v7.1.1 is released!

emils · Tue Dec 21, 2021 2:32 pm

RouterOS version 7.1.1 has been released "v7 stable" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 7.1.1 (2021-Dec-21 13:53):

*) backup - added "force-v6-to-v7-configuration-upgrade" option on backup load to clear RouterOS v7 configuration and trigger reimport of RouterOS v6 route configuration (CLI only);
*) backup - fixed automatic backup generation when resetting configuration;
*) bgp - improvements on detecting peers local address when IPv6 link-local addresses are used;
*) capsman - improved system stability when processing CAP packet by Mangle;
*) dhcpv4-server - allow adding comments;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) l3hw - fixed HW offloaded routing when using 7 or more VLAN interfaces;
*) l3hw - fixed bonding source MAC address;
*) l3hw - improved system stability when using 7 or more VLAN interfaces;
*) ntp - print log change time with time-zone applied;
*) ospf - fixed distance if "originate-default" is set to "always";
*) ospf - fixed neighbor stuck in ExStart;
*) ospf - fixed simple authentication;
*) ospf - improved overall stability;
*) ospf - improves stability when handling looped back OSPF packets;
*) upgrade - improved 404 error handling when checking for new versions;
*) webfig - fixed user policy lookup for skin designer;
*) winbox - made "Routing Filters/Rules" table sortable;
*) winbox - moved "IP/Route/Nexthops" and "IPv6/Route/Nexthops" menus to "Routing/Nexthops";
*) winbox - updated default "Routing/BGP/Peer Cache" table appearance;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this particular RouterOS release.

Ullinator · Tue Dec 21, 2021 3:00 pm

Updated CRS326-24S+2Q+, 2x CRS328-24P-4S+, RB4011iGS+5Hac, 2x CRS326-24G-2S+, 4xCAP AC, 1 CAP XL AC successfull to 7.1.1 (ROS and FW) without problems.
I´ll keep an eye on any ROS problems.

russelld · Tue Dec 21, 2021 3:07 pm

So far I've upgraded the CCR1009-7G, CCR1009-8G and a hEX S all in my lab - all OK.

However, I would make the observation that after the upgrade to 7.1, my devices were still set to the "testing" channel, so when I hit "Download and Install" they initially started downloading 7.2rc1. I stopped them in time and switched the release channel back to stable.

Perhaps after an upgrade to 7.x, the release channel should be set to automatically default to "stable", to prevent inadvertent upgrades to release candidates?

R

Tue Dec 21, 2021 3:10 pm

release channel is whatever you have set. Default was always "stable".

leonardogyn · Tue Dec 21, 2021 3:14 pm

not a word on the severe memory leak I reported on SUP-68885 :(

Chupaka · Tue Dec 21, 2021 3:14 pm

And when upgrading from v6, you need to pick 'upgrade' channel, right? Looks like it falls back to stable

hecatae · Tue Dec 21, 2021 3:24 pm

hAP ac2 successfully updated, both os and board firmware.

jookraw · Tue Dec 21, 2021 3:47 pm

Wireguard IPv6 peer bug is still present... how hard is to check what changed from 7.1rc4?

emils · Tue Dec 21, 2021 3:51 pm

And when upgrading from v6, you need to pick 'upgrade' channel, right? Looks like it falls back to stable

What do you mean exactly? Currently "upgrade" channel should show this 7.1.1 release.

Wireguard IPv6 peer bug is still present... how hard is to check what changed from 7.1rc4?

Should be fixed in 7.2rc1

Chupaka · Tue Dec 21, 2021 3:55 pm

What do you mean exactly? Currently "upgrade" channel should show this 7.1.1 release.

I mean, 'testing' was an old way of upgrading from v6 to v7, now you need to use 'upgrade' channel. And there's no 'upgrade' in v7, so looks like everything works just like russelld expects, except he upgraded to v7 quite long time ago

emils · Tue Dec 21, 2021 4:00 pm

I see. 7.1.1 is available in "testing" channel from v6 as well. So I get what russelld is talking about, but to be fair, when you update to "testing" channel, you still agree to install other "testing" versions as well, which 7.2rc2 is.

zainarbani · Tue Dec 21, 2021 4:00 pm

Feature request: fetch via specific interface (curl --interface ...)

pekr · Tue Dec 21, 2021 4:24 pm

Could changelog page tabs be sorted in the same manner, as the download section? It's confusing .....

soheilsh · Tue Dec 21, 2021 4:32 pm

socks5 have problem in 7.1.1 , in 7.2rc1 is ok now

parham · Tue Dec 21, 2021 4:40 pm

I can see the fix for LTE in 7.2rc1 "*) lte - fixed packet forwarding on R11e-4G and R11e-LTE-US;" but why is not in 7.1.1 which is the important fix.

Halfeez92 · Tue Dec 21, 2021 4:43 pm

Does v7 have UPS package?

Ullinator · Tue Dec 21, 2021 4:55 pm

Does v7 have UPS package?

No, I can´t find it anymore.
It was installed at 6.49.X but has gone with the update to 7.1.X

jookraw · Tue Dec 21, 2021 5:06 pm

And when upgrading from v6, you need to pick 'upgrade' channel, right? Looks like it falls back to stable
What do you mean exactly? Currently "upgrade" channel should show this 7.1.1 release.

Wireguard IPv6 peer bug is still present... how hard is to check what changed from 7.1rc4?
Should be fixed in 7.2rc1

Just tested the 7.2rc1, not fixed

erlinden · Tue Dec 21, 2021 5:21 pm

Does v7 have UPS package?

Will probably be part of future release. Didn't see it yet in any of the other 7.x releases (Dev/Test) as well.

edielson_atm · Tue Dec 21, 2021 5:42 pm

the "Remove Private AS" function in BGP is still not working

gotsprings · Tue Dec 21, 2021 6:23 pm

The RB3011 that I installed v7.1 now 7.1.1 still does not pass ARP discovery over zerotier.

I can connect to the Routerboard using the MAC address of the bridge. But not discover things on the other side.

RB3011 with 7.1Rc4 does.
hAP AC2 and Audience work regardless of 7.x version.

rushlife · Tue Dec 21, 2021 6:47 pm

update cannot be done on wsap ac, no enough of disk space :-(

denisun · Tue Dec 21, 2021 7:06 pm

I still have problem with mark packet in ipv6.
When it is enable all traffic pass from input and drop to forward as invalid.
The connections show tab is empty.
When i disable mark packet, all work perfect but i have not QoS.

atakacs · Tue Dec 21, 2021 7:32 pm

Any update / input / remark / comment on the IPSec issues lots of people are having ?

eworm · Tue Dec 21, 2021 7:54 pm

Wireguard IPv6 peer bug is still present... how hard is to check what changed from 7.1rc4?
Should be fixed in 7.2rc1

Let's be more specific here, as we have two issues:

Wireguard interfaces did not receive a link local address, breaking at least OSPFv3. That is fixed now in 7.2rc1.
Please note that a link local address is assigned even if IPv6 is disabled (/ipv6 settings set disable-ipv6=yes). Looks like just another bug. 😜

Connecting several peers just leaves the last one touched with a functional IPv6 connection. I think this is what is still broken. (Did not yet test myself.)
This behavior is described in SUP-67181. Please have a look and fix this, it hurts me as well.

eworm · Tue Dec 21, 2021 7:55 pm

Any update / input / remark / comment on the IPSec issues lots of people are having ?

All my IPSec connections were down on a CCR1009... A reboot sorted this. No idea what happened, sadly I missed to generate a support output file.

pe1chl · Tue Dec 21, 2021 8:17 pm

Upgraded my RB4011 from 7.1 to 7.1.1 and it appears to work ok, also IPsec.
There is an IPsec issue with statically configured /ip ipsec identity which disappears after reboot, but it turns out that already existed in 7.1
(after re-adding it manually from export made before the upgrade IPsec works OK for me)

I also tried upgrading to 7.2rc1 and it was a complete disaster, SUP-69560 created with the relevant info.

pe1chl · Tue Dec 21, 2021 8:20 pm

I still have problem with mark packet in ipv6.
When it is enable all traffic pass from input and drop to forward as invalid.
The connections show tab is empty.
When i disable mark packet, all work perfect but i have not QoS.

I do use packet mark (based on DSCP value) and it appears to work for me.

templeos · Tue Dec 21, 2021 8:42 pm

Graphs on WebFig with https still gives Error 404: Not Found like it did with v7.1.

blackhandnz · Tue Dec 21, 2021 9:13 pm

Not sure if its a bug or not but after I upgraded from 7.1 to 7.1.1 some (70%) of my DHCP static lease entries got dropped (RB5009UG+S+)

truefriendcz · Wed Dec 22, 2021 12:48 am

In release v7.1.1 has been error this profile:
WAN as wlan2 with DHCP Client,... for better management i select wlan2 as "Bridge-Client", but ended with randomly error with connection timeouts.
On versions RouterOS v6.xx worked ok.

Problem (wanted solution):

Problem.png

Standard settings working ok (i am not wanted this solution):

AllOk.png

How i can fix this please?

afink · Wed Dec 22, 2021 1:03 am

Feature request: fetch via specific interface (curl --interface ...)

or fetch from a specific IP. Like a loopback while you use private IP's on the point to point links...

afink · Wed Dec 22, 2021 1:07 am

Upgraded my RB4011 from 7.1 to 7.1.1 and it appears to work ok, also IPsec.
There is an IPsec issue with statically configured /ip ipsec identity which disappears after reboot, but it turns out that already existed in 7.1
(after re-adding it manually from export made before the upgrade IPsec works OK for me)

I have run into this multiple times. from 6.X to 7.1bet and from 7.1beta to 7.1 release I ended up with /ip ipsec identity being completely blank.
So if you have ipsec stuff, save your passwords. you probably will need them later...

The interesting thing was that on one router where I had issues after upgrade, i downgraded to release 6 and everything worked again.
So the identity config is not lost, its just hidden, disregarded in 7.

npeca75 · Wed Dec 22, 2021 2:22 am

Connecting several peers just leaves the last one touched with a functional IPv6 connection. I think this is what is still broken. (Did not yet test myself.)
This behavior is described in SUP-67181. Please have a look and fix this, it hurts me as well.

+1

wojo · Wed Dec 22, 2021 3:15 am

This bricked my CCR1009-7G-1C-1S+ in a boot loop

I had to Netinstall and get back running on 7.1.1. Here's the serial console log, I tried everything including the backup boot loader but it always panics like this:

Could not mount ubifs/yaffs filesystem: No such device
[   10.000322] Kernel panic - not syncing: Attempted to kill init! exitcode=0x00000000
[   10.000437] CPU: 1 PID: 1 Comm: init Not tainted 5.6.3 #1
[   10.000494]   frame 0: __schedule+0x12288/0x7e0fb8 (sp 0xfffffe007a70fb20)
[   10.002498]   frame 1: __schedule+0x7bb290/0x7e0fb8 (sp 0xfffffe007a70fb90)
[   10.010159]   frame 2: __schedule+0x3ca50/0x7e0fb8 (sp 0xfffffe007a70fbc0)
[   10.017725]   frame 3: __schedule+0x40ca0/0x7e0fb8 (sp 0xfffffe007a70fc80)
[   10.025290]   frame 4: __schedule+0x431a8/0x7e0fb8 (sp 0xfffffe007a70fd20)
[   10.032856]   frame 5: __schedule+0x43270/0x7e0fb8 (sp 0xfffffe007a70fd60)
[   10.040422]   frame 6: __schedule+0x7de800/0x7e0fb8 (sp 0xfffffe007a70fd80)
[   10.048081]   <syscall 94 while in user mode>
[   10.052926]   frame 7: 0x45040 (sp 0x7f9cfb30)
[   10.057768] Rebooting in 5 seconds..
Resetting chip and restarting.
 logo.bmp not found or data is corrupted

wojo · Wed Dec 22, 2021 3:22 am

Looks like SD cards still do not mount on CCR1009-7G-1C-1S+, same on 7.2rc1.

Halfeez92 · Wed Dec 22, 2021 3:56 am

Still not fixed for DHCPv6-PD over VLAN PPPoE

manuek · Wed Dec 22, 2021 7:01 am

Rb4011 supports l3hw????

erlinden · Wed Dec 22, 2021 7:15 am

How i can fix this please?

Why would you like to add an additional bridge that is not necessary?
What does your firewall (including NAT) look like?

NAB · Wed Dec 22, 2021 10:05 am

Still seeing the same "kernel failure" problem on a CCR1009-8G-1S-1S+ every six hours or so under 7.1.1 as under 7.1.

Screenshot 2021-12-22 080425.png

accarda · Wed Dec 22, 2021 10:41 am

I have just tried to experiment with v7.1.1 using a hEX S router, which has a very basic config.
Started from Ros v6.49.2 and had only a mgmt VLAN interface, one bridge, loopback and a point to point ethernet connection to a rb4011 running 6.48.6.
With this basic i installed v7.1.1 and then I created a simple fresh (not ported from v6.49.2) BGP config to peer with rb4011.
Things worked fine on hEX S until when I tried to remove the default route (which was statically added by me) so that the default route from BGP was taking over.
This put BGP into open and not established.
I then tried to re-activate static default router from hEX S, but BGP session didn't restored.
I reboot hEX S and after that all ip/route and BGP config disappeared in winbox.
However main routes were there (but not visible neither Winbox or CLI) since I was still able to access hEX via VLAN and/or rb4011 ptp ethernet link.
When I tried to add a new BGP setting and so, after OK nothing appeared. Same as with adding new static route, nothing happened.
Switched back to Ros v6.49.2 and created there the same BGP config; all went OK.
Created supout file, but when I tried to file a case the form complained supout was not readable, so I couldn't file such report.
However from MK support site I was able to upload such rif file to supout viewer section and it's still there.

During these tests with v7.1.1 creating supout file took a long time; issuing an /export to check config over terminal didn't complete and the same when saving this to flash. However creating a backup file has worked. So something was not right with this installation on my unit.
Now everything is back to v6.49.2 and I will try again the same exercise later to see if I will get the same issues.

Armando

Nunak · Wed Dec 22, 2021 11:33 am

NTP server is still issue :( NTP server is responding only on one interface.

[admin@mikrotik.bla bla] > ip address/print 
Flags: X, I, D - DYNAMIC
Columns: ADDRESS, NETWORK, INTERFACE
 #   ADDRESS            NETWORK         INTERFACE                            
 0   192.168.1.1/24     192.168.1.0     br-vlan101                           
 1   192.168.2.1/24     192.168.2.0     br-vlan102                           
 2   10.128.63.1/24     10.128.63.0     br-vlan110                           
 3   192.168.11.1/24    192.168.11.0    br-vlan111                           
 4 X 84.242.114.116/29  84.242.114.112  ether1                               
 5   192.168.3.1/24     192.168.3.0     br-vlan103                           
 6   192.168.4.1/24     192.168.4.0     br-vlan104                           
 7   192.168.15.1/24    192.168.15.0    br-vlan115                           
 8   192.168.14.133/30  192.168.14.132  wireguard-bla
 9   192.168.14.137/30  192.168.14.136  wireguard-bla1     
10 I 192.168.14.141/30  192.168.14.140  wireguard-bla2     
11 D 192.168.99.145/24  192.168.99.0    ether1                               
12 D 192.168.14.123/32  192.168.14.124  <ovpn-1>                        
13 D 192.168.14.125/32  192.168.14.126  <ovpn-2>                        
14 D 192.168.14.121/32  192.168.14.122  <ovpn-3r>

(10:31:17)(193G) [root@raspberrypi-003:~] # /usr/lib/nagios/plugins/check_ntp_time -H 192.168.1.1
NTP OK: Offset -0.0007329285145 secs|offset=-0.000733s;60.000000;120.000000;
(10:31:28)(193G) [root@raspberrypi-003:~] # /usr/lib/nagios/plugins/check_ntp_time -H 192.168.11.1
NTP CRITICAL: No response from NTP server

Bug has been reported - SUP-69650

pe1chl · Wed Dec 22, 2021 11:36 am

@accarda interesting that you see this issues, I had similar problems when upgrading from 7.1 to 7.2rc1 and I went to 7.1.1 and now it seems to work OK.
I created SUP-69560 for that, you may want to reference it when you make another SUP.

I thought it is an issue introduced in 7.2rc1 but apparently it can also happen in 7.1.1 and may be related to the actual config.
(I have 2 BGP templates and 7 BGP connections)

pe1chl · Wed Dec 22, 2021 11:39 am

NTP server is still issue :( NTP server is responding only on one interface.

It works OK for me. Sure it is not a firewall issue?
I see some "funny behavior" of the NTP server, e.g. when I try to add an external server that happens to be already present as a dynamic server (obtained from DHCP) it goes bonkers. The new server is not accepted and another one is deleted.
But replying to requests seems to work OK here (I also have several networks).

accarda · Wed Dec 22, 2021 11:49 am

@pe1chl in my case I had this hEX-S running LT and never tried v7.x, so no possibility that some trace of v7 was in it.
Then I moved first to latest 6.49.2 just to make sure I had all with latest step before v7.
My move to v7.1.1 (first time) was all ok and BGP worked fine, even though after creating a template and then a connection I had to reboot the router to have it working fine (I have seen this on the forum that someone suggested reboot the device after the config).
But after that "I created an issue", there was no way to being able to edit, add routes or BGP config.
When I switched back to v6.49.2, no issue was ported back, BGP was not there (which I expected) and I was able to create my simple peer to rb4011. And in this case, repeated same exercise to disable static default route on hEX and it worked by enabling default route from BGP peer from rb4011.

So yes, definitively something went wrong in my case.
Even export resulted in std/io timeout (I saw it from supout reading over MK website viewer).

afink · Wed Dec 22, 2021 11:49 am

I would like to report an issue with multiprotocol bgp, carrying both ipv4 and ipv6 af routes.
Tested this on wireguard interfaces, not sure about regular ethernet.
- when the session is ipv4-based: ipv4 routes work fine, and for ipv6 routes mikrotik builds ipv4-mapped ipv6 next-hop based on ipv4 interface address (eg ::ffff:192.168.0.1), ignoring interface ipv6 address set explicitly.
- when the session is ipv6-based: ipv6 routes work fine, and for ipv4 routes mikrotik puts 0.0.0.0 as next-hop.

so there is no option to run both v4 and v6 in one bgp session.

I would recommend running a BGP session for IPv4 and one for IPv6. With the many peerings I have over dozens of Internet exchanges, I have not seen a single peer which uses BGP with IPv4 not in a separate session from BGP with IPv6. So it's kind of the standard way of doing it.

poirus · Wed Dec 22, 2021 12:23 pm

How to use force-v6-to-v7-configuration-upgrade, geve an example please
/system/backup/load name=BackupNameFile.backup force-v6-to-v7-configuration-upgrade=yes

pe1chl · Wed Dec 22, 2021 12:39 pm

@pe1chl in my case I had this hEX-S running LT and never tried v7.x, so no possibility that some trace of v7 was in it.

Unfortunately the "modern devices" are not ideal to experiment with versions. It may be easier to try a classic one (RB2011, old hEX) or a higher end modern one (RB3011,RB4011) because they have enough flash space to have two or more versions on the router at the same time (partitioning).
I use that to try upgrades and switch back when it does not work. At the moment I have 7.1 and 7.1.1 on my router (running 7.1.1) and I am ready to try 7.2rc versions by just copying the 7.1.1 over the 7.1 install and then upgrade it, when it fails I can switch to the copy.
What you describe is a lot like what I experienced by upgrading an existing working installation from 7.1 to 7.2rc1.
IP route screen is empty, /ip route print command hangs, /export command hangs, create supout.rif takes a very long time.
But with 7.1.1 it is all OK for me. Strange.

Nunak · Wed Dec 22, 2021 1:04 pm

NTP server is still issue :( NTP server is responding only on one interface.
It works OK for me. Sure it is not a firewall issue?
I see some "funny behavior" of the NTP server, e.g. when I try to add an external server that happens to be already present as a dynamic server (obtained from DHCP) it goes bonkers. The new server is not accepted and another one is deleted.
But replying to requests seems to work OK here (I also have several networks).

Yes this was working on ROS6 I wasn't changing any FW rules and I have this issue on all ROS7 boxes.

truefriendcz · Wed Dec 22, 2021 1:07 pm

How i can fix this please?
Why would you like to add an additional bridge that is not necessary?
What does your firewall (including NAT) look like?

It is default config after reset router and change to add bridge-Client and change other params on the screen for acessing to internet.

poirus · Wed Dec 22, 2021 1:11 pm

4011 loop reboot after upgrade from 6.49.2 every 2-5 min. At one moment 1 core was 100% load for a minute and reboot again. Disable 2 IPIP tunnels to mikrotik 6.49.2 solved the problem. But I need them, so problem is somewhere in it.

pe1chl · Wed Dec 22, 2021 1:16 pm

Yes this was working on ROS6 I wasn't changing any FW rules and I have this issue on all ROS7 boxes.

Interesting. I checked again and for me it works fine.

pe1chl · Wed Dec 22, 2021 1:19 pm

Disable 2 IPIP tunnels to mikrotik 6.49.2 solved the problem. But I need them, so problem is somewhere in it.

Are you sure the IPIP tunnels are not somehow looping (tunnel traffic routed back into the tunnel instead of to internet)?
Maybe this is caused by some of the routing changes in v7, e.g. in "scope" and "target scope", or selecting active route.

ghostt · Wed Dec 22, 2021 1:41 pm

Upgraded CCR1036-12G-4S to v7.1.1. Latest Winbox version is used. First impressions, well...
1. OSPF between this router and another CCR v6.49.2 had stopped working. With a quick look I couldn't determine where the problem was...
2. Routing Filters didn't appear in the "classic" way in Winbox, they were looking more like scripts, not very user friendly, especially when it was impossible to look through the options any more.
3. Couldn't find Routing BGP Networks. BGB still seamed to continue working but I couldn't find where the networks and aggregations gone, sorry.
4. Periodically Winbox windows didn't show the contents, for example, going to IP Routes. But there was nothing shown in the window, no list of the existing routes, although routes did exist as I could ping some of my customers (those ones that were running over BGP), restart Winbox didn't help. Reboot the router helped. But the problem appeared again after running Winbox for a while. The same was with Routing Filters.
5. IP Routes. I've got a large network of VPNs to our clients with BGP running over it. The routes dynamically created by BGP didn't show the tunnel name next to the gateway any more, although in v6.49.2 they did. For example, 10.10.10.0/29 Gateway 10.0.0.3 <sstp-client2> reachable. <sstp-client2> wasn't shown, only gateway 10.0.0.3 could be seen. But it would be very handy to know what VPN tunnel is actually providing gateway 10.0.0.3.
These are the most important issues, well for me at least. There were some others, but sorry, I didn't pay much attention to them being overwhelmed with customers' phone calls.

Bottom line. I've rolled back to v6.49.2 using Netinstall, as the router didn't "want" doing that any other way :) No logs or screenshots were taken due to the customer pressure, sorry.

That upgrade had been done on the working in the field router on purpose to see the real-life effects. After that I've disabled all automatic upgrades for all of my customers plus 7 core CCR routers forming our backbone network. I guess, the questions would be:

- Would you recommend to stay on v6.xxxx?
- If not, is there an easy way to move to v7.xxxx?
- Are there any field examples for OSPF and BGP, including filters and routes for v7xxxx?

All above wasn't a complaint, just a feedback from the field :)

Thanks guys.

P.S. Chupaka, is there a way to contact you, i.e. email? :)

Wed Dec 22, 2021 1:53 pm

2.,3) https://help.mikrotik.com/docs/display/ ... figuration
5.) set Winbox to show appropriate parameter "immediate-gateway", "gateway" is configurable parameter and will not show runtime info

ghostt · Wed Dec 22, 2021 2:17 pm

mrz,
Thank you. I did try "immediate-gateway", "gateway". something like <sstp-client1> didn't appear in the corresponding columns. They were just blank or "unknown". I'll try your suggestion for 2 and 3, thank you but on a test router this time, sorry. BTW, after posting here I've spoken to one of my colleagues who uses and loves Mikrotiks, he is also one of carrier ISPs in Australia. His exact words were "stay on v6"; problems - OSPF/BGP.

Plus an opinion of a person who uses Mikrotiks all the time. No matter how big the difference is between versions of an upgrade an the latest running one, the upgrade procedure should not brake anything (in theory).

ksuuk · Wed Dec 22, 2021 2:27 pm

Updated 4xCAP AC, 1 CAP XL AC successfull to 7.1.1 (ROS and FW) without problems.

How did You upgrade 16 MB device, which is having only few MB free space, with the 12,9 MB image?

At least I got error - "not enough space for upgrade".

andacb · Wed Dec 22, 2021 2:39 pm

Is the Dude server coming to this version? Or which version will it be included in v7.x series?

russelld · Wed Dec 22, 2021 2:43 pm

I see. 7.1.1 is available in "testing" channel from v6 as well. So I get what russelld is talking about, but to be fair, when you update to "testing" channel, you still agree to install other "testing" versions as well, which 7.2rc2 is.

I may have upgraded one of the devices using the 'testing' channel, but I'm pretty sure I used the 'upgrade' channel for the other devices. I did a further upgrade to a CRS317, RB3011 and RB4011. One of those was also left on the 'testing' channel, whilst the other two remained set to the 'stable' channel. I have never installed anything from the development channel and had never installed any 7.x pre-release - so it was a direct upgrade from 6.48.x or 6.49.x.

Either way: if 7.1 was available via the 'testing' channel as well as the 'upgrade' channel, given the significance of this upgrade, it would seem prudent to revert to default of 'stable' after an upgrade from a 6.x release... Just my opinion!

Thanks for all the work on v7 so far - never had the time to play with pre-release versions of 7.x, but now that it is 'stable' (with a full understanding of what that means in Mikrotik world) I'm looking forward to seeing what it has to offer and I'm also looking forward to the new hardware the updated kernel will unlock in the coming year (even with the chip shortage....)

accarda · Wed Dec 22, 2021 3:34 pm

@pe1chl just for the sake of completing this, I have repeated again the same setup and steps, starting "almost" fresh from v6.49.2.
In fact before making the first move to v7.1.1 I had created a backup for v6.49.2, which never included any trace of v7.1.1, which resulted in a clean starting point for me.

So after moving back to v6.49.2 and restored from such backup, I went again v7.1.1 and this time all menu were ok and filled with data.
I have recreated again BGP peer to rb4011 and got the same network being distributed.
Since I receive default route also from rb4011, this time when I disabled the local default route, it worked fine and activated the one from BGP.
The first time when I created BGP I didn't set the AFI option (didn't know it before), but added it once I saw some warning in the log complaining about missing AFI settings.
Then, I tried to disable the default route and the whole issue began.
This time when I created template I have set AFI before the BGP instance was started and no problem at all.
It might not have anything to deal with, but this is something different that I did this time (knowing my previous mistake).

I will have to read and learn little bit more about this new BGP implementation in Ros v7 to play with, but during first attempt I have noticed with profile an usage of 90% CPU on one core (while winbox indicated overall CPU around 25%), while now everything is low usage 0%.
Not sure whether hEX S was in a bad status at that moment and hit CPU so bad (may be export not working etc was associated to this).
Will see in the next days how it's still running.

hecatae · Wed Dec 22, 2021 3:35 pm

4011 loop reboot after upgrade from 6.49.2 every 2-5 min. At one moment 1 core was 100% load for a minute and reboot again. Disable 2 IPIP tunnels to mikrotik 6.49.2 solved the problem. But I need them, so problem is somewhere in it.

Have you updated the routerboard firmware?

w0lt · Wed Dec 22, 2021 3:37 pm

Has anyone gotten the “ChangeIP DynDNS” script to work in ROS 7.x yet ?

-tp

Ullinator · Wed Dec 22, 2021 3:40 pm

Updated 4xCAP AC, 1 CAP XL AC successfull to 7.1.1 (ROS and FW) without problems.
How did You upgrade 16 MB device, which is having only few MB free space, with the 12,9 MB image?

@ksuuk: It was done automaticaly via CAPsMAN (which is my RB4011iGS+5HacQ2HnD) after I´ve upgraded this device to 7.1.1

hc_086.jpg

I didn´t tried it in another way.. :-/

netbus · Wed Dec 22, 2021 3:51 pm

IPv6 Firewall Connection Tracking is still not available on HAP ac²

eworm · Wed Dec 22, 2021 4:00 pm

IPv6 Firewall Connection Tracking is still not available on HAP ac²

You are using queues, no? This is a known issue, at lease here in the forum. (I hope Mikrotik is aware...)
SUP-69071

pe1chl · Wed Dec 22, 2021 4:43 pm

Upgraded CCR1036-12G-4S to v7.1.1. Latest Winbox version is used. First impressions, well...
2. Routing Filters didn't appear in the "classic" way in Winbox, they were looking more like scripts, not very user friendly, especially when it was impossible to look through the options any more.
3. Couldn't find Routing BGP Networks. BGB still seamed to continue working but I couldn't find where the networks and aggregations gone, sorry.

These are not release specific issues, you are describing common suprises people will have when migrating from v6 to v7. You will have to re-learn a few things.
(and also the BGP implementation is not complete)

See the documentation on help.mikrotik.com

pe1chl · Wed Dec 22, 2021 4:53 pm

I have run into this multiple times. from 6.X to 7.1bet and from 7.1beta to 7.1 release I ended up with /ip ipsec identity being completely blank.
So if you have ipsec stuff, save your passwords. you probably will need them later...

Of course I always make a backup and export before upgrades. And I have read a couple of times about loss of config. So after an upgrade I do a new export and diff them, to see what I might have lost in the process. That had already alerted me about problems before, especially in the config conversion.
(of course remember to add show-sensitive parameter when doing export in v7)
In this case I was alerted by the repeated "initiator can't find identity for peer: xxxx" messages in the log window, while that identity should exist.

The interesting thing was that on one router where I had issues after upgrade, i downgraded to release 6 and everything worked again.
So the identity config is not lost, its just hidden, disregarded in 7.

Well you have to understand how it works internally: all the config info you see in /export is stored in a "database". That is what /system backup saves.
There is a separate database for v6 and v7. When you upgrade from v6 to v7 the database is converted by a program called "crossfig", this only happens on your first upgrade.
When you downgrade, you fall back to the old v6 database. So what you see there is unaffected by what happened under v7 (also all changes you made).
Somewhat surprising, when you later upgrade from v6 to v7 again, there is no new conversion. So you get the config that was present in the past when you first converted to v7! It had been sleeping all the time you used v6. The new improvements in crossfig or the new v7 release you use now are ignored.
There appears to be no way to delete that v7 database under v6. And when you backup under v6, both databases will be in your backup, so restoring that does not help either.

Only in this version a new flag has been added to the backup load command to ignore the v7 database, load the v6 database, and convert it again using the current version of crossfig. So probably when you have repeatedly tried to upgrade and then decided to downgrade, the best thing is to backup and then restore using that flag.

On my router, at one point I decided to export, reset to blank configuration, and import the configuration again, just to be sure there is no crap like that left.
(which then shows bugs in the export file, which still have not been fixed. but that is another matter)

AshuGite · Wed Dec 22, 2021 5:12 pm

CCR2004-16G-2S+ Switch2 all ports are flapping at same time..

netbus · Wed Dec 22, 2021 5:48 pm

You are using queues, no? This is a known issue, at lease here in the forum. (I hope Mikrotik is aware...)
SUP-69071

Yes I use simple queue.
Does it mean there is a workaround for it? Disabling Queues?

eworm · Wed Dec 22, 2021 6:19 pm

Yes, ipv6 connection tracking works if you disable queues. Well, just make sure the ipv6 traffic does not go through a queue.

mafiosa · Wed Dec 22, 2021 6:43 pm

Please help me with high CPU usage with PCC Loadbalancing on RB3011 v7.1.1 viewtopic.php?t=181516

BRMateus2 · Wed Dec 22, 2021 6:50 pm

Upgraded mipsbe RB951G from v6 to v7 and worked fine at the first moment, but when I upgraded the firmware it broke the router, now its DHCP doesn't work and the router can't handle any Layer 3 IP IPv6 anymore - will try to netinstall with a switch in between, because directly connecting to PC for netinstall doesn't work either, and every time I connect by MAC, I get disconnected 1 second after, even with my config or defaults.

pe1chl · Wed Dec 22, 2021 7:29 pm

It is always a bit tricky to know of your problem is caused by "upgrading the firmware" or by "rebooting because firmware upgraded".
Unfortunately there are still some v7 bugs that manifest only after a reboot.

pe1chl · Wed Dec 22, 2021 7:30 pm

Yes, ipv6 connection tracking works if you disable queues. Well, just make sure the ipv6 traffic does not go through a queue.

Ipv6 works for me with a queue tree (and packet marking based on DSCP). Probably you mean a simple queue?

2bn2t · Wed Dec 22, 2021 7:39 pm

Just tried to update and every device ended up in a BootLoop…

johnson73 · Wed Dec 22, 2021 8:12 pm

Upgrade 7.1.1 vers. wAP Ac (architecture mipsbe). There are still problems with Upload speed. This is critically low. There was no such problem with version 6.49.2!

eworm · Wed Dec 22, 2021 8:40 pm

Ipv6 works for me with a queue tree (and packet marking based on DSCP). Probably you mean a simple queue?

I have simple queues with pcq, yes.

khialb32 · Wed Dec 22, 2021 10:14 pm

still, no fix to the 404 error on Hotspot web page that comes from time to time!

DL7JP · Thu Dec 23, 2021 1:14 am

Hi,
I updated a RB1100AHx4 from 6.49.2 to 7.1 then 7.1.1 and ended up in a strange situation: The router works fine, but asa I reboot it all is screwed up: All bridges are gone, so all IPs are missing, no access via MAC-Telnet. After resetting it and restoring the 7.1 backup with 7.1.1 all works fine again, but a reboot srews it all up.
Any suggestions how I coud fix this situation besides downgrading to 6.49.2 and waiting for a more stable 7.x Version?
- Joachim.

ghostt · Thu Dec 23, 2021 1:21 am

you are describing common suprises people will have when migrating from v6 to v7. You will have to re-learn a few things.
(and also the BGP implementation is not complete)

See the documentation on help.mikrotik.com

Thank you for your answer. That is exactly what I'm talking about with the exception I wouldn't call that surprises, I'd call that "problems", as nothing currently working should stop doing so with an upgrade. No one is against re-leaning something nor I said your product is bad. As I said that wasn't a complaint but a feedback from the Mikrotik users in a commercial environment not in a lab where everything is working. I'd love to migrate (and I've tried to do so) but simple migration from v6 to v7 doesn't work and overall, it looks like v7 is still a "test" version, which has issues even with Winbox.

ghostt · Thu Dec 23, 2021 1:24 am

Hi,
I updated a RB1100AHx4 from 6.49.2 to 7.1 then 7.1.1 and ended up in a strange situation: The router works fine, but asa I reboot it all is screwed up: All bridges are gone, so all IPs are missing, no access via MAC-Telnet. After resetting it and restoring the 7.1 backup with 7.1.1 all works fine again, but a reboot srews it all up.
Any suggestions how I coud fix this situation besides downgrading to 6.49.2 and waiting for a more stable 7.x Version?
- Joachim.

Welcome to the club :) Quick fix is downgrading, sorry. I had to do the same, so waiting for 7.x.x version, which works.

nichky · Thu Dec 23, 2021 4:19 am

romon doesn't work btw v6 and v7

ghostt · Thu Dec 23, 2021 4:43 am

2.,3) https://help.mikrotik.com/docs/display/ ... figuration

mrz,
Thank you again for that. I think I've figured out why OSPF gone broken on migration from v6 to v7. Maybe someone will find it handy. It looks like Mikrotik has converted networks in v6:

/routing ospf network
add area=backbone network=1.1.1.0/29

Into Interface templates, exactly how it is written in the help document you sent me:

/routing ospf interface-template
add network=1.1.1.0/29 area=backbone_v2

May be it will work between versions 7, I haven't check yet. But it doesn't work between CCR v6 and CCR v7. OSPF started working after I've programmed interface-templates like that:

/routing ospf interface-template
add area=backbone_v2 prefix-list=1.1.1.0/29

Just a thought. I would be very handy if Routing-Filters if adding via Winbox, not terminal, still had those tabs and clickable options like in v6, and then upon pressing "Apply" or "OK" the filter would be converted to a script. :)

Jotne · Thu Dec 23, 2021 8:16 am

romon doesn't work btw v6 and v7

Connect Rommon -> RB750Gr3 6.48.4 -> Rommon to SXT 5HPnDr2 7.2rc1 OK
Connect Rommon -> RB750Gr3 6.48.4 -> Rommon to CHR 7.1 OK
Connect Rommon -> RB750Gr3 6.48.4 -> Rommon to CHR 7.2rc1 OK

Connect Rommon -> SXT 5HPnDr2 7.2rc1 -> Rommon to RB750Gr3 6.48.4 OK
Connect Rommon to CHR 7.1 -> Rommon -> RB750Gr3 6.48.4 OK

So no problem. Have you enabled Rommon?

accarda · Thu Dec 23, 2021 8:49 am

romon doesn't work btw v6 and v7

I have only 1 router migrated to v7.1.1, but either if I set RoMON agent to be one of v6 or the v7 router, I can log into all the others with no issues, including the v7 one.

jimint · Thu Dec 23, 2021 8:55 am

I suggest about wireguard to include a button which generate qrcode for clients. It will be very easy because now we send always the keys with our emails.

jamsden · Thu Dec 23, 2021 9:35 am

Welcome to the club :) Quick fix is downgrading, sorry. I had to do the same, so waiting for 7.x.x version, which works.

I’ll keep 6.48.6, thanks for sharing.

LordRob · Thu Dec 23, 2021 10:05 am

I upgraded my RB3011UiAS to v7.1.1.Also the dude client is upgraded to v7.1.1 on a Windows10 PC. However after the upgrade the Dude client does not start. The Windows Task Manager does not show a running Dude program or process. It seems the Dude package is not part of this release. it does not show up in the package list of the device.
On the same PC Winbox64 v3.31 is running and this application is able to connect with the RB3011UiAS. Does anyone have a suggestion for me?

truefriendcz · Thu Dec 23, 2021 11:40 am

Why is version 7.1.1 still released as stable when it has quite a many issues?

pe1chl · Thu Dec 23, 2021 11:44 am

As I said that wasn't a complaint but a feedback from the Mikrotik users in a commercial environment not in a lab where everything is working. I'd love to migrate (and I've tried to do so) but simple migration from v6 to v7 doesn't work and overall, it looks like v7 is still a "test" version, which has issues even with Winbox.

You are right, RouterOS v7 is not ready for production in cases where BGP or OSPF is involved. MikroTik is pushing it as "stable" and that suggests to some people that it is stable and reliable software, but it isn't complete. You certainly cannot migrate a BGP setup from v6 to v7 without problems yet.

But remember, when e.g. Microsoft releases a new Windows version, they also promote it as the best thing ever and the most stable ever, while many users will face difficulties in their particular usage scenario. Things there software relies on that are no longer supported, new bugs, irritating new features they did not ask for.
With RouterOS it is the same. And similar to Windows versions, it helps to wait a while for the initial problems to be ironed out. There still will be problems left, but at least there will be fewer unintended omissions.
(I assume MikroTik will still implement BFD, Aggregation, a well-working connection status display, etc etc. Until that, it is not usable in production for me)

pe1chl · Thu Dec 23, 2021 11:48 am

Why is version 7.1.1 still released as stable when it has quite a many issues?

I think because
- there is more and more hardware which only supports v7 and requires a "stable" OS.
- when not moving large numbers of users over to v7, many of the issues will not be found and will still appear later when the move is made.

Depending on your usage, v7 can work quite well. Or you may encounter bugs and omissions. The experience will not be the same for everyone.
E.g. on my hAP ac2 that I run only as a WiFi AP in bridge mode, v7.2rc1 works without issue.
On my RB4011 that works as a router using lots of features, I can use 7.1.1 but not 7.2rc1 (it has too many issues). With 7.1.1 I have to work around problems, but it runs without crashing.

DL7JP · Thu Dec 23, 2021 3:13 pm

Hi,
I updated a RB1100AHx4 from 6.49.2 to 7.1 then 7.1.1 and ended up in a strange situation: The router works fine, but asa I reboot it all is screwed up: All bridges are gone, so all IPs are missing, no access via MAC-Telnet. After resetting it and restoring the 7.1 backup with 7.1.1 all works fine again, but a reboot srews it all up.
Any suggestions how I coud fix this situation besides downgrading to 6.49.2 and waiting for a more stable 7.x Version?
- Joachim.
Welcome to the club :) Quick fix is downgrading, sorry. I had to do the same, so waiting for 7.x.x version, which works.

Rather than downgrading (I need wireguard), I restored the 7.1 backup again under 7.1.1, then I deactived and in turn activated all interfaces and bridges. Now I can reboot.
All this is a bit suspicious, I will see how stable it is.

Chaosphere64 · Thu Dec 23, 2021 3:30 pm

I had a rough patch when upgrading my RB4011 from RouterOS 6.49.2, too. Uninstalled extra packages, upgraded to 7.x, reboot, no problem. Saved 7.x backup and rsc to my computer. After firmware upgrade the device rendered unusable. IP addresses were gone, no access even when trying a L2 connection while being directly connected to the device. I netinstalled it, upgraded RouterOS, reset config, rebooted, upgraded firmware, reboot without config. Now the device was working with default settings. I tried to restore the 7.x backup which worked.

I reached my goal and RouterOS 7.x works now, but the process was not very pleasant and surely not something that will scale well ...

pe1chl · Thu Dec 23, 2021 3:57 pm

I reached my goal and RouterOS 7.x works now, but the process was not very pleasant and surely not something that will scale well ...

Well, that is now the main elephant in the room. We have many routers on remote locations (difficult physical access) and we really need bullet-proof upgrade procedures that never result in bricked devices or bootloops, or other failures that result in problems remotely accessing the device (including BGP migration).
Before we are in that situation, we need to remain at v6.

Thu Dec 23, 2021 4:17 pm

Unless you require something very specific from v7 in all your devices, you can safely stay on latest v6, it is secure and stable. There is no need to do mass upgrades to v7. You can simply upgrade over time, or introduce v7 only when adding new devices.

Halfeez92 · Thu Dec 23, 2021 4:34 pm

Unless you require something very specific from v7 in all your devices, you can safely stay on latest v6, it is secure and stable. There is no need to do mass upgrades to v7. You can simply upgrade over time, or introduce v7 only when adding new devices.

If only RB5009 can use v6! I would not care if v7 got bugs or not.

buset1974 · Thu Dec 23, 2021 5:42 pm

when the routing/bgp/session prefix count will be fixed?
or maybe you think that it's not so important?

Thu Dec 23, 2021 10:40 pm

Unless you require something very specific from v7 in all your devices, you can safely stay on latest v6, it is secure and stable. There is no need to do mass upgrades to v7. You can simply upgrade over time, or introduce v7 only when adding new devices.
If only RB5009 can use v6! I would not care if v7 got bugs or not.

I was answering about difficulty performing mass upgrade from v6.
If your device came with v7 preinstalled, what is there to worry about? What bugs?

ghostt · Fri Dec 24, 2021 12:39 am

But remember, when e.g. Microsoft releases a new Windows version...

:)))))))) I even couldn't think of what to say :))))))) But yes, I know exactly what you're talking about. Well, thank you for your thoughts and let's hope that'll happen sooner rather than later.

msatter · Fri Dec 24, 2021 12:58 am

New Windows version == more bugs and more vulnerabilities. It's a Microsoft product after all!

ghostt · Fri Dec 24, 2021 2:47 am

I realise that BGP is not ready yet but maybe it can help to those who is working on it. Test router: CRS125-24G-1S-2HnD, v7.1.1. has a BGP session running to CCR v6.49.2. After a while (usually it happens within an hour) CRS v7 displayed BGP session still up with uptime in the picture (may need to close/reopen Winbox to see that value), CCR v6 displayed the corresponding peer down with state "open sent". As a result, no BGP created dynamic routes existed in the routing table. Rebooting v7 router helped, the test router BGP session went to normal, CCR v6 peer went to "established". But after about 50 minutes, BGP dynamic routes had disappeared again. After closing/reopening Winbox v7 BGP session uptime jumped to similar value shown in the picture. Rebooting helped again.

P.S.
Merry Christmas to everyone and wish you all the best!

ka4opi4a · Fri Dec 24, 2021 1:51 pm

Yesterday updated my home hAP AC from 6.49.2 to 7.1.1. Now I get very low wifi speeds over both wifi networks. Anyone else with the same issue ?

Fri Dec 24, 2021 1:59 pm

Make a separate topic about your wifi woes and include some more info, like screenshots from your router registration table and your computer wifi signal stats.

pe1chl · Fri Dec 24, 2021 2:20 pm

when the routing/bgp/session prefix count will be fixed?
or maybe you think that it's not so important?

Reading an earlier reply to that, I fear that in some version this value will just disappear.
It is apparently difficult in the current BGP implementation to keep this count in the context of the connection.
Suggestions are made how to retrieve it using a query on the routing table, but of course that only helps for the occasional debugging case, not to keep an overview.

On one of our routers we have 54 BGP peers (in an isolated network, not internet BGP) and we run v6, with a window on BGP peers always open that shows an overview of the peers including prefix count.
A quick glance on that window shows certain problems quickly. That can not easily be replaced by doing queries on the routing table. So when upgrading to v7 we will lose this convenience.
(another issue is that the BGP Peer Cache window does not update when the status changes. so you do not see when connections go offline without refreshing it all the time...)

pe1chl · Fri Dec 24, 2021 3:41 pm

Hello, colleagues!
On hap ac2 I noticed this bug in ip/routes (WebFig):

That is not really a bug, it is just a cosmetic issue (explainable from the internal workings). The routes still work OK.

sunblade87 · Fri Dec 24, 2021 4:17 pm

BGP/Connection/Filter/OutputNetwork not working in Winbox. Instead of address-list names 'unknown' items are shown.

gotsprings · Fri Dec 24, 2021 5:41 pm

Make a separate topic about your wifi woes and include some more info, like screenshots from your router registration table and your computer wifi signal stats.

Why?

I have a separate thread about how Zerotier bridging works different on 7.1 vs 7.1RC4. I don't see any posts in it. Yet you seem to read this one.

ka4opi4a · Fri Dec 24, 2021 5:51 pm

Yesterday updated my home hAP AC from 6.49.2 to 7.1.1. Now I get very low wifi speeds over both wifi networks. Anyone else with the same issue ?

Try to turn off your hap by the option in system, mine when I turn off in version 7 it turns on again.

Just try this - the device turns off and stay off, doesn't turn back on.

SergeS · Fri Dec 24, 2021 9:31 pm

Why "Check for Update" does not see v7 automatically?
Is this feature or bug?

gotsprings · Fri Dec 24, 2021 9:33 pm

On a positive note...

I have several WiFi devices that have stayed connected for over 2 days to my Audience, running the new WAVE2 wifi drivers.

I get offline reports from these things several times a day on the regular. So this is an improvement!

SergeS · Fri Dec 24, 2021 9:33 pm

Why "Check for Update" does not see v7 automatically?
Is this feature or bug?

Ok, found by myself :-), channel needs to be "upgrade".

Is this worthful to upgrade?

pe1chl · Fri Dec 24, 2021 9:54 pm

When you need to ask these questions, it probably is not yet the time for you to upgrade.
At least read the 116 messages above to see if there is any reported problem that would apply to your usage of the device.
As you can see, 6.49.2 is the "stable" release for your device.

SergeS · Fri Dec 24, 2021 10:05 pm

When you need to ask these questions, it probably is not yet the time for you to upgrade.
At least read the 116 messages above to see if there is any reported problem that would apply to your usage of the device.
As you can see, 6.49.2 is the "stable" release for your device.

I have read majority of it, in the process, seems like not so many complains...
v7.1.1 is in stable release tree, btw.

p.s. Will wait a little bit more :-(

pe1chl · Fri Dec 24, 2021 10:24 pm

Yes, for the typical usage of a hAP ac, there will likely not be many issues that you will encounter in 7.1.1
Still, don't come whining here when there are new problems and there isn't any improvement.

mducharme · Sat Dec 25, 2021 3:50 am

I have several WiFi devices that have stayed connected for over 2 days to my Audience, running the new WAVE2 wifi drivers.
I get offline reports from these things several times a day on the regular. So this is an improvement!

I have wanted to test wave2 properly at home, but am unable to with the lack of support for 4 address mode (i.e. WDS or station-bridge). I hope MikroTik will be addressing this at some point soon.

BlackVS · Sat Dec 25, 2021 11:49 am

Upgraded CCR1009 from 7.1 to 7.1.1 and... got 100% CPU load (usually it was 3..4%). WTF!!! sorry for expression.

BlackVS · Sat Dec 25, 2021 11:59 am

One more screenshot with 7.1.1 - 2..3Mbit load fully kills 9 core router... it is crazy!!!! Downgrading to 7.1. - CPU load again ~0%. Rhetorical question - do you any firmware tests using different hardware before releasing "stable" versions?
PS: downgrade not helped - within few minutes load again about 70..90%. From Zabbix you can see that before 11:30 (7.1) all was ok, after - 100% loads (on 7.1.1 and 7.1. after downgrade). Pauses - it is reboots

BlackVS · Sat Dec 25, 2021 12:47 pm

Downgraded to 6.49.2.... "enjoying the silence" %) (CPU is again ~0% load)

Jotne · Sat Dec 25, 2021 1:19 pm

You dont have a picture of "Profile" while CPU running high try to see what module cause the problem?
I only see picture while all are ok.

Halfeez92 · Sat Dec 25, 2021 3:48 pm

Bug on Route List Rules where I cannot drag the rules. Please check!

routelist.png

BlackVS · Sat Dec 25, 2021 4:08 pm

You dont have a picture of "Profile" while CPU running high try to see what module cause the problem?
I only see picture while all are ok.

If look more carefully %) - on one screenshot above you can see profile open for 7.1.1 (I attached it again here) - networking module causes 100% load. Looks like some "software produced internal network loop". On interfaces tab you can see that in/out traffic is low. Right now I'm on the same config on 6.49.2. - still about zero CPU load... Strange that being on 7.1 before upgrading to 7.1.1 CPU load was low but after upgrading (and afterward downgrade to 7.1) - CPU load is 100%. Looks like upgrade 7.1. to 7.1.1 changed some structure(s) inside firmware which left the same after downgrade to 7.1. Now I'm not intending to upgrade my CCRs (~10 pcs) to 7.x nearest few months until major bugs fixed (I hope they will be fixed, incl.broken mangle chain for CCR1xxx).

infabo · Sat Dec 25, 2021 6:23 pm

Does anyone know how to debug/log a device lockup? With lockup I mean, that the device is not responding to anything. Not even the "Mode"-button at my chateau - that triggers dark-mode (all led off) is not responding in that device-state.

harry66 · Sat Dec 25, 2021 6:52 pm

RB3011:
Upgrade from 6.49.2 did not work out:
- Unreliable ping to a switch (CSS326, LACP, VLAN trunk) directly connected (90% packet loss)
- web proxy was disabled during upgrade

Maybe as an effect:
- All Capsman connections lost

What was working:
- PPPoE to provider over VLAN
- Direct connection of laptop via GigE

Unable to determine error source for connectivity problems during longer troubleshooting session
- no hint from log
- no error frames count
- no faulty LACP indication
- no xSTP messages
--> totally clueless, maybe I overlooked something, but 6.49.2-->7.1.1 in my case failed with very basic function

BR
Uwe

Sob · Sat Dec 25, 2021 7:24 pm

Bug on Route List Rules where I cannot drag the rules. Please check!

Not a bug, you have sorting on last column, but you need the first one (with #).

Sat Dec 25, 2021 10:53 pm

Make a separate topic about your wifi woes and include some more info, like screenshots from your router registration table and your computer wifi signal stats.
Why?

I have a separate thread about how Zerotier bridging works different on 7.1 vs 7.1RC4. I don't see any posts in it. Yet you seem to read this one.

Sorry about that, I'll stop, to keep the topic clean.

Halfeez92 · Sun Dec 26, 2021 6:49 am

Bug on Route List Rules where I cannot drag the rules. Please check!
Not a bug, you have sorting on last column, but you need the first one (with #).

Oh my bad, maybe my colleague did some sorting before. I have not noticed. Thank you again sir.

Jotne · Sun Dec 26, 2021 9:32 am

If look more carefully %) - on one screenshot above you can see profile open for 7.1.1

From latest picture, it seems that 7.1.1 uses one CPU compare to the 6.49 that uses 8?

BlackVS · Sun Dec 26, 2021 10:12 am

If look more carefully %) - on one screenshot above you can see profile open for 7.1.1
From latest picture, it seems that 7.1.1 uses one CPU compare to the 6.49 that uses 8?

OMG, in resource tab you can see that total load is 89% i.e. not "uses one CPU". I did one screenshot for one CPU due to profile window just allows to choose only one CPU for details. But just little bit above was screenshot with 7.1.1, were show all 9 CPUs, 8 of 9 are 100% load, IRQ is 90..97%.

Znevna · Sun Dec 26, 2021 10:28 am

So 7.1.1 and 7.2rc1 are versions to stay away from?
Wonder what common change causes this CPU usage on both versions.
Is it triggered by something in the config? does it behave the same after a config reset?

Jotne · Sun Dec 26, 2021 11:45 am

So 7.1.1 and 7.2rc1 are versions to stay away from?

If you read the may comments in the 7.x threads, you see the following comments.

Do your router work fine with 6.x software and you do not need any of the new 7.x functions, stick with 6.x

Znevna · Sun Dec 26, 2021 11:46 am

How is that in any way relevant to what I've asked above?
: the high CPU usage in these two versions.

Jotne · Sun Dec 26, 2021 12:59 pm

You see what i did reply to in the quote. All v7 are still in early stage. If you do not need it, and all are ok with 6.x, use 6.x
And if 7.x works fine, no problem use it. Its up to you to test to see if it fits your needs.

Znevna · Sun Dec 26, 2021 1:05 pm

Dude, so far it looks like a bug in 7.1.1 and 7.2rc1, these topics are for problems related to these specific versions, please don't spam the forums with offtopic talk. Wasted 3 posts for nothing.
For general "don't use v7, v7 bad" please open another topic.
Thank you.
So, on topic, did you encounter abnormal high CPU usage on 7.1.1 and 7.2rc1? or not? How did you fix it? did you find what causes it?

pe1chl · Sun Dec 26, 2021 1:08 pm

The newly added "uptime" field in the BGP connections list does not work correctly. When the connection is down, it keeps counting up from the connection uptime of the previous session. Only when the connection comes back up, it starts counting from zero.
When the connection is not up, that field should be blank or at best showing 00:00:00 all the time.

Another problem with the BGP connections window is that it only updates when you explicitly refresh it (F5 or change of tabs). It should update whenever the status of a connection changes, as in v6.

ivicask · Sun Dec 26, 2021 2:56 pm

Dude, so far it looks like a bug in 7.1.1 and 7.2rc1, these topics are for problems related to these specific versions, please don't spam the forums with offtopic talk. Wasted 3 posts for nothing.
For general "don't use v7, v7 bad" please open another topic.
Thank you.
So, on topic, did you encounter abnormal high CPU usage on 7.1.1 and 7.2rc1? or not? How did you fix it? did you find what causes it?

Not sure what is causing it exactly, some say its larger address lists, i did send supout to support i hope they figure it.
As i wrote, my HAPC2 crashes with out of memory crash after 30mins on 7.2rc1 and CPU hangs around 35%(attached pic) with zero traffic, while on 7.1.1 CPU is ok but still leaks memory and crashes after 1 week.
At work our 4011 was sitting at 500MB! of RAM usage after 3 weeks on v7.1.

shavenne · Sun Dec 26, 2021 6:51 pm

I have two CRS328-24P-4S+ and both are randomly losing links on SFP+ (different modules .. fibre, dac and 10gbase-t. On one of the switches fibre and 10gbase-t always losing its connection at the exact same time) with 7.1.1.

I had to go back to 6.49.2.

pe1chl · Sun Dec 26, 2021 7:00 pm

My device is RB4011 with wi-fi. Before update i had Ros ver. 6.49.2, After update to Ros 7.1.1 my router became a brick (after 30 minutes uptime ). I see that i have l2tp+ipsec client, but after disable ipsec in l2tp client- my router work fine! I think my case can help users for upgrade to Ros7

I have a RB4011 with WiFi as well, and it is running two L2TP+IPsec clients, but there is no problem. It has another IPsec tunnel as well.
Maybe you need to export the config to a file, reset the config to empty (use winbox in MAC mode for the connection), then import the file again.
I have done that before when I sustpected a config problem and maybe it is the reason I do not have problems now.

pe1chl · Sun Dec 26, 2021 7:20 pm

Can you write me your IP-IP sec- Proposals and Profiles?

/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha256,sha1 enc-algorithms=aes-256-cbc,aes-128-cbc

The profile is default

mjoksimovic · Sun Dec 26, 2021 7:30 pm

CCR1009-8G-2S+ (two different devices), CCR1036-8G-2S+EM, RB4011iGS+ and RB1100AHx4, before upgrade to version 7, every of these routers worked perfectly with no freezing. After upgrade, every router freeze after a few hours of work. Kernel error message.

infabo · Sun Dec 26, 2021 7:48 pm

Please Mikrotik, please I beg you. Please find a way to generate a supout.rif before a device locks up - so we can send it to support. I have these lockups for months now and it is frustrating (Chateau v7 only)

pe1chl · Sun Dec 26, 2021 7:50 pm

Not work with your sethings. Can you initiate a trafic thru your l2tp+ipsec tunel? for example rdp connection from your
pc on RB4011 to remote host on vpn? After that your router works fine?

Yes, no problem at all. I use these L2TP tunnels to make connections between private networks (using BGP for autorouting) and it just works. They all are connecting to routers running v6.49 at the moment.
Other tunnels are GRE/IPsec and they work as well. In practice they all use sha256 (sha128 only present to talk to older routers but there are no active connections to those at the moment).

I should say that my RB4011 has *never* crashed during all my experiments with v6 and v7. There is a problem when using v7.2rc1 but it still does not crash, it just doesn't route properly. That is why I use 7.1.1 now.

osc86 · Sun Dec 26, 2021 11:50 pm

@infabo

/sys watchdog/set watchdog-timer=yes automatic-supout=yes

look for a file named autosupout.rif in the root directory after the router has locked up / rebooted by watchdog timer.

nithinkumar2000 · Mon Dec 27, 2021 5:40 am

Getting Kernal Failure....

Capture.JPG

mducharme · Mon Dec 27, 2021 6:36 am

I am encountering higher CPU load than normal on mipsbe devices such as the hAP ac lite and hAP ac. Even with just a few Mbps of download the CPU goes up to 25% on the hAP ac which is a lot higher than I would expect. When they hit too high CPU usage, the wireless malfunctions and drops - it doesn't even take 100% usage, it seems to drop even at around 50% (these are single core devices). Wifi connectivity is stable as long as traffic levels are minimal. In my case I am just using the hAP ac lite as a bridge, not a router, so this should have nothing to do with route caching.

EDIT: I tried setting an AP tx limit and client tx limit on the RB4011 AP for the client hap ac lite wireless bridge client. Even a small limit (5Mbps) still disconnected when running a speed test on speedtest.net.

manuek · Mon Dec 27, 2021 7:05 am

Hello people, I have a question, how do I place the traffic inside a TE tunnel? because it does not work the same as in RouterOS v6

No13TGP · Mon Dec 27, 2021 8:23 am

Upgrade 7.1.1 vers. wAP Ac (architecture mipsbe). There are still problems with Upload speed. This is critically low. There was no such problem with version 6.49.2!

Same here, after the upgrade 5ghz wifi will not work properly.

Running on the default config all seems to be ok (low volume; no issues)
But when transfer speeds reach > 100mbit the throughput drops to 0 and stays there for several seconds.
Every 10 seconds or so it tries to restart the transfer and fails almost immediately.

mducharme · Mon Dec 27, 2021 8:26 am

But when transfer speeds reach > 100mbit the throughput drops to 0 and stays there for several seconds.
Every 10 seconds or so it tries to restart the transfer and fails almost immediately.

Yes this is the issue I reported two posts above with the hAP ac (mipsbe) and hAP ac lite (mipsbe). It is not only that the throughput drops to zero, the client actually gets disconnected, if you look in the registration table.

Vooray · Mon Dec 27, 2021 11:18 am

strange routing issue

> /system/package/print 
Columns: NAME, VERSION
# NAME      VERSION
0 routeros  7.1.1

first of all i can add multiple same routes in RIB. That is strange:

> /ip route/print where 7.7.7.7/32 in dst-address 
Flags: D - dynamic; X - disabled, I - inactive, A - active; c - connect, s - static, r - rip, b - bgp, o - ospf, d - dhcp, v - vpn, m - modem, y - copy; H - hw-offloaded; + - ecmp 
 #       DST-ADDRESS        GATEWAY            DISTANCE
   ...cut...
 3  As + 7.7.7.7/32         IFACE-WARP                1
 4  As + 7.7.7.7/32         IFACE-WARP                1
 5  As + 7.7.7.7/32         IFACE-WARP                1
 1  As + 7.7.7.7/32         IFACE-WARP                1

next i can not delete all of them:

 /ip/route> remove [find dst-address =7.7.7.7/32]
no such item (4)
 /ip/route> /ip route/print where 7.7.7.7/32 in dst-address 
Flags: D - dynamic; X - disabled, I - inactive, A - active; c - connect, s - static, r - rip, b - bgp, o - ospf, d - dhcp, v - vpn, m - modem, y - copy; H - hw-offloaded; + - ecmp 
 #       DST-ADDRESS        GATEWAY            DISTANCE
 4  As + 7.7.7.7/32         IFACE-WARP                1
 1  As + 7.7.7.7/32         IFACE-WARP                1
 /ip/route> remove numbers=4,1
no such item (4)

infabo · Mon Dec 27, 2021 12:05 pm

@infabo
Code: Select all
/sys watchdog/set watchdog-timer=yes automatic-supout=yes
look for a file named autosupout.rif in the root directory after the router has locked up / rebooted by watchdog timer.

This config I have already in place. I guess it is default-config already.
Autosupout seems only to work for kernel panic, where the watchdog can reboot the device after capturing the autosupout file. Had kernel panics in the past and the autosupout.rif I could hand over to support. But now the device gets totally unavailable and no file is created.

mjoksimovic · Mon Dec 27, 2021 12:08 pm

Getting Kernal Failure....

Capture.JPG

The same problem.

pe1chl · Mon Dec 27, 2021 12:30 pm

You can generate supout.rif immediately after this happens and send it to support. I think there is more info in the supout.rif than in the error log.

fcucci · Mon Dec 27, 2021 1:23 pm

Hello,
I have installed routeros 7.1.1 on a CCR1009-7G-1C-1S+ (tile) but I don't see packages listed; on terminal too:

Immagine 2021-12-27 122604.jpg

mkx · Mon Dec 27, 2021 1:31 pm

Hello,
I have installed routeros 7.1.1 on a CCR1009-7G-1C-1S+ (tile) but I don't see packages listed; on terminal too:
Immagine 2021-12-27 122604.jpg

In ROSv7 only a few non-essential things come as packages, everything else is in a single monolithic intallation package.

accarda · Mon Dec 27, 2021 2:16 pm

I have tried to implement a recursive route (like in ros v6), but I don't see it working, unless the syntax has completely changed.
The route gets IUSH as invalid and unreachable.
Is this not implemented yet in ros v7.1.1 ?

akarpas · Mon Dec 27, 2021 2:18 pm

updated my ccr 1009 now its bricked not booting not loading kernel

rushlife · Mon Dec 27, 2021 3:17 pm

updated my
ccr1036
2x ccr1009
2x ccr1016
rb5009
rb4011 and couple of different models too and....

no problemo

ormandj · Mon Dec 27, 2021 3:41 pm

I have two CRS328-24P-4S+ and both are randomly losing links on SFP+ (different modules .. fibre, dac and 10gbase-t. On one of the switches fibre and 10gbase-t always losing its connection at the exact same time) with 7.1.1.

I had to go back to 6.49.2.

I have the same problems. SUP-68278 is there if you want to submit a report and reference it. Setting the modules to 1G fixes it, but I hope Mikrotik will fix this soon, as it's a serious problem impacting a lot of users. 7.1 and 7.1.1 both cause it for me, primarily at 5 minute intervals.

akarpas · Mon Dec 27, 2021 4:59 pm

updated my ccr 1009 now its bricked not booting not loading kernel

Had to reisntall using Netinstall sad had to do it but was a great experience how to recover device from such a problem.

mjoksimovic · Mon Dec 27, 2021 5:47 pm

updated my
ccr1036
2x ccr1009
2x ccr1016
rb5009
rb4011 and couple of different models too and....

no problemo

Let us know the status after few hours or days. ;-)

fcucci · Mon Dec 27, 2021 6:00 pm

Hello,
I have installed routeros 7.1.1 on a CCR1009-7G-1C-1S+ (tile) but I don't see packages listed; on terminal too:
Immagine 2021-12-27 122604.jpg

In ROSv7 only a few non-essential things come as packages, everything else is in a single monolithic intallation package.

OK and how can I uninstall wireless package ?

pe1chl · Mon Dec 27, 2021 6:38 pm

OK and how can I uninstall wireless package ?

You cannot. This is no longer possible in v7 (same for MPLS, Hotspot, CapsMan etc).

mducharme · Mon Dec 27, 2021 6:52 pm

I have tried to implement a recursive route (like in ros v6), but I don't see it working, unless the syntax has completely changed.

This has been covered many many times. target-scope now has to be greater than scope instead of being greater than or equal to scope. Increase your target-scope by 1 and it should work.

accarda · Mon Dec 27, 2021 7:01 pm

This has been covered many many times. target-scope now has to be greater than scope instead of being greater than or equal to scope. Increase your target-scope by 1 and it should work.

Thanks for the heads up, I was missing this info.

akarpas · Mon Dec 27, 2021 7:52 pm

not sure why but after update as I have said my ccr 1009 didnt boot anymore had to use netinstall to reimage and now its not recognising mikrosd car tried 2 of them no luck

pe1chl · Mon Dec 27, 2021 8:08 pm

not sure why but after update as I have said my ccr 1009 didnt boot anymore had to use netinstall to reimage and now its not recognising mikrosd car tried 2 of them no luck

You could have read both of these things above. It really pays off to read the release topic before attempting to upgrade!

AlexPC · Mon Dec 27, 2021 8:13 pm

Did netinstall, it also does not help to reset all settings, 1 wireless interface does not appear. ( 7.1.1 Stable | 7.2rc1 Testing)
DefConf gen: Unable to find wifiwave2 interface(s)
error while running customized default configuration script: interrupted

mducharme · Mon Dec 27, 2021 8:15 pm

Did netinstall, it also does not help to reset all settings, 1 wireless interface does not appear. ( 7.1.1 Stable | 7.2rc1 Testing)

It gives a warning in the manual that on the RB4011 using wifiwave2 will result in not having a 2.4ghz interface. Remove wifiwave2 and the interface will appear again.

Also, the default configuration script doesn't have the right syntax for wifiwave2, so if you netinstall with wifiwave2 or if you reset to defaults with wifiwave2 installed then it will fail to load. If you want to use wifiwave2, you should netinstall without it or reset to defaults without it, and then install wifiwave2 after.

akarpas · Mon Dec 27, 2021 8:25 pm

not sure why but after update as I have said my ccr 1009 didnt boot anymore had to use netinstall to reimage and now its not recognising mikrosd car tried 2 of them no luck
You could have read both of these things above. It really pays off to read the release topic before attempting to upgrade!

what release its considered to be stable version free of bugs isnt?

akarpas · Mon Dec 27, 2021 8:27 pm

Looks like SD cards still do not mount on CCR1009-7G-1C-1S+, same on 7.2rc1.

for me the same on 7.1.1

mducharme · Tue Dec 28, 2021 12:42 am

what release its considered to be stable version free of bugs isnt?

"Free of bugs"? No, that's not what MikroTik's definition of "stable" means. You won't find any vendor where a "stable" release is 100% free of bugs, it just doesn't happen. "Stable" in MikroTik's case means that they felt that it worked well enough for about 90% of users and use cases.

Do you also upgrade to Windows 11 a week or two after it came out and complain about bugs and say it must also be bug free? RouterOS v7 is a complete rewrite of probably about half the code. It isn't some little upgrade. They will be ironing out bugs for months.

akarpas · Tue Dec 28, 2021 1:57 am

what release its considered to be stable version free of bugs isnt?
"Free of bugs"? No, that's not what MikroTik's definition of "stable" means. You won't find any vendor where a "stable" release is 100% free of bugs, it just doesn't happen. "Stable" in MikroTik's case means that they felt that it worked well enough for about 90% of users and use cases.

Do you also upgrade to Windows 11 a week or two after it came out and complain about bugs and say it must also be bug free? RouterOS v7 is a complete rewrite of probably about half the code. It isn't some little upgrade. They will be ironing out bugs for months.

it might have a minor bugs , minor is acceptable but not then device gets in to bricked mode were you have to re-image it. Other thing device shouldn't have a a problem like not seeing microSD card while device has only funny 128mb of storage ( we can start argue why I should need more storage, bur its plenty of reasons for this). So bugs like these are critical and should not happen in stable release.
Other wise i have to say in 4 years experience with Mikrotik this is first time I have such a disappointment with a hope it will be fixed.
Next is regarding windows 11: I participated in dev stage in pre-release stage and in final stage, I have 3 of my personal and a lot of business PC.s upgraded to win 11 and starting from dev stage I had no such a critical bugs. So.......

mducharme · Tue Dec 28, 2021 2:05 am

it might have a minor bugs , minor is acceptable but not then device gets in to bricked mode were you have to re-image it.

What version was it on before you upgraded?

Re: Win11 I am on Windows 11 and am experiencing some extremely annoying bugs, mostly to do with 4K scaling and the start menu stops working until I restart explorer. Also it happened last week where all the menu bars started opening *behind* the windows instead of in front of them so I couldn't see the menu options for anything and had to reboot to fix it. So I haven't been impressed by it so far.

akarpas · Tue Dec 28, 2021 2:17 am

it might have a minor bugs , minor is acceptable but not then device gets in to bricked mode were you have to re-image it.
What version was it on before you upgraded?

Re: Win11 I am on Windows 11 and am experiencing some extremely annoying bugs, mostly to do with 4K scaling and the start menu stops working until I restart explorer. Also it happened last week where all the menu bars started opening *behind* the windows instead of in front of them so I couldn't see the menu options for anything and had to reboot to fix it. So I haven't been impressed by it so far.

question do you have upgrade or clean install ? is you hardware fully supported?
It was version 7.1 :) just so simple

mducharme · Tue Dec 28, 2021 2:41 am

question do you have upgrade or clean install ? is you hardware fully supported?

Yes, it is fully supported, and I did an upgrade.

7.1 to 7.1.1 I would not expect to give major issues like that. I do not have a tilera based system to test on, but everything I have upgraded has gone fine from 7.1 to 7.1.1.

akarpas · Tue Dec 28, 2021 2:52 am

question do you have upgrade or clean install ? is you hardware fully supported?
Yes, it is fully supported, and I did an upgrade.

7.1 to 7.1.1 I would not expect to give major issues like that. I do not have a tilera based system to test on, but everything I have upgraded has gone fine from 7.1 to 7.1.1.

I have re-imaged to 7.1.1 from this point it worked ok, but as i got a problem with SD card I have downgraded to 7.1 and still had the same sd card issue, so nothing stopped me to update back to 7.1.1 and this time all went ok no problems , exempt not working SD card and dccp, sctp and udp lite firewall service ports showing as invalid apart of this all works fine. I saw somebody else has reported the same issue with service ports on the same device after upgrade to 7.1

mducharme · Tue Dec 28, 2021 3:01 am

dccp, sctp and udp lite firewall service ports showing as invalid

These service ports have shown as invalid since the first v7 beta on all devices. I think that these helpers have been removed from the newer Linux kernels as they aren't used anymore, but MikroTik hasn't removed the helpers from the list yet. It probably isn't very high up on their list of priorities since it doesn't cause any actual issues.

truefriendcz · Tue Dec 28, 2021 11:38 am

BUG:
After connecting to the Shrew Soft VPN Client service, the connection to any server connection is dead after about five minutes (for all connections from LAN and router). The entire router stops transmitting data. Loss of Internet connectivity. The routing table, dns, etc. are fine, but the internet connectivity from the router and from the entire LAN simply does not work.
Tested on the router after reset with default configuration.
Tested on RouterOS v7.1.1 stable.

pe1chl · Tue Dec 28, 2021 11:50 am

This kind of report is not very useful without information like "what kind of VPN is this" (preferably show the export of the configuration with account info masked), and what type of router you use. Some recent VPN issues really depend on the architecture of the router (TILE, ARM, MIPS etc).

rpingar · Tue Dec 28, 2021 1:35 pm

we have restricted the issue about icmp that stop working after several hours of operation on x86.
It is related to bonding MTU >1500.
To reproduce, on a v.7.1.1 router configure two bond interface, one with mtu=1500 and the second with mtu=1600
Do an heavy and costant forward of traffic through the bond interfaces and after 36/48 hours the router:
- is not able to ping ecternal hosts
- is not able to ping-check the static routes
- respond correctly to ping from external hosts

Using the same hardware, same config changing only mtu=1500 on all bonding interfaces the router remains stable!

We think it is not a platform (x86) related issue, but a general issue.
regards
Ros

Note · Tue Dec 28, 2021 1:46 pm

upgrading to 7 broke my 2 wan failover routing.
This was my route at 6 that was working just fine

/ip route
add distance=1 gateway=1.0.0.1 routing-mark=to_WAN2
add distance=1 gateway=1.1.1.1 routing-mark=to_WAN1
add check-gateway=ping distance=1 gateway=1.1.1.1
add check-gateway=ping distance=2 gateway=1.0.0.1


add check-gateway=ping distance=1 dst-address=1.0.0.1/32 gateway=192.168.2.1 scope=10
add check-gateway=ping distance=1 dst-address=1.1.1.1/32 gateway=192.168.0.1 scope=10

The 4 first lines r the same that they appear in winbox as red.

Any idea of what to do now?

truefriendcz · Tue Dec 28, 2021 1:56 pm

This kind of report is not very useful without information like "what kind of VPN is this" (preferably show the export of the configuration with account info masked), and what type of router you use. Some recent VPN issues really depend on the architecture of the router (TILE, ARM, MIPS etc).

"what kind of VPN is this":
https://www.shrew.net/download/vpn/vpn- ... elease.exe
This is simple VPN client (i am installed as Standard edition selected in install wizard)... and use this profile in attachment (Profile.zip) (import only after install and can use).

Profile.zip

Tested on ARM tree devices:
1. MikroTik hAP ac2
2. MikroTik hAP ac3
3. MikroTik hAP ac3 LTE6 kit

RouterOS 7.1.1 (Stable) in default configurations (after reset config)

pe1chl · Tue Dec 28, 2021 2:49 pm

What is not clear to me: is this a program you run on a separate PC, or did you create an IPsec VPN on your router to connect to this service?
When you run it on a PC, the router is performing NAT only and it could be the settings for connection tracking are incorrect or that this function is broken in the current RouterOS.
It could also be a problem in DSCP handling. I experience this myself on the ARM platform but that particular problem was also present in v6.
I think to reproduce that, you have to have internet connection over PPPoE on top of a VLAN (discussed above as problematic by other users as well).
In my situation that problem is not reproducible on the MIPSBE platform (RB2011).

accarda · Tue Dec 28, 2021 2:50 pm

I have migrated some more device to Ros v7.1.1 and I have noticed this issue with RoMON compatibility; I still have some device on Ros v6.48.6 though.
All devices have a management VLAN being defined.
All devices that are still on Ros v6 are seen on RoMON neighbors list.
Devices on Ros v7.1.1 are NOT seen if I enable VLAN directly on switch chip (this is done to avoid loosing hardware offload at the bridge level).
Devices on Ros v7.1.1 which are not using VLAN setup (neither bridge or switch setup), but have a VLAN interface being defined are seen properly.
Devices on Ros v7.1.1 which are using VLAN setup on bridge (CRS3xx switch) are seen on RoMON.

infabo · Tue Dec 28, 2021 6:45 pm

You miss the "zone" parameter?

mducharme · Tue Dec 28, 2021 10:36 pm

I am having the same issue with station-bridge on a hap ac lite connecting to an RB4011, where it will lose connection when doing a speedtest. It only stays reliably connected with very light traffic. I am not using wifiwave2, so station-bridge works. The issue is obviously on the hap ac lite side.

infabo · Tue Dec 28, 2021 11:55 pm

https://wiki.mikrotik.com/wiki/Manual:Tools/Dynamic_DNS

toxicfusion · Wed Dec 29, 2021 5:20 am

Hello,
I have some problem from last update.
mikrotik.png
The Hap ac lite is connected to RB4011 by 5GHz interfaces where RB4011 is ap(wifi wave2) and hap ac lite is a station.
When I add the EOIP to bridge, where I have also lan1-5 and 2.4GHz (the eoip is between RB4011 and hap ac lite).
My wifi on hap ac lite is not stable for example doing speedtest the connection is getting lost.
I got error like this:74:4D:28:D9:DC:98@5ghz: lost connection, received deauth: class 2 frame received (6)
The rest of devices connected to RB4011 by Wifi works great.
And now the most funny thing. Deleting the eoip, creating simple masquerade and seting ip and dhcp sever on bridge is helpful, cause the problem is solved. The connection is stable and fast.
But I want to bridge station and bridge, the station bridge doesn't work for 802.11 and the station-pseudobridge doesn't work like I would like to.
This is a really strange situation and I do not see any relation.
Could someone help me?
The hap ac lite replaces me 2.4GHz in rb4011 where the 2.4ghz(in this model) is not supported for wifi wave2.
Sorry For My English.

I am experiencing the same issue! I upgraded hAP ac3 to latest 7.1.1 from 7.1 - all was OK

However, soon as I upgraded wAP AC (mipsbe) to 7.1.1 or even 7.1.2rc - unstable and disconnects after a few mins. Same setup for AP station and bridge-station.

Reverted the wAP AC back to routerOS 6 - long term and no issues. Back to being stable

mducharme · Wed Dec 29, 2021 6:57 am

I am experiencing the same issue! I upgraded hAP ac3 to latest 7.1.1 from 7.1 - all was OK

However, soon as I upgraded wAP AC (mipsbe) to 7.1.1 or even 7.1.2rc - unstable and disconnects after a few mins. Same setup for AP station and bridge-station.

Reverted the wAP AC back to routerOS 6 - long term and no issues. Back to being stable

Yes, this issue seems to happen with at least hAP ac (mipsbe), wAP ac (mipsbe), hAP ac lite (mipsbe)

rpingar · Wed Dec 29, 2021 3:47 pm

we have restricted the issue about icmp that stop working after several hours of operation on x86.
It is related to bonding MTU >1500.
To reproduce, on a v.7.1.1 router configure two bond interface, one with mtu=1500 and the second with mtu=1600
Do an heavy and costant forward of traffic through the bond interfaces and after 36/48 hours the router:
- is not able to ping ecternal hosts
- is not able to ping-check the static routes
- respond correctly to ping from external hosts

Using the same hardware, same config changing only mtu=1500 on all bonding interfaces the router remains stable!

We think it is not a platform (x86) related issue, but a general issue.
regards
Ros

@Normis we got this sstrange behavior also on CHR!!!!!!!
please analize the last supout attached to #[SUP-67882]

thanks
Ros

amb3r · Wed Dec 29, 2021 4:27 pm

I have problem with Web Proxy Access Action when set to Deny will revert back to Allow after reopening winbox.
Anyone experiencing it or is there any new configuration to make it stick to Deny? I'm using v7.1.1.1 in RB2011

Guscht · Wed Dec 29, 2021 7:27 pm

Please explain what:

backup - added "force-v6-to-v7-configuration-upgrade" option on backup load to clear RouterOS v7 configuration and trigger reimport of RouterOS v6 route configuration (CLI only);

means?

You write v6-to-v7 and in the explanation you write something v7 to v6... unclear when to use and what are the benefits?

infabo · Wed Dec 29, 2021 8:01 pm

https://wiki.mikrotik.com/wiki/Manual:Tools/Dynamic_DNS
Infabo, can you explain to me how to use it in the script i am using?

Sry, i am Not your DNS Administrator. So i cant give you More than the Info, that the Error you See is probably because of the Missing Zone param.

pe1chl · Wed Dec 29, 2021 9:42 pm

Why don't you read the help page that is in the reply? There is an example in there:
dns-update dns-server=23.34.45.56 name=mydomain zone=myzone.com address=68.42.14.4 key-name=dns-update-key key=update
Of course you need to substitute your correct values for your zone.

infabo · Wed Dec 29, 2021 11:37 pm

It may be a bug as well, when it worked in v6. you say it is changeip.com - i assume there is no need to specify the zone param.

blurrybird · Thu Dec 30, 2021 5:27 am

As mentioned in my other thread viewtopic.php?p=901271 and associated SUP-70209 ticket, IPv6 does not seem to be working with any Simple Queues on my WAN interface at the moment.

poirus · Thu Dec 30, 2021 11:02 am

CCR 1009 enable OVPN client or server over UDP -router was rebooted without proper shutdown, probably kernel failure and kernel failure in previous boot

pe1chl · Thu Dec 30, 2021 12:03 pm

In this case you should download the v7.1.1 .npk file from the website, upload it to the router, and reboot the router from the system->reboot menu.
But I would advise to first partition the router with 2 partitions and copy part0 to part1 (when that works in that particular version).

Thu Dec 30, 2021 12:08 pm

7.0.5 could need the Testing channel to get to 7.1.1, it still has old channels inside

rpingar · Thu Dec 30, 2021 1:00 pm

Normis, may you support us to fix the issue about ticket [SUP-67221] present on x86 and CHR?
it is about router not able to ping-check the static route after some hours of operation.

It is very urgent because it is compromising the stability of our network.
regards

Maggiore81 · Thu Dec 30, 2021 4:56 pm

I upgraded a HAP AC2 from latest longterm
the CPU is now running at 448MHz and in the system routerboard page, is set to AUTO.

is that normal?