely broken. Even though it is "just like firewall filter rules".
Is it so hard to create winbox/webfig entries for cmdline stuff?
Pity that this is all closed source, I would love to have a look at the layer between the user interface and the internals, to see how that is all connected and why it apparently is rocket science to add a feature not only to cmdline but also to winbox and webfig at the same time. I would expect that to be a table-driven system and it would be best when it is a single table were a cmdline addition has some winbox and webfig definition as well...

eworm · Thu Dec 02, 2021 5:21 pm

I have something very similar, my separators look like this:

/ip firewall filter add chain=separator comment="--- input chain above ---" disabled=yes

I think they survived the update... Possibly you need alphabetical characters in chain name?

pe1chl · Thu Dec 02, 2021 5:24 pm

Yes in firewall it was OK, these did not have to be converted, it was about routing filters.

buset1974 · Thu Dec 02, 2021 5:33 pm

How come the prefix count always show 0 using winbox?
Is other ways to show BGP Prefix counts?

thx

Thu Dec 02, 2021 5:34 pm

read few posts above
viewtopic.php?p=894558#p894558

jeetlal · Thu Dec 02, 2021 5:36 pm

Is there any plan to add macvlan feature in v7

JJT211 · Thu Dec 02, 2021 5:38 pm

Thanks for getting this out in 2021 MikroTik!

I know sometimes it probably feels like all you get is negative feedback but the pace of development has really stepped up for v7 and it is both noticed and appreciated :)

I'll second this....y'all don't get enough credit. It's very exciting times!

rpingar · Thu Dec 02, 2021 6:04 pm

may you tell me if the problem reported in the following ticket as been fixed?
[SUP-67221]: x86 7.1rc7 and 7.2beta17 stops working correctly after 30hours of operation

we think it is related about route-casche and x86.

regards
ros

Amm0 · Thu Dec 02, 2021 6:15 pm

I would expect that to be a table-driven system and it would be best when it is a single table were a cmdline addition has some winbox and webfig definition as well...

I actually don't want to look at the source – if I did I could run OpenWRT et'll on something with a Wi-Fi 6 chip. I do think Mikrotik does an EXCELLENT job at putting common interface over all the services, while still curating what are no doubt a lot of custom drivers/hardware – certainly work we'd rather not do ourselves. So I accept that means there might be incomplete features over the latest Linux builds & RFC/IEEE protocols. In fact, the main think I like ROS table-driven – in fact I describe is like putting SQL over OpenWRT.

FWIW I have CS background, so I actually bought a Mikrotik long ago because it had LUA support – so know feature do disappear/change. 100% agree with @pe1chl on filter rules... still I don't know what Mikrotik were thinking by leaving the "table-based system" that used everywhere else - surely there could have been a wat to rationalize the route filter interface with the rest of ROS.

It is like they added VBScript for this, while the rest of the config/scripts use a LISP+TCL-like model – workable but doesn't seem to keep with their philosophy. To me the rules like like an opportunity for buffer-overflow or similar attacks, since they don't document anything close to a BNF-like syntax guide – the docs don't even say what the max limit on length of rule after all.

soheilsh · Thu Dec 02, 2021 6:24 pm

read few posts above
viewtopic.php?p=894558#p894558

fix socks5 problem
viewtopic.php?t=180440

osc86 · Thu Dec 02, 2021 6:27 pm

even with 7.1 ROS still reports system,error,critical router was rebooted without proper shutdown between normal updates

hecatae · Thu Dec 02, 2021 6:42 pm

!) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);
Quite a lot of devices will lack new stack.

WiFi devices with at least 256MB RAM:
hAP ac3
Audience
Chateau
RB4011
SXTsq 5 ac
LDF 5 ac
DISC Lite5 ac
LHG XL 5 ac
NetMetal ac²
Cube 60G ac

I'm not sure there's that many missing, apart from cAP ac and wAP ac, and hAP ac2?

pe1chl · Thu Dec 02, 2021 6:55 pm

7.1 shows connection uptime and works with interface names.

I have tested with the interface names, but it does not work properly.
With an ethernet interface with static IP it works, but with interfaces with a dynamic IP or which start in a down condition and later come up, it fails.
E.g. with L2TP/IPsec or with GRE tunnel which comes up after internet connection is established.

infabo · Thu Dec 02, 2021 6:58 pm

WIRELESS
----------------------
!) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);
----------------------

Yeah, you forgot to mention the FREE DISK SPACE requirement.

pe1chl · Thu Dec 02, 2021 7:02 pm

Quite a lot of devices will lack new stack.
WiFi devices with at least 256MB RAM:
hAP ac3
Audience
Chateau
RB4011
SXTsq 5 ac
LDF 5 ac
DISC Lite5 ac
LHG XL 5 ac
NetMetal ac²
Cube 60G ac

I'm not sure there's that many missing, apart from cAP ac and wAP ac, and hAP ac2?

No, read the requirements more carefully (from the help site):

Requirements

The wifiwave2 package is compatible with IPQ4019 and QCA9984 wireless interfaces and is only available for ARM builds of RouterOS v7. It also requires 14MB of free space and at least 256MB of RAM.

As of the release of RouterOS 7.1, this means it is compatible with 4 devices:

hAP ac³ (non-LTE)
Audience*
Audience LTE6 kit*
RB4011iGS+5HacQ2HnD**

* The wifiwave2 package is not compatible with CAPsMAN. And does not yet offer wireless meshing (4-address mode).

** The 2.4GHz wireless interface on the RB4011iGS+5HacQ2HnD is not compatible with the wifiwave2 package. It will not be usable with the package installed.

Calling the RB4011 compatible is a bit stressing the reality, I think. So that leaves only hAP ac3 and Audience.

pe1chl · Thu Dec 02, 2021 7:08 pm

SMB is adding bogus "guest" users on every reboot or upgrade. It actually started in 7.1rc7. After upgrade to 7.1 now the export shows:

/ip smb users
add name=guest
add name=guest

(plus there already is a default user guest)
And I am not even USING the SMB service. It is disabled.

soheilsh · Thu Dec 02, 2021 7:10 pm

socks5 work prefectly in ros testing 6.49rc2 but in ros 7.1 testing not working

Larsa · Thu Dec 02, 2021 7:14 pm

Ok, one more time: when and where are the docs for 7.1 to be found?

Amm0 · Thu Dec 02, 2021 7:20 pm

Ok, one more time: when and where are the docs for 7.1 to be found?

They'll likely point to https://help.mikrotik.com/docs/display/ROS/RouterOS – but the better question is what's the status of them, some look incomplete IMO WRT V7.

Some of this causes unnecessary posting in the forum, to find out answer that should just be documented....

whatever · Thu Dec 02, 2021 7:29 pm

I really wish there was a wifiwave2 "light" package to be installed on early hap ac2 revisions with 256 MB RAM. Free disk space is the only thing preventing it.

Larsa · Thu Dec 02, 2021 7:31 pm

They'll likely point to https://help.mikrotik.com/docs/display/ROS/RouterOS – but the better question is what's the status of them, some look incomplete IMO WRT V7. Some of this causes unnecessary posting in the forum, to find out answer that should just be documented....

Yeah, I hope they add release management for keeping the documentation up to date as well (some day...)

Amm0 · Thu Dec 02, 2021 7:33 pm

Another potential bug, when upgrading from V7.1rc7, all roads lead to v7.1 [.0].

Is upgrading to V7 a one-way road? Since I don't have any V6 downgrade options anymore...e.g. selecting "long-term", "stable", and "testing" all seem to want to use v7.1). Selecting "development" reports "file not found".

Or, and maybe this is documented, but can you still use upload the V6 packages to file system to downgrade it – or is netinstall required to downgrade?

tpedko · Thu Dec 02, 2021 7:40 pm

(SUP-61733) socks 5 does not work with authorization.

osc86 · Thu Dec 02, 2021 7:42 pm

/routing/pimsm/igmp-interface-template> print

error - contact MikroTik support and send a supout file (3)
Please give us an update on the current development status of pimsm.

tpedko · Thu Dec 02, 2021 7:48 pm

Add BGP snmp mib to get BGP session status!

theosoft · Thu Dec 02, 2021 8:15 pm

RB5009:
Still missing.
- Repartitioning
- Container package
- RoMon. RB5009 not discovered ...
regards

emils · Thu Dec 02, 2021 8:23 pm

We know you guys are as much hyped as we are for this release! As much as we appreciate your passion about your particular needs and bugs fixed as soon as possible, note that RouterOS v7 is still actively being developed in most parts and is not a direct replacement for RouterOS v6 yet. We highly value every feedback received and can assure you that every single post you make in RouterOS version release topics is read by MikroTik staff and taken in account.

dapilori90 · Thu Dec 02, 2021 8:35 pm

After upgrading my RB4011 home router, SSH sessions to remote servers don't work. To make them work again, I have to set on the SSH client another IPQoS (e.g. cs1). Is it normal?

pe1chl · Thu Dec 02, 2021 8:39 pm

After upgrading my RB4011 home router, SSH sessions to remote servers don't work. To make them work again, I have to set on the SSH client another IPQoS (e.g. cs1). Is it normal?

That is an interesting observation - it may be related to a problem I have reported to MikroTik before. Did you get this issue after upgrade for sure? Or could it have been introduced by another change? And what was your previous version?

pe1chl · Thu Dec 02, 2021 8:41 pm

We know you guys are as much hyped as we are for this release! As much as we appreciate your passion about your particular needs and bugs fixed as soon as possible, note that RouterOS v7 is still actively being developed in most parts and is not a direct replacement for RouterOS v6 yet. We highly value every feedback received and can assure you that every single post you make in RouterOS version release topics is read by MikroTik staff and taken in account.

You should put that in the release notes / what's new message shown on package upgrade!
That is what people read who try a testing version upgrade...

Sit75 · Thu Dec 02, 2021 8:41 pm

WIRELESS
----------------------
!) completely new alternative wireless package "wifiwave2" with 802.11ac Wave2, WPA3 and 802.11w management frame protection support (requires ARM CPU and 256MB RAM);
----------------------

I have hAP ac^2 with 256 MB RAM as mentioned and required. But I still can not install due to bulky wifi wave2 installation file. :-)

Amm0 · Thu Dec 02, 2021 9:06 pm

We know you guys are as much hyped as we are for this release! As much as we appreciate your passion about your particular needs and bugs fixed as soon as possible, note that RouterOS v7 is still actively being developed in most parts and is not a direct replacement for RouterOS v6 yet. We highly value every feedback received and can assure you that every single post you make in RouterOS version release topics is read by MikroTik staff and taken in account.
You should put that in the release notes / what's new message shown on package upgrade!
That is what people read who try a testing version upgrade...

Totally don't want to mare the accomplishments in V7 and no doubt the long push it's taken on Mikrotik's end – easy to write about a problem, it's much hard to fix the code.

But have to agree with @pe1chl commentary. On my end, we've had a laundry list of "little" V7 quirks we've "queued up" in our testing, hoping they'd be fixed before shipping & not wanting to bug when it was clear there was a lot of work still to do on V7 and/or obvious. Most issues on that list, have in fact been fixed over time. But since it looks like that getting pretty close, been following this advice to report still unaddressed issues:

Due to the fact that we have made a huge progress in RouterOS v7 stability, we have decided to release it in the testing channel. Please test it where you can and report your feedback on this forum page or send an e-mail to support@mikrotik.com.

Clearly lots of folks with feedback. But if you're not looking for it – don't say to try it... Or, if you ask people to "test it", then knowing what's NOT expected to work is extremely helpful. And, without complete documentation, it's very hard to separate a missing feature from a bug. Your V6 docs while terse are generally extremely accurate, and quickly fixed if not.

Still great progress on V7 – just the communication could be improved is my main point.

honzam · Thu Dec 02, 2021 9:11 pm

CAPsMAN does not support WW2 at the moment.
Note that WW2 is planned for future devices, that's why there are additional requirements in terms of hardware.

We need some outdoor equipment that will be supported. rb922 and rbM11 are unfortunately not supported :(

dapilori90 · Thu Dec 02, 2021 9:13 pm

That is an interesting observation - it may be related to a problem I have reported to MikroTik before. Did you get this issue after upgrade for sure? Or could it have been introduced by another change? And what was your previous version?

Yes, the issue is 100% related to upgrade, from version 6.49.1 to 7.1. I didn't change any setting after the upgrade.

Grant · Thu Dec 02, 2021 9:19 pm

openvpn client didn’t work and openvpn client doesn’t work

scampbell · Thu Dec 02, 2021 9:26 pm

I am still seeing this issue on an older Powerbox - "Failed to upgrade poe FW on /dev/poe, diag code -778/0"

Is this a bug or simply unsupported H/W please ??

theosoft · Thu Dec 02, 2021 9:30 pm

note that RouterOS v7 is still actively being developed in most parts and is not a direct replacement for RouterOS v6 yet.

Don't take me wrong, but this has to be said clearly for RB5009, because there is no 6.x Version ...
I have bought this device because of the the docker feature for a container with statefull DHCPv6.
But ok. I don't use it for my network yet ...

regards

Grant · Thu Dec 02, 2021 9:36 pm

low download speed on wi-fi
hap ac2

hecatae · Thu Dec 02, 2021 9:37 pm

WiFi devices with at least 256MB RAM:
hAP ac3
Audience
Chateau
RB4011
SXTsq 5 ac
LDF 5 ac
DISC Lite5 ac
LHG XL 5 ac
NetMetal ac²
Cube 60G ac

I'm not sure there's that many missing, apart from cAP ac and wAP ac, and hAP ac2?
No, read the requirements more carefully (from the help site):

Requirements

The wifiwave2 package is compatible with IPQ4019 and QCA9984 wireless interfaces and is only available for ARM builds of RouterOS v7. It also requires 14MB of free space and at least 256MB of RAM.

As of the release of RouterOS 7.1, this means it is compatible with 4 devices:

hAP ac³ (non-LTE)
Audience*
Audience LTE6 kit*
RB4011iGS+5HacQ2HnD**

* The wifiwave2 package is not compatible with CAPsMAN. And does not yet offer wireless meshing (4-address mode).

** The 2.4GHz wireless interface on the RB4011iGS+5HacQ2HnD is not compatible with the wifiwave2 package. It will not be usable with the package installed.

Calling the RB4011 compatible is a bit stressing the reality, I think. So that leaves only hAP ac3 and Audience.

Well that's one way to disappoint the Chateau owners.

soheilsh · Thu Dec 02, 2021 9:59 pm

(SUP-61733) socks 5 does not work with authorization.

My goodness. Finally someone seems like has problem with socks5 like me.

Cha0s · Thu Dec 02, 2021 10:15 pm

Please add:

- "Old style" routing filters add (like v6), not only syntax

- BFD (for OSPF and BGP)

- MPLS Fast-Path

- BGP session show number of prefix

Thanks MK.

++

Also /routing/bgp/advertisements is not implemented yet :(

SirPrikol · Thu Dec 02, 2021 10:53 pm

Unfortunately, neither BGP settings nor filters are converted to ROSv7

Amm0 · Thu Dec 02, 2021 10:56 pm

No, read the requirements more carefully (from the help site):

Requirements

The wifiwave2 package is compatible with IPQ4019 and QCA9984 wireless interfaces and is only available for ARM builds of RouterOS v7. It also requires 14MB of free space and at least 256MB of RAM.

As of the release of RouterOS 7.1, this means it is compatible with 4 devices:

hAP ac³ (non-LTE)
Audience*
Audience LTE6 kit*
RB4011iGS+5HacQ2HnD**

* The wifiwave2 package is not compatible with CAPsMAN. And does not yet offer wireless meshing (4-address mode).

** The 2.4GHz wireless interface on the RB4011iGS+5HacQ2HnD is not compatible with the wifiwave2 package. It will not be usable with the package installed.

Calling the RB4011 compatible is a bit stressing the reality, I think. So that leaves only hAP ac3 and Audience.
Well that's one way to disappoint the Chateau owners.

Or the cAP ac XL buyers.

Apparently at least 17,000+ people just "want to believe":

YouTube

Thu Dec 02, 2021 11:12 pm

Unfortunately, neither BGP settings nor filters are converted to ROSv7

Routing config cannot be upgraded if any other older v7 version was already installed previously. Config is converted only once.

SirPrikol · Thu Dec 02, 2021 11:25 pm

Routing config cannot be upgraded if any other older v7 version was already installed previously. Config is converted only once.

Yes, for the first time these devices were updated from 6.48.5 long-term to ROSv7.1 (testing), BGP parameters were not converted on any device, and also, when trying to register them, the devices simply stopped responding, did not hang, namely did not accept either template or peer

Amm0 · Thu Dec 02, 2021 11:39 pm

Now on the Audience, with "WW2", no queues, etc. at open ~5 meters.

This is what Ookla reports with wifiwave2 on Audience:

UDP with iperf3 looks like rate is closer to 200Mbs:

➜  ~ iperf3 -u -b 200M -c iperf.scottlinux.com
Connecting to host iperf.scottlinux.com, port 5201
[  7] local 192.168.0.249 port 62324 connected to 45.33.39.39 port 5201
[ ID] Interval           Transfer     Bitrate         Total Datagrams
[  7]   0.00-1.00   sec  23.8 MBytes   200 Mbits/sec  17255  
[  7]   1.00-2.00   sec  23.8 MBytes   200 Mbits/sec  17267  
[  7]   2.00-3.00   sec  23.7 MBytes   199 Mbits/sec  17163  
[  7]   3.00-4.00   sec  21.7 MBytes   182 Mbits/sec  15697  
[  7]   4.00-5.00   sec  24.4 MBytes   204 Mbits/sec  17654  
[  7]   5.00-6.00   sec  25.1 MBytes   210 Mbits/sec  18167  
[  7]   6.00-7.00   sec  23.9 MBytes   201 Mbits/sec  21984  
[  7]   7.00-8.00   sec  15.7 MBytes   132 Mbits/sec  18162  
[  7]   8.00-9.00   sec  27.3 MBytes   229 Mbits/sec  22112  
[  7]   9.00-10.00  sec  25.8 MBytes   216 Mbits/sec  89795  
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Jitter    Lost/Total Datagrams
[  7]   0.00-10.00  sec   235 MBytes   197 Mbits/sec  0.000 ms  0/255256 (0%)  sender
[  7]   0.00-10.26  sec   219 MBytes   179 Mbits/sec  0.060 ms  51430/210322 (24%)  receiver

iperf Done.
➜  ~ iperf3 -u -b 100M -c iperf.scottlinux.com
Connecting to host iperf.scottlinux.com, port 5201
[  7] local 192.168.0.249 port 64466 connected to 45.33.39.39 port 5201
[ ID] Interval           Transfer     Bitrate         Total Datagrams
[  7]   0.00-1.00   sec  11.9 MBytes  99.9 Mbits/sec  8628  
[  7]   1.00-2.00   sec  11.9 MBytes   100 Mbits/sec  8634  
[  7]   2.00-3.00   sec  11.9 MBytes   100 Mbits/sec  8634  
[  7]   3.00-4.00   sec  11.6 MBytes  97.4 Mbits/sec  8409  
[  7]   4.00-5.00   sec  12.2 MBytes   103 Mbits/sec  8859  
[  7]   5.00-6.00   sec  11.9 MBytes   100 Mbits/sec  8635  
[  7]   6.00-7.00   sec  11.9 MBytes   100 Mbits/sec  8634  
[  7]   7.00-8.00   sec  11.9 MBytes   100 Mbits/sec  8635  
[  7]   8.00-9.00   sec  11.9 MBytes   100 Mbits/sec  8634  
[  7]   9.00-10.00  sec  11.9 MBytes   100 Mbits/sec  8633  
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bitrate         Jitter    Lost/Total Datagrams
[  7]   0.00-10.00  sec   119 MBytes   100 Mbits/sec  0.000 ms  0/86335 (0%)  sender
[  7]   0.00-10.04  sec   119 MBytes  99.3 Mbits/sec  0.126 ms  241/86334 (0.28%)  receiver

So some reason to believe. Pretty sure 40Mhz, different channel be better, etc. – only change I made was to disallow DFS channels.

And also "believe" one of the new queue methods would push that higher - just hard to know which CAKE and/or fq_codel features are working yet...so haven't tried those with WW2.

So WW2 certainly functional in my testing. Just limited in usefulness at this point, since the Audience isn't our normal platform.

fragtion · Thu Dec 02, 2021 11:42 pm

Does this mean there will be no more rc releases for the time being? I want my router to be on the most updated/experimental v7 channel. Is that development or testing? If I upgrade to 7.1 testing, will next release be in testing or development branch? Thanks

infabo · Thu Dec 02, 2021 11:45 pm

well done mikrotik.

infabo · Thu Dec 02, 2021 11:49 pm

CAPsMAN does not support WW2 at the moment.
Note that WW2 is planned for future devices, that's why there are additional requirements in terms of hardware.
What about the cAP XL ac, it was lauched months ago, after the wifiwave2 was around?

the future from now on. cap xl ac was not a future device. it was just a XL version of some old existing model.

volkirik · Thu Dec 02, 2021 11:55 pm

Unfortunately, neither BGP settings nor filters are converted to ROSv7
Routing config cannot be upgraded if any other older v7 version was already installed previously. Config is converted only once.

nonsense. nonreasonable.

dakobg · Thu Dec 02, 2021 11:56 pm

hap ac2 free space

I install tr069 and zerotier with 7.1 and the free space epically "die" go to 2% free from 7% free before.
My question is ..

1. any concern for just routeros pkg it self to grow so much that the older devices like hap ac2 to not be able to upgrade during lack of free space ?
2. hap ac2 have a usb, it is possible to utilize usb stick for pkg install ?

About point 2, It is really risky since usb stick are not very robust ( ubiquiti have a different opinion about using usb stick for os boot :D ) but still will be a option for older devices in future .

I don't care a lot for other pkg but zerotier .. from other side I don't want to leave hap ac2 free space on the edge for it

Also this will solve wifiwave2 pkg's size if in some point magically start to support IPQ-4018 :)

Other topic .. what is the problem with BFD and ros 7 ? something to implementation related or is with low priority in development ?

rushlife · Thu Dec 02, 2021 11:58 pm

already installed on bunch of my devices, so far so good

on this devices i can confirm non problem installation
rb3011
cap ac
cap ac xl
crs112
crs305
crs318
rb5009
rb metal 5SHPn
rb wsap
hap ac2
hap ac3
ccr1009
ccr1036
RBD52G

mozerd · Fri Dec 03, 2021 12:02 am

Upgraded my CCR1009 and my CRS326 from 6.49.1 to 7.1

Both upgraded without issue …. CCR1009 upgrade was amazingly fast - under 1 minute … CRS326 was amazingly slow to upgrade-close to 4 minutes

so far very pleased that all my stuff is working well.

felixka · Fri Dec 03, 2021 12:06 am

After upgrading my RB4011 home router, SSH sessions to remote servers don't work. To make them work again, I have to set on the SSH client another IPQoS (e.g. cs1). Is it normal?

I have a ticket open regarding this: SUP-63430
Support is saying they cannot reproduce it.
My debugging so far tells me this has something to do with the DSCP value of packets as there are a number of devices in my house that start to fail when this bug is present. These are mostly VoIP and Video Conferencing devices that use non-default DSCP values.
I have an Excel sheet of the DSCP values that work and the DSCP values that don't that I have provided to support.
The bug appears (on my device) when the Internet connection is a PPPoE connection that sits on top of a VLAN interface. The problem goes away if I create a bridge and let it handle the VLAN tagging by placing only the ether1 interface, which is connected to my ISP's ONT, as tagged onto the bridge and then point the PPPoE interface to that bridge. Note that you will lose hardware acceleration on that particular interface for this bridge then if you set it up that way.
The problem also goes away when letting an external switch handle the VLAN tagging.
Since support cannot reproduce the problem and I have given them all the detailed information about my findings on both RB5009 and RB4011 I was able to dig up, I have decided to no longer pursue a fix for this bug and stick to the workaround using the bridge, as I don't think it is worth my time at this point.

I think it may be related to the problem that people are seeing with using a DHCPv6 client on top of a PPPoE connection that requires VLAN tagging.

Feel free to open a ticket with support and reference my ticket number above. Maybe the scenario you have is easier for them to reproduce than mine.

tesme33 · Fri Dec 03, 2021 12:15 am

hAP Lite stuck in "calculating download size..." since hours.
A reboot didnt help.

Current packages

[admin@MikroTik] /system package> print 

Flags: X - disabled 

 #   NAME                                                   VERSION                                                  SCHEDULED               

 0   ipv6                                                   6.49.1                                                                           

 1   dhcp                                                   6.49.1                                                                           

 2   advanced-tools                                         6.49.1                                                                           

 3   system                                                 6.49.1                                                                           

 4   routing                                                6.49.1                                                                           

 5   multicast                                              6.49.1                                                                           

 6   security                                               6.49.1                                                                          

 7   wireless                                               6.49.1

pe1chl · Fri Dec 03, 2021 12:29 am

After upgrading my RB4011 home router, SSH sessions to remote servers don't work. To make them work again, I have to set on the SSH client another IPQoS (e.g. cs1). Is it normal?
I have a ticket open regarding this: SUP-63430
Support is saying they cannot reproduce it.
My debugging so far tells me this has something to do with the DSCP value of packets as there are a number of devices in my house that start to fail when this bug is present. These are mostly VoIP and Video Conferencing devices that use non-default DSCP values.

I have a ticket open for DSCP trouble on the RB4011 as well! It is SUP-64360. I thought it is related to the complicated stack of interfaces, just like yours: internet connection via PPPoE over 802.1p/q VLAN (where I use DSCP to set the 802.1p priority for use by my VDSL modem), then on that internet connection I use GRE/IPsec tunnels with "inherit DSCP", now certain DSCP values in traffic are dropped. I can work around the problem by resetting DSCP to zero at the end of the mangling.

I encountered this problem under 6.48 when I moved my config from an RB2011 to a RB4011. Exactly the same config exported/imported. Went back to the 2011 (exported and imported config again) and it worked OK. Upgrade to v7 did not solve the issue.

Reading what you write above, it appears to be the same bug! Affects the RB4011 under 6.x and 7.x, does not affect the RB2011 and likely also not the TILE and MMIPS architectures as I use similar setups on routers of those architectures and I never encountered a problem.

It seems to be an architecture bug (endianness, alignment, compiler bug, ...) not a v7.1 bug.

brg3466 · Fri Dec 03, 2021 12:31 am

I really wish there was a wifiwave2 "light" package to be installed on early hap ac2 revisions with 256 MB RAM. Free disk space is the only thing preventing it.

+1

I have cAP ac with 256M RAM but only 16M storage, so I cannot use ww2.

dakobg · Fri Dec 03, 2021 12:40 am

mAP lite 7.1 :)

[admin@rw01] > /system/resource/print 
                   uptime: 4m48s
                  version: 7.1 (testing)
               build-time: Dec/01/2021 14:07:27
              free-memory: 24.7MiB
             total-memory: 64.0MiB
                      cpu: MIPS 24Kc V7.4
                cpu-count: 1
            cpu-frequency: 650MHz
                 cpu-load: 9%
           free-hdd-space: 4000.0KiB
          total-hdd-space: 16.0MiB
  write-sect-since-reboot: 54
         write-sect-total: 4664
               bad-blocks: 0%
        architecture-name: mipsbe
               board-name: mAP lite
                 platform: MikroTik

jookraw · Fri Dec 03, 2021 12:41 am

My hAP ac2 that I use as ap after the upgrade from 7.1rc7 now fowards every single vlan traffic to the wireless interfaces

pe1chl · Fri Dec 03, 2021 12:45 am

hAP Lite stuck in "calculating download size..." since hours.
A reboot didnt help.

You will have to netinstall it. Upgrading from separate packages (not the bundled package) to v7 (or to v6.xx bundled package, for that matter) does not work on small devices!

edward0488 · Fri Dec 03, 2021 12:46 am

will this release can solved MikroTik support #[SUP-66821]: RB5009UG+S+IN randomly reboot when 100+ pppoe user is connected ?

pe1chl · Fri Dec 03, 2021 12:50 am

My hAP ac2 that I use as ap after the upgrade from 7.1rc7 now fowards every single vlan traffic to the wireless interfaces

How did you configure that? There are of course several ways to do it. I think configuring the vlan in the wireless interface settings is being deprecated.
I use a vlan-filtering bridge with the wifi interfaces as untagged ports on the VLANs and the appropriate PVID and the ports. It appears to work.

jookraw · Fri Dec 03, 2021 1:23 am

My hAP ac2 that I use as ap after the upgrade from 7.1rc7 now fowards every single vlan traffic to the wireless interfaces
How did you configure that? There are of course several ways to do it. I think configuring the vlan in the wireless interface settings is being deprecated.
I use a vlan-filtering bridge with the wifi interfaces as untagged ports on the VLANs and the appropriate PVID and the ports. It appears to work.

I use the hAP ac2 as a switch as well, but, I cannot use vlan-filtering because my IPTV traffic will not work properly (it pass through it), so I've configured each wlan interface with

vlan-id=110 vlan-mode=use-tag

It was working perfectly before the last upgrade. after the upgrade, now I see all vlans being send in the "air" even the fat IPTV one that made some devices really confused...

cklee234 · Fri Dec 03, 2021 2:36 am

Interesting, after upgrade to 7.1, all the channels say latest are 7.1. No more 6.49.1

Halfeez92 · Fri Dec 03, 2021 3:06 am

Doest this testing version fix the DHCP-PD over PPPoE VLAN interface?

dksoft · Fri Dec 03, 2021 6:05 am

Doest this testing version fix the DHCP-PD over PPPoE VLAN interface?

No, RB5009 fails. CCR2004 works.

Amm0 · Fri Dec 03, 2021 6:16 am

> !) support for VRRP grouping and connection tracking data synchronization between nodes;

Can anyone shape a example (may be config) that features?

A lot of the V7 stuff is in the the newer help.mikrotik.com site, than the now older wiki, including VRRP:
https://help.mikrotik.com/docs/display/ROS/VRRP

The "additional footnotes" for VRRP support in V7 is here:
viewtopic.php?p=855246&hilit=connection ... rp#p855246

Summary is a one-way sync from master to backup – and you can no longer use preemption mode if you use. Not tested the connection tracking part, but VRRP has been stable for us in V7 for some time.

killersoft · Fri Dec 03, 2021 7:43 am

7.1 Installed(updated) ok on x86(test) and on RBcAPGi-5acD2nD.

MACSec/802.11AE still not working....

tesme33 · Fri Dec 03, 2021 8:09 am

hAP Lite stuck in "calculating download size..." since hours.
A reboot didnt help.
You will have to netinstall it. Upgrading from separate packages (not the bundled package) to v7 (or to v6.xx bundled package, for that matter) does not work on small devices!

Hi
thanks for the hint. As the system is not easy to reach i will prepare a replacement hAP Lite and replace it once i go there.
Im wondering why the upgrade is then offered ? It should not be offered at all then.

Reason why i have not the full package is that i had upgrade issues here and there and by limiting the amount of packages i had continues succcess. Lets see how this goes with version 7.x if we only have a full package.

MadEngineer · Fri Dec 03, 2021 8:20 am

2011UiAS-2HnD here, all ports 6-10 are now only negotiate at 100mbit.

Znevna · Fri Dec 03, 2021 8:26 am

Those ports are 100Mbps by design, they always were 100Mbps.

MadEngineer · Fri Dec 03, 2021 8:46 am

Right you are, strange ... someone must be playing tricks on me and swapped some cables around :)

Jotne · Fri Dec 03, 2021 8:54 am

Im wondering why the upgrade is then offered ? It should not be offered at all then.

This is why you should before upgrade.
1. Read forum carefully.
2. Install on a test device equal to the remote device.
3. Wait some weeks after new software is released to make sure there are no mayor hicups.
4. Read title of this thread

v7.1 [testing] is released!

Jotne · Fri Dec 03, 2021 9:01 am

2011UiAS-2HnD here, all ports 6-10 are now only negotiate at 100mbit.

Port 1-5 are gigabit
Port 6-10 are 100 MB

See picture:

2011.png

zandhaas · Fri Dec 03, 2021 9:11 am

hAP Lite stuck in "calculating download size..." since hours.
A reboot didnt help.
You will have to netinstall it. Upgrading from separate packages (not the bundled package) to v7 (or to v6.xx bundled package, for that matter) does not work on small devices!

You have to download the package yourself and upload it to your HAP and then reboot.

mkx · Fri Dec 03, 2021 9:15 am

Reading what you write above, it appears to be the same bug! Affects the RB4011 under 6.x and 7.x, does not affect the RB2011 and likely also not the TILE and MMIPS architectures as I use similar setups on routers of those architectures and I never encountered a problem.

It seems to be an architecture bug (endianness, alignment, compiler bug, ...) not a v7.1 bug.

Or perhaps problem in how ROS configures RTL8367 switch chip? Handling of switch chip has been vastly improved in v7 (previously that switch chip was next to useless as a piece of hardware), but it's likely there's room for improvement.

huntermic · Fri Dec 03, 2021 9:18 am

Doest this testing version fix the DHCP-PD over PPPoE VLAN interface?
No, RB5009 fails. CCR2004 works.

Yep, still a problem on the RB5009

rushlife · Fri Dec 03, 2021 9:23 am

first problem by me, on ccr1036 suddenly high cpu usage
no traffic at all, after restart it's good so far

Znevna · Fri Dec 03, 2021 9:27 am

And you didn't think to check the profiler to see what was actualy eating the CPU, did you?
And to see which of the IRQs were used that much..

mkamenjak · Fri Dec 03, 2021 9:38 am

So, are we gonna see 7.x in a stable channel by the end of q1 2022?
I am not meaning that it will be actually stable, just released in a 'stable' channel.

pe1chl · Fri Dec 03, 2021 11:04 am

You will have to netinstall it. Upgrading from separate packages (not the bundled package) to v7 (or to v6.xx bundled package, for that matter) does not work on small devices!
You have to download the package yourself and upload it to your HAP and then reboot.

That would be the method that should work, but it doesn't. It works only on devices with more than 16MB Flash. Reported to MikroTik some time ago, they would investigate. But to fix it, they would first have to release a new 6.49.x version that includes the fix and that you could install as an upgrade, and only then the upgrade to a combined package (and thus also to v7.1) would succeed.
For now, you need to netinstall.

pe1chl · Fri Dec 03, 2021 11:08 am

No, RB5009 fails. CCR2004 works.
Yep, still a problem on the RB5009

This could be related to the issue with DSCP in combination with PPPoE over VLAN described above.
For me, the DCHPv6-PD over PPPoE over VLAN works, on a RB4011. But DSCP-marked traffic over PPPoE over VLAN (certain DSCP values) does not.
Maybe in your case the DHCPv6-PD traffic (I think that also has a DSCP marking by default) falls victim to that.
This problem appears to occur only in the ARM architecture, I bet that when you copy your entire config to a RB2011 or CCR1009 it will work just fine.

Fri Dec 03, 2021 11:10 am

So, are we gonna see 7.x in a stable channel by the end of q1 2022?
I am not meaning that it will be actually stable, just released in a 'stable' channel.

which version is actually stable, from all RouterOS versions?

soheilsh · Fri Dec 03, 2021 11:14 am

So, are we gonna see 7.x in a stable channel by the end of q1 2022?
I am not meaning that it will be actually stable, just released in a 'stable' channel.
which version is actually stable, from all RouterOS versions?

hi mr normis
please fix socks5 in ros7.1 and ros7-rc7
now currently just socks4 and webproxy working in ros7
viewtopic.php?t=180440

mkamenjak · Fri Dec 03, 2021 11:24 am

So, are we gonna see 7.x in a stable channel by the end of q1 2022?
I am not meaning that it will be actually stable, just released in a 'stable' channel.
which version is actually stable, from all RouterOS versions?

6.48.4 and 6.47.10 were rock solid for me. Credit where credit is due. You at MIkrotik do make nice equipment for cheap, despite the occasional problem.

mhugo · Fri Dec 03, 2021 11:55 am

which version is actually stable, from all RouterOS versions?

7.1 has been stable since yesterday for me on several boxes :)

6.49.x works great on all but 2004s for me and so has many previous versions.

Stable should probably be called latest or something like that.

pe1chl · Fri Dec 03, 2021 11:55 am

It seems to be an architecture bug (endianness, alignment, compiler bug, ...) not a v7.1 bug.
Or perhaps problem in how ROS configures RTL8367 switch chip? Handling of switch chip has been vastly improved in v7 (previously that switch chip was next to useless as a piece of hardware), but it's likely there's room for improvement.

The problem occurs in v6 as well. But you are right, it could be in the switch chip. I have no explicit config for it, I run a vlan-aware bridge on ports 2-10 and have ether1 outside of that bridge, a VLAN stacked on top of that, and PPPoE on that.
But when RouterOS internally uses VLAN to separate that port 1 from the others, there are two stacked VLAN headers and maybe that is where it goes wrong.
(that would mean there is some DSCP snooping going on in the switch chip, but that could well be part of the functionality)

Maybe the workaround described above of doing the VLAN tagging via the bridge is a hint in this direction.
Unfortunately I cannot do that as I require both VLAN-tagged traffic (the PPPoE traffic) and untagged traffic (to monitor the modem) on the same port.

joedoelv · Fri Dec 03, 2021 12:48 pm

No, RB5009 fails. CCR2004 works.
Yep, still a problem on the RB5009

Workaround to put VLAN interface over switch instead of dedicated port is working.

patrick7 · Fri Dec 03, 2021 1:40 pm

Any news about LoRa?

biomesh · Fri Dec 03, 2021 2:14 pm

On devices with only 16M of flash I always use the minimum packages needed. The upgrade worked on most devices, but any with the wireless package installed it failed with the space error. When the device is wired, this is just an extra reboot to remove the package and reboot then upgrade. For devices that use wireless as their primary connection (like a wireless bridge) this is not so easy. I ended up upgrading a spare device (wired) then reset config to match the other devices and swapped out the device. A netinstall world have worked as well.

The upgrade process needs to be worked on as I am sure people probably want their wireless cpe devices upgraded eventually without requiring a netinstall or hardware swap.

hecatae · Fri Dec 03, 2021 2:28 pm

hAP Lite stuck in "calculating download size..." since hours.
A reboot didnt help.

Current packages

[admin@MikroTik] /system package> print 

Flags: X - disabled 

 #   NAME                                                   VERSION                                                  SCHEDULED               

 0   ipv6                                                   6.49.1                                                                           

 1   dhcp                                                   6.49.1                                                                           

 2   advanced-tools                                         6.49.1                                                                           

 3   system                                                 6.49.1                                                                           

 4   routing                                                6.49.1                                                                           

 5   multicast                                              6.49.1                                                                           

 6   security                                               6.49.1                                                                          

 7   wireless                                               6.49.1

Netinstall is the only way to comfortably upgrade a hAP Lite or Mini for testing purposes.
My RB941s reboot after 24 hours running anything v7, so mine are on long-term.

jvparis · Fri Dec 03, 2021 2:29 pm

I really wish there was a wifiwave2 "light" package to be installed on early hap ac2 revisions with 256 MB RAM. Free disk space is the only thing preventing it.

+1

Also have a hAP ac² with IPQ-4019 (256MB RAM) but only 16MB Flash :(
Really like to use all wireless features of the IPQ-4019 SoC...

pe1chl · Fri Dec 03, 2021 2:41 pm

On devices with only 16M of flash I always use the minimum packages needed. The upgrade worked on most devices, but any with the wireless package installed it failed with the space error.

Nice that you narrowed it down to that! I reported the bug, of course got "we cannot reproduce it", but maybe they tried to reproduce it on a wired device?
I only tried with the wireless package in place, as it was on a wireless AP. Like you, I have converted all devices I manage (with 16MB) to "separate packages" so it would be helpful during the conversion if this was resolved.

felixka · Fri Dec 03, 2021 2:52 pm

This problem appears to occur only in the ARM architecture, I bet that when you copy your entire config to a RB2011 or CCR1009 it will work just fine.

That would have to be both ARM and ARM64 because the RB4011 is 32 bit and the RB5009 is 64 bit.
It would be interesting to see if the CR2004-16G is affected as well then.

redbullsteve · Fri Dec 03, 2021 3:11 pm

Upgraded a number of devices, only issue I can see with our configuration is that RoMON no longer works when you forbid the default rule and the accept rule is a VLAN interface.

Anyone else having issues with RoMON?

elbob2002 · Fri Dec 03, 2021 3:23 pm

hAP Lite stuck in "calculating download size..." since hours.
A reboot didnt help.

Current packages

[admin@MikroTik] /system package> print 

Flags: X - disabled 

 #   NAME                                                   VERSION                                                  SCHEDULED               

 0   ipv6                                                   6.49.1                                                                           

 1   dhcp                                                   6.49.1                                                                           

 2   advanced-tools                                         6.49.1                                                                           

 3   system                                                 6.49.1                                                                           

 4   routing                                                6.49.1                                                                           

 5   multicast                                              6.49.1                                                                           

 6   security                                               6.49.1                                                                          

 7   wireless                                               6.49.1

Netinstall is the only way to comfortably upgrade a hAP Lite or Mini for testing purposes.
My RB941s reboot after 24 hours running anything v7, so mine are on long-term.

The actual issue here is the multicast package. It's from the extras zip. Remove the multicast package and it should upgrade.

7.1 can only be upgraded if no extra packages are installed.

edielson_atm · Fri Dec 03, 2021 3:52 pm

Erro Community Ext Set

osc86 · Fri Dec 03, 2021 3:53 pm

RB951Ui-2HnD (mipsbe) running 6.48.5 is trying to download separate packages instead of bundle package. Tried testing and development channel. Uploading the file manually now.

biomesh · Fri Dec 03, 2021 4:57 pm

I saw my ccr1009 had 95+% utilization on 4 cores (represented as "networking" in the profile tool) and l2tp/ipsec (looked more like an ipsec issue) would not connect as a client. A reboot had everything back to normal.

I did not get a supout.rif, but I will get one if I see the issue again.

carl0s · Fri Dec 03, 2021 5:01 pm

Exciting.
It's a shame wifiwave2 is not ready to be default on all devices yet though. I have wap AC and cAP AC and cAPAC XL everywhere, and I use cAPSMAN as well.

Rfulton · Fri Dec 03, 2021 5:08 pm

PIM-SM interface not showing up on CCR2004.

Works fine on 4011.
_________________________________________________________________

[admin@MikroTik] /routing/pimsm> export
# dec/03/2021 10:06:09 by RouterOS 7.1rc7
# software id = S813-IYL4
#
# model = RB4011iGS+
# serial number = D1270BEDA968
/routing pimsm instance
add disabled=no name=PIM vrf=main
/routing pimsm interface-template
add disabled=no instance=PIM interfaces=Wireguard source-addresses=""

[admin@MikroTik] /routing/pimsm/interface> print
Flags: D - dynamic; P - designated-router; J - join-tracking
0 D instance=PIM address=172.28.0.2%Wireguard

___________________________________________________

[admin@adminTik] /routing/pimsm> export
# dec/03/2021 10:07:20 by RouterOS 7.1
# software id = BB3F-L5VJ
#
# model = CCR2004-1G-12S+2XS
# serial number = D4F10D99618F
/routing pimsm instance
add disabled=no name=PIM vrf=main
/routing pimsm interface-template
add disabled=no instance=PIM interfaces=Wireguard source-addresses=""
[admin@adminTik] /routing/pimsm/interface> print
Flags: D - dynamic; P - designated-router; J - join-tracking

_____________________________________________________

andkar · Fri Dec 03, 2021 5:15 pm

Tried to install 7.1 on wAP R ac r2 with 256MB ram. This AP have 2392 kB free HDD space but got "not enouth space for upgrade".
It's almost as if the installer checks RAM, forgets HDD space and tries to install the new wireless driver.

Installing 7.1 on HAP AC2 128MB with similar HDD space - no problem.

pe1chl · Fri Dec 03, 2021 5:22 pm

Tried to install 7.1 on wAP R ac r2 with 256MB ram. This AP have 2392 kB free HDD space but got "not enouth space for upgrade".

Does it have the separate packages instead of the routeros bundle package with sub-packages under it?
In that case: you need to read the earlier messages in this topic.

andkar · Fri Dec 03, 2021 5:32 pm

Thanks pe1chl, yes separate packages appear to be the case. I have read the eairlier messages about this issue but missed that this AP had separate packages.
I'l give it a new try later.

biomesh · Fri Dec 03, 2021 5:34 pm

Looks like I lost access to SD cards on my CCR1009 with this release. My existing sd card is not visible and a new card is also not visible.

tesme33 · Fri Dec 03, 2021 5:42 pm

Netinstall is the only way to comfortably upgrade a hAP Lite or Mini for testing purposes.
My RB941s reboot after 24 hours running anything v7, so mine are on long-term.
The actual issue here is the multicast package. It's from the extras zip. Remove the multicast package and it should upgrade.

7.1 can only be upgraded if no extra packages are installed.

Hi
i can confirm that this helped.

Thx

dksoft · Fri Dec 03, 2021 5:43 pm

Yep, still a problem on the RB5009
This could be related to the issue with DSCP in combination with PPPoE over VLAN described above.
For me, the DCHPv6-PD over PPPoE over VLAN works, on a RB4011. But DSCP-marked traffic over PPPoE over VLAN (certain DSCP values) does not.
Maybe in your case the DHCPv6-PD traffic (I think that also has a DSCP marking by default) falls victim to that.
This problem appears to occur only in the ARM architecture, I bet that when you copy your entire config to a RB2011 or CCR1009 it will work just fine.

CCR1009, RB4011 also work fine. It’s only on RB5009. As the ccr2004-1g-12s+2xs without a switch chip works fine, I guess it’s more a problem with the RB5009 switch.
It would be interesting how the ccr2004-16g-2s+ works.

aglabs · Fri Dec 03, 2021 6:40 pm

Netflow is still completely unusable (since 7.1 RC 1) viewtopic.php?p=894935 issue is still observed in 7.1 TESTING

pe1chl · Fri Dec 03, 2021 6:59 pm

When PPP or PPPoE interfaces go down and up, the assigned IP address (a D entry in /ip/addresses) gets duplicated. More and more of the same D addresses show up.

Fri Dec 03, 2021 7:01 pm

Where do you see this? If only in winbox then hit F5 to refresh the window.

pe1chl · Fri Dec 03, 2021 7:07 pm

Ok that seems to cure it - but never saw that before. It may be because I am tinkering with the PPPoE setup to investigate bug SUP-64360/SUP-63430.

pe1chl · Fri Dec 03, 2021 7:09 pm

The bug appears (on my device) when the Internet connection is a PPPoE connection that sits on top of a VLAN interface. The problem goes away if I create a bridge and let it handle the VLAN tagging by placing only the ether1 interface, which is connected to my ISP's ONT, as tagged onto the bridge and then point the PPPoE interface to that bridge.

I tried that workaround but it does not seem to solve it for me...
I made the bridge with pvid=6 and vlan6 untagged on the bridge and tagged on the port. It functions as it should, but the problem remains.
So maybe I need more detail...

moep · Fri Dec 03, 2021 7:11 pm

Upgraded several devices (RB4011, RB3011, 2x CRS309, CRS326, CRS305, hAP ac, RB750GL, wAP ac LTE6, CHR, RB1100AH, hEX, hEX-PoE, hAP ac lite, hAP lite, mAP lite, so a great variety of architectures and board types) from 6.48.3 to 7.1. It went well so far as non-advanced setups go.
After upgrading the RB4011 (main central gateway), I have a problem with my dual WAN IPIP over IPSec setup. There are IPIP-Tunnels running inside IPSec, every WAN interface has its own policy template, which results in specific policies for each WAN. The problem seems to be related with which gateway is active in routing table main. When WAN1 (main connection) is active gateway, the IPSec tunnels for WAN1 are working, if WAN2 ist active GW, WAN2 IPSec tunnels are working. If I ping the other side the first Ping still goes through, then timeout. Hence the corresponding IPIP tunnels are also not working.
This setup worked fine for years with v6. In v6 both IPSec and IPIP tunnels could forward traffic simultaneously.
On top of the IPIP Tunnels there is OSPF (v2) running.
I could see that routing filter migration is not doing it correctly yet. If you only had reject rules before, there is no autogenerated accept rule therefore rejecting all routes as the new default is drop/reject. Easily solvable with a new accept rule, but it is annoying.

vaka · Fri Dec 03, 2021 7:14 pm

Connection uptime is nowhere to be found...
Look more more closely, /routing/bgp/session has "uptime" parameter.
And regarding received prefix count, it will be added eventually, but if you really need to see how many prefixes are received then there is a workaround you can /routing/route/print count-only where received-from="...."

It doesn't work.

> /routing/route/print count-only where received-from bgp
0

benkreuter · Fri Dec 03, 2021 7:32 pm

I can confirm that having extra packages installed blocks the upgrade path (CCR1009).

I am noticing some problems with OSPFv3 when link-local addresses are used; routes seem to not be properly installed even though the correct LSAs are exchanged, but when I assign prefixes to the links things become more stable (so far). This appears to be a regression from v6. Strangely, this problem only appears some of the time, which makes for a very confusing situation. Several times I have had to reboot routers before things work.

I would kindly request that more attention be devoted to the state of routing protocols; OSPF still needs work and the lack of BFD support is a big headache. Also if at all possible we need better documentation, it is pretty hard to figure out what might be wrong after the upgrade (crossfig is helpful but not perfect).

dapilori90 · Fri Dec 03, 2021 8:23 pm

I have a ticket open regarding this: SUP-63430
Support is saying they cannot reproduce it.
My debugging so far tells me this has something to do with the DSCP value of packets as there are a number of devices in my house that start to fail when this bug is present. These are mostly VoIP and Video Conferencing devices that use non-default DSCP values.
I have an Excel sheet of the DSCP values that work and the DSCP values that don't that I have provided to support.
The bug appears (on my device) when the Internet connection is a PPPoE connection that sits on top of a VLAN interface. The problem goes away if I create a bridge and let it handle the VLAN tagging by placing only the ether1 interface, which is connected to my ISP's ONT, as tagged onto the bridge and then point the PPPoE interface to that bridge. Note that you will lose hardware acceleration on that particular interface for this bridge then if you set it up that way.
The problem also goes away when letting an external switch handle the VLAN tagging.
Since support cannot reproduce the problem and I have given them all the detailed information about my findings on both RB5009 and RB4011 I was able to dig up, I have decided to no longer pursue a fix for this bug and stick to the workaround using the bridge, as I don't think it is worth my time at this point.

I think it may be related to the problem that people are seeing with using a DHCPv6 client on top of a PPPoE connection that requires VLAN tagging.

Feel free to open a ticket with support and reference my ticket number above. Maybe the scenario you have is easier for them to reproduce than mine.

Thanks! I changed my configuration with the bridge, and this issue is fixed. I remark that I didn't have this problem with any 6.x release, so, at least for my case, it is a "v7" only bug. Nevertheless, I opened a support ticket, attaching the supout.rif file related to the "old" setup, and referencing your bug report. While I understand that probably the "MikroTik suggested" way to configure is using a bridge instead of a VLAN interface, this is still a big issue, that many other users may experience as well when they upgrade to v7.

wispmikrotik · Fri Dec 03, 2021 8:25 pm

https://help.mikrotik.com/docs/display/ ... col+Status

Some kind of mechanism to import/export routes from one vrf to another within same router. N/A

Please implement a similar route targets from Cisco to VRF-Lite.

Regards,

pe1chl · Fri Dec 03, 2021 8:55 pm

Thanks! I changed my configuration with the bridge, and this issue is fixed.

Did you put your PPPoE VLAN on the same bridge as your LAN? I made a new bridge with only ether1 as a port, and experimented with some different
setups:
1. bridge without VLAN filtering, VLAN subinterface on top of the bridge
2. same with VLAN filtering (bridge and port both configured as tagged for the VLAN)
3. bridge with VLAN filtering and native VLAN set, port as tagged for the VLAN, bridge as untagged (no VLAN subinterface)
All 3 of them were functional, but none solved my issue. So I am interested in what setup is working for you...

dapilori90 · Fri Dec 03, 2021 9:46 pm

Did you put your PPPoE VLAN on the same bridge as your LAN?

No, I created a new bridge. This is part of my configuration:

/interface bridge
add name=bridge-lan
add name=bridge-wan pvid=835 vlan-filtering=yes
/interface pppoe-client
add add-default-route=yes disabled=no interface=bridge-wan name=pppoe0 user=username
/interface bridge port
add bridge=bridge-lan ingress-filtering=no interface=ether2
add bridge=bridge-lan interface=wifi1
add bridge=bridge-wan interface=ether1
/interface bridge vlan
add bridge=bridge-wan tagged=ether1 untagged=bridge-wan vlan-ids=835

pe1chl · Fri Dec 03, 2021 9:51 pm

Ok thanks, that is like my option 3 above. It worked but I still had my DSCP-dependent issues.
One thing is that I had an extra VLAN on the bridge that is untagged on ether1 and tagged on the bridge, to be able to access the modem which has its management interface untagged on the ethernet port. I will try again without that to see if there is any difference.

vaka · Fri Dec 03, 2021 11:34 pm

Look more more closely, /routing/bgp/session has "uptime" parameter.
And regarding received prefix count, it will be added eventually, but if you really need to see how many prefixes are received then there is a workaround you can /routing/route/print count-only where received-from="...."

It doesn't work.
Code: Select all
> /routing/route/print count-only where received-from bgp
0

It doesn't work at all

> /routing/route/print count-only where received-from static 
0

> /routing/route/print count-only where received-from dhcp
0

Sat Dec 04, 2021 12:08 am

If you want to print static routes then: /routing/route/print count-only where static
the same for bgp, dhcp and so on.

ffries · Sat Dec 04, 2021 12:17 am

I can report that those devices work well:
CCR2004-1G-12S-2XS
CRS312-4c-8xg-rm

slaz · Sat Dec 04, 2021 3:00 am

Did anyone try to use capmans on v7.1? I am trying to get it working but with no joy. Have v7.1 on router

system/resource/print  
                   uptime: 5h36m25s
                  version: 7.1 (testing)
               build-time: Dec/01/2021 14:07:27
         factory-software: 7.0.4
              free-memory: 812.5MiB
             total-memory: 1024.0MiB
                cpu-count: 4
            cpu-frequency: 1400MHz
                 cpu-load: 3%
           free-hdd-space: 991.6MiB
          total-hdd-space: 1025.0MiB
  write-sect-since-reboot: 2183
         write-sect-total: 3004
               bad-blocks: 0%
        architecture-name: arm64
               board-name: RB5009UG+S+
                 platform: MikroTik

and I have 2 cAP's connected ( one is v7.1 and one is 6.48.3)

Screenshot 2021-12-04 025313.png

Screenshot 2021-12-04 025533.png

Now, on the caps I can see the interfaces and what I privisioned

Screenshot 2021-12-04 025716.png

But for some reason I can't get them to have the radio up ( meaning I can't see the ssid from wifi devices).
Now, I can do a scan of the networks on the CAP from the router and that tells me that CAP has some configuration.

Screenshot 2021-12-04 025953.png

Does anyone have any suggestion on this? It will be greatly appreciated

kometchtech · Sat Dec 04, 2021 5:31 am

I saw my ccr1009 had 95+% utilization on 4 cores (represented as "networking" in the profile tool) and l2tp/ipsec (looked more like an ipsec issue) would not connect as a client. A reboot had everything back to normal.

I did not get a supout.rif, but I will get one if I see the issue again.

無題.png

I am also seeing the same problem.
In my environment, restarting CCR1009 did not improve the CPU usage.

Sob · Sat Dec 04, 2021 5:57 am

I found one quick and simple router killer, tested with clean CHR, first boot, log in, change password when prompted, then enter this:

interface/6to4/add name=6to4
ipv6/address/add interface=6to4 address=2002:101:101::1/16
ping 2002:1::1

and kaboom! There's reboot, sometimes with "Kernel panic - not syncing: System is deadlocked on memory", or VMware Player saing that CPU was disabled by guest. If you like it for the first time, just use the same ping when it boots up again, works reliably every single time. Important part is the 2002::/16 prefix (RFC 3056). And yes, I know it's deprecated, but it's still useful. And it definitely shouldn't cause reboot.

wojo · Sat Dec 04, 2021 6:39 am

Looks like I lost access to SD cards on my CCR1009 with this release. My existing sd card is not visible and a new card is also not visible.

Also lost access to my SD card.

wojo · Sat Dec 04, 2021 6:45 am

I saw my ccr1009 had 95+% utilization on 4 cores (represented as "networking" in the profile tool) and l2tp/ipsec (looked more like an ipsec issue) would not connect as a client. A reboot had everything back to normal.

I did not get a supout.rif, but I will get one if I see the issue again.
無題.png

I am also seeing the same problem.
In my environment, restarting CCR1009 did not improve the CPU usage.

Same here, I disabled ipsec and some routing filters that were migrated over, and everything is OK for now. Before that a reboot would help for a little, but then the IPSec connection would die and 8 of the 9 cores would be at 100%.

I've moved my IPSec connection to Wireguard and the problem hasn't come back. But clearly there is something wrong I've just been able to avoid it.

kometchtech · Sat Dec 04, 2021 7:09 am

無題.png

I am also seeing the same problem.
In my environment, restarting CCR1009 did not improve the CPU usage.

Same here, I disabled ipsec and some routing filters that were migrated over, and everything is OK for now. Before that a reboot would help for a little, but then the IPSec connection would die and 8 of the 9 cores would be at 100%.

I've moved my IPSec connection to Wireguard and the problem hasn't come back. But clearly there is something wrong I've just been able to avoid it.

If I could migrate my entire environment to WireGuard, that would certainly solve the problem.
But circumstances make it difficult to migrate all IPsec connections to WG right away.

However, it is worth considering moving to WG earlier in the schedule.

wojo · Sat Dec 04, 2021 7:43 am

Same here, I disabled ipsec and some routing filters that were migrated over, and everything is OK for now. Before that a reboot would help for a little, but then the IPSec connection would die and 8 of the 9 cores would be at 100%.

I've moved my IPSec connection to Wireguard and the problem hasn't come back. But clearly there is something wrong I've just been able to avoid it.
If I could migrate my entire environment to WireGuard, that would certainly solve the problem.
But circumstances make it difficult to migrate all IPsec connections to WG right away.

However, it is worth considering moving to WG earlier in the schedule.

If you disable IPSec does it stay stable at low CPU usage? Be nice to confirm and grab a suppout

Sat Dec 04, 2021 8:29 am

@MT it would be very helpful to make the config converter available. Would be a great learning tool and gives a preview what happens on upgrade. May be within winbox.

Sat Dec 04, 2021 9:28 am

Did anyone try to use capmans on v7.1? I am trying to get it working but with no joy. Have v7.1 on router

Have it running on mAP with mAPlite as cap in lab setup.
Maybe best to make separate post (provide link here) in order not to loose all info in this one.
Then others can also inspect in detail your config.

Vooray · Sat Dec 04, 2021 10:05 am

OSPF on /31 does not work:

R1:

[admin@R1] /routing/ospf/neighbor> /ip address/print 
Columns: ADDRESS, NETWORK, INTERFACE
# ADDRESS        NETWORK     INTERFACE
0 10.20.0.0/31   10.20.0.0   ether4   
1 10.100.0.1/32  10.100.0.1  BR0      
[admin@R1] /routing/ospf/neighbor> /routing/ospf/neighbor/print 
Flags: V - virtual; D - dynamic 
 0  D instance=OSPF-INST-DEFAULT area=0.0.0.0 address=10.20.0.1 priority=128 router-id=10.100.0.2 dr=10.20.0.1 bdr=10.20.0.0 state="Exchange" state-changes=4 timeout=37s 
[admin@R1] /routing/ospf/neighbor> /routing/ospf/export
# dec/04/2021 07:57:06 by RouterOS 7.1
# software id = 
#
/routing ospf instance
add name=OSPF-INST-DEFAULT
/routing ospf area
add instance=OSPF-INST-DEFAULT name=0.0.0.0
/routing ospf interface-template
add area=0.0.0.0 networks=0.0.0.0/0

R2:


[admin@R2] /routing/ospf/neighbor> /ip address/print 
Columns: ADDRESS, NETWORK, INTERFACE
# ADDRESS        NETWORK     INTERFACE
0 10.20.0.1/31   10.20.0.0   ether4   
1 10.100.0.2/32  10.100.0.2  BR0      
[admin@R2] /routing/ospf/neighbor> /routing/ospf/neighbor/print
Flags: V - virtual; D - dynamic 
 0  D instance=OSPF-INST-DEFAULT area=0.0.0.0 address=10.20.0.0 priority=128 router-id=10.100.0.1 dr=10.20.0.1 bdr=10.20.0.0 state="ExStart" state-changes=3 timeout=35s 
[admin@R2] /routing/ospf/neighbor> /routing/ospf/export
# dec/04/2021 07:57:28 by RouterOS 7.1
# software id = 
#
/routing ospf instance
add name=OSPF-INST-DEFAULT
/routing ospf area
add instance=OSPF-INST-DEFAULT name=0.0.0.0
/routing ospf interface-template
add area=0.0.0.0 networks=0.0.0.0/0

ospf neighbor reset func does not work also:

[admin@R2] /routing/ospf/neighbor> /routing/ospf/neighbor reset [find ]
no such item (4)

pe1chl · Sat Dec 04, 2021 10:52 am

OSPF on /31 does not work:

Read https://help.mikrotik.com/docs/display/ ... col+Status
/31 is not supported in RouterOS!

slaz · Sat Dec 04, 2021 11:06 am

Did anyone try to use capmans on v7.1? I am trying to get it working but with no joy. Have v7.1 on router
Have it running on mAP with mAPlite as cap in lab setup.
Maybe best to make separate post (provide link here) in order not to loose all info in this one.
Then others can also inspect in detail your config.

That I can do if wanted but will we get support from the mikrotik guys? :) would really love to get this one up and running

Sat Dec 04, 2021 11:18 am

This is primarily a user forum.
Let users look at your problem first.
Most likely it will be something trivial.

If that does not get resolved. You can always mail support pointing to your thread for further assistance.

I'd prefer those guys first address the more burning issues then something which can be resolved by the user community.
My view...

pe1chl · Sat Dec 04, 2021 11:49 am

Normally, when a router is rebooted using /system reboot to install a downloaded update, it comes up with a saved date/time that is at most a minute or so behind the current time, and that difference is adjusted on the first network time set (ip cloud or NTP).
However, when updating from 6.49.1 to 7.1, the clock starts from 1-1-1970, and some events and settings are logged with wrong timestamp.
Potentially this could even cause some things to fail, e.g. a WPA2-EAP TTLS connection with certificate verification enabled.

Sat Dec 04, 2021 11:52 am

Not seeing this on mAP ??
Time starts where it stopped after reboot.

pe1chl · Sat Dec 04, 2021 12:00 pm

Once 7.1 is installed and rebooted, yes it works OK. What I reported only occurs just after the update.
My guess is that the "saved time" actually is the file timestamp on the system configuration file.
At the first reboot after upgrade this file does not exist, it is crossfig's task to create it. So the time is not set and defaults to the Unix epoch of 1-1-1970.

Sat Dec 04, 2021 12:02 pm

Ok, clear
Good catch !

gotsprings · Sat Dec 04, 2021 1:53 pm

Capsman Support in wifiwave2?

Nope.

Either, Or.

MikroTikTack · Sat Dec 04, 2021 5:59 pm

There is problem with sending e-mails from router in Netwatch tool (Up and Down scripts)

Sending from Terminal is OK

/tool e-mail send to="someone@somedomain.tld" subject="Failover is UP" body="Main ISP failed..." tls=yes

The same command in Netwatch, tab Up and Down says:

Error sending e-mail <Failover is UP>: TLS handshake failed

Jotne · Sat Dec 04, 2021 6:03 pm

There is problem with sending e-mails from router in Netwatch tool (Up and Down scripts)

Error sending e-mail <Failover is UP>: TLS handshake failed

Do 6.x RouterOS work fine with this? If yes, send an email to support@microtik.com

MikroTikTack · Sat Dec 04, 2021 6:08 pm

Do 6.x RouterOS work fine with this? If yes, send an email to support@microtik.com

I don't know if it works on 6.x... I'm using RB5009.

Amm0 · Sat Dec 04, 2021 6:37 pm

Notice in the v7.1 "extra-packages" there is one for "LTE". I have never installed, and LTE generally works, does the "extra" package for LTE do anything or is needed for v7.1?

Sat Dec 04, 2021 6:39 pm

Notice in the v7.1 "extra-packages" there is one for "LTE". I have never installed, and LTE generally works, does the "extra" package for LTE do anything or is needed for v7.1?

From Wiki

Required package only for SXT LTE (RBSXTLTE3-7), which contains drivers for the built-in LTE interface.

sindy · Sat Dec 04, 2021 6:39 pm

Do 6.x RouterOS work fine with this?
I don't know if it works on 6.x... I'm using RB5009.

So did it work in any 7.1rcX? If not, it does not belong here - this thread is for release specific issues.

Regarding the issue itself - if you use Gmail, they consider plain TLS with user name and password a "less secure" access and you have to explicitly permit it in the account settings plus pass a number of steps that becomes more and more complicated.

Also, the server may identify itself using a certificate whose root CA is not stored in your Mikrotik's certificate store, hence TLS handshake failure.

beepilot · Sat Dec 04, 2021 7:48 pm

Does PIM work at all? It seems completely broken on the CCR2004

mhugo · Sat Dec 04, 2021 7:53 pm

We are seeing 2004s becoming sluggish after upgrade of 6.x and earlier 7.x. This to some of our 2004s on all earlier 7.x upgrades. We need to reboot 3-4 times and then it suddenly works.

Happens to approximately 3-4 2004s of the 16 we have. Random which one.

Arpping is showing 70-90% packet loss so it's something not getting flushed in silicon or something very low level.

It has never happened when we just reboot the 2004 in same firmware/ros.

npeca75 · Sat Dec 04, 2021 8:36 pm

CRS326-24G-2S+
could not enable Watchdog
upgraded from rc6
tried from Winbox and from CLI

ffries · Sat Dec 04, 2021 10:45 pm

Could upgrade my new CRS317-1G-16S+. Works well.

biomesh · Sat Dec 04, 2021 11:20 pm

There is problem with sending e-mails from router in Netwatch tool (Up and Down scripts)

Sending from Terminal is OK
Code: Select all
/tool e-mail send to="someone@somedomain.tld" subject="Failover is UP" body="Main ISP failed..." tls=yes
The same command in Netwatch, tab Up and Down says:
Code: Select all
Error sending e-mail <Failover is UP>: TLS handshake failed

With 6.x it was start-tls=yes, now the option is tls=starttls

This is if you use start-tls, forcing tls is tls=yes

pe1chl · Sun Dec 05, 2021 12:27 am

TLS and STARTTLS are two different methods to begin the TLS session. The first is normally used with port 465, the second with port 25.

cheeze · Sun Dec 05, 2021 3:09 am

Something I was curious and looking at was the fast path related information for version 7.

I noticed that there doesn't seem to be MPLS fast path yet? Is this correct?

If there is no MPLS fast path, then does this mean that on the hardware offloads for CRS3xx devices, MPLS is *NOT* offloaded?

Or is MPLS hardware offloading on CRS3xx different than unicast IPv4 hardware offloading?

This is targeted at @emils, @mrz, @sergejs.

Thank you :)

jaxed8 · Sun Dec 05, 2021 6:46 am

Thanks guys way the go
If I use "wifiwave2" on RB4011 2.4 GHz will still be available, right?

jousedelano · Sun Dec 05, 2021 7:14 am

Graphing CPU resource seems to be broken on 7.1

mducharme · Sun Dec 05, 2021 9:11 am

If I use "wifiwave2" on RB4011 2.4 GHz will still be available, right?

No, it will not.

Jotne · Sun Dec 05, 2021 9:16 am

Can confirm that http://10.10.10.225/graphs/ only gives one line with:
Traffic and system resource graphing

Send an email to support@mikrotik.com and report the problem.

You can use SNMP or Syslog to get CPU to an external server.

Here is a graph from Splunk for MikroTik, se link in my signature. viewtopic.php?t=179960
.

cpu.jpg