MikroTik

What's new in 6.35 (2016-Apr-14 12:55):

Known issue: some huawei lte modems might not get IP address after the reboot of the router - disable/enable of the modems fixes that

*) arp - apply Linux Kernel patch to stop RouterOS from randomly exhibiting misplaced ARPs;
*) mipsbe - (excluding RB4xx and CRS series) fixed rare ethernet tx buffer corruption;
*) nand - implemented once a week nand refresh to improve stored data integrity (will increase sector writes);
*) pppoe-client - implemented fastpath support;
*) l2tp - implemented l2tp and lns fastpath/fasttrack support;
*) queue - added bucket-size setting to queues (derived from max-limit);
*) tile - fixed rare situation when some cores decide not to take part in packet processing till next reboot;
*) tunnels - fixed performance slowdown on any other tunnel disable/enable;
*) winbox - increased minimal required winbox version to 3.4;
*) wireless - added new package "wireless-rep";
*) wireless - improved 1-chain 802.11ac station compatibility with other vendor multi-chain APs;
*) address-list - fixed crash in low memory situations;
*) bonding - fixed crash when creating vlans on bonding interface;
*) capsman - added 802.11g/n band;
*) capsman - fixed capsman extension channel names;
*) certificate - revoked certificates not showing as (R)evoked;
*) certificate - allow manual crl url addition;
*) chr - added support for VLAN on Hyper-V;
*) chr - fixed Hyper-V booting from SCSI;
*) chr - fixed Hyper-V on windows 8/10 reboot loop;
*) chr - fixed bridge firewall;
*) chr - fixed kernel crash when virtual ethernet was not connected to anything in Hyper-V;
*) chr - implemented automatic storage increase on disk image size increase;
*) chr - implemented kernel crash saving to autosupout.rif (will utilize additional 24Mb of RAM);
*) chr - make shutdown request from hyper-v work (might fix other hypervisor as well);
*) chr - no more installation on first boot;
*) chr - try to renew expired license once a hour instead of 100h;
*) cloud - don't write minor status changes to storage;
*) console - fixed print follow in "/ip dns cache" menu;
*) console - show RouterOS Version in /interface wireless scan;
*) console - sort completions/hints in natural order;
*) console - update copyright notice;
*) defconf - fixed default configuration for SXT LTE;
*) dhcpv6-client - fixed wrong error message;
*) dhcpv6-client - fix ia expiration and lifetime validation;
*) dhcpv6-server - acquire binding on renew if it does not exist;
*) dude - (changes discussed here: http://forum.mikrotik.com/viewtopic.php?f=8&t=104395);
*) dude - fixed dude login logging, no more shows as winbox login;
*) email - fixed send cmd server addr override;
*) ethernet - add option to see S-GPON-ONU module, GPON side SN in "/int eth mon sfp#";
*) ethernet - do not allow to set self as master port;
*) export - bonding did not show up in global export;
*) export - exclude default values from export in "/interface l2tp-server server" menu;
*) export - fixed export when ipv6 address was taken from pool;
*) export - fixed rare situations when not whole config was exported;
*) export - updated defaults for compact export;
*) fastpath - fixed crash when packet arrives on disabled interface;
*) fastpath - fixed show rx-bits-per-second on all VLAN interfaces;
*) fastpath - improved vlan fastpath;
*) fasttrack - fixed timer updating in connections table for fasttrack connections;
*) fetch - decrease connection idle timeout;
*) firewall - added experimental "action=route" in mangle prerouting - that forces packets to specific gateway by ignoring routing decisions (CLI only);
*) health - always report fan speed (even if it is 0);
*) health - swap fan2 and fan3 on CCR1072;
*) hotspot - clean-up all dead entries at once;
*) hotspot - fixed possible deadlock;
*) hotspot - improved html page resistance against attacks;
*) hotspot - make video tag work properly on hotspot login.html page
*) ip - rename max-arp-entries to less confusing max-neighbor-entries;
*) ippool6 - fixed potential crash;
*) ipsec - always re-key ph1 because it was possible that ph1 without DPD would expire;
*) ipsec - better flush on proposal change;
*) ipsec - fixed crash on policy update;
*) ipsec - fixed fast ph2 SA addition;
*) ipsec - fixed larval SA refresh for display;
*) ipsec - fixed multiple consecutive dynamic policy flush;
*) l2tp & pppoe - fixed user traffic accounting when fastpath was used;
*) l2tp - introduced per tunnel allow-fast-path option;
*) l2tp - added support for Hidden AVP, it is needed for proxy authentication;
*) l2tp - added support for max-sessions;
*) l2tp - added support for proxy authentication when receiving forwarded PPPoE sessions;
*) l2tp - fixed small memory leak on reconnects;
*) lcd - fixed branding packet logo drawing on startup;
*) led - fixed crash on assigned interface removal;
*) led - turn on fault led on CCR1072 if CPU too hot;
*) leds - fixed AP-CAP led blinking after successful association to CAPsMAN;
*) lte - added ipv6 support for SXT LTE;
*) lte - changed AT command processing;
*) lte - changed AT parsing because supported Huawei modems use unsolicited events instead of polling;
*) lte - fixed bandlux modem dialing;
*) lte - fixed crash on early initialization;
*) lte - improve situation when SXT modem never finds operator;
*) lte - replaced signal-strength with rssi in info command;
*) lte - support Alt38XX modem;
*) lte - support for zte mf820s2;
*) lte - supported modems now use unsolicited events for network monitoring;
*) lte - use timer for modem info;
*) map lite - added hardware WPS button support;
*) mpls - do not reset VPLS on TE tunnel re-optimize;
*) ntp - fixed ntp client hangs in reached state;
*) ospf - fixed crash when getting neighbor router-id in NBMA area;
*) ppp - fixed ppp interface reconnect when uPnP was used;
*) ppp - close connection if peer wants to re-authenticate;
*) ppp - fixed memory leak high number of pppoe clients to the same server;
*) ppp - fixed ppp crash if lcp packets were lost and authentication got delayed;
*) ppp - fixed some clients can not connect due to LCP restart;
*) pppoe - added rfc4679 support;
*) pppoe - fixed crash when removing pppoe service;
*) pppoe-server - added pado-delay option;
*) profiler - classify certificate signing;
*) proxy - fixed ftp request url decode;
*) queue - improve "/queue interface" menu;
*) quickset - fixed invalid date adjusted the signal threshold for the signal chart and refresh rate;
*) quickset - fixed situations when hidden password was passed as ******* from winbox nd webfig;
*) radius - warn radius client if incorrect secret is being used;
*) rb3011 - fixed sfp compatibility with CCR when using direct attached cables;
*) rb3011 - fixed time keeping;
*) rb3011 - make ether6-ether10 work if SFP module is present on bootup;
*) romon-ssh - fixed active addresses for romon user;
*) route - do not show duplicate gateway on connected route;
*) route - fixed filter by routing table;
*) routing - fixed rare kernel failure on different dynamic routing configurations;
*) routing - fixed routing-marks were not erased from memory when they are not being used;
*) services - do not show ssh entry under ip services if security package is disabled;
*) snmp - don't group oids for bulk get with maxreps > 1 ;
*) snmp - fixed cpu load reporting to 1min average and change oid to 1.3.6.1.4.1.2021.11.10.0;
*) snmp - fixed dhcpv4 lease hwaddr format according to mib;
*) snmp - fixed getbulk result ordering with multiple request OIDs;
*) ssh - simplify login process;
*) ssl - optimized certificate update;
*) system - log time changes;
*) tile - corrected max-l2mtu;
*) tile - fixed fastpath related memory leak;
*) tile - fixed performance regression on switch chip (introduced in 6.33rc18);
*) tile-crypto - fixed minor memory leak;
*) tool fetch - fixed https cleanup on user stop while handshaking;
*) trafficgen - fixed console arguments;
*) trafficgen - fixed crash when unexpected stream reappears;
*) trafflow - fixed potential deadlock;
*) ups - fixed entering hibernate mode when below battery capacity limit;
*) users - added separate RoMoN policy;
*) webfig - fixed firewall rule sorting did not work in other chains except all;
*) webfig - show single item groups as optional values;
*) webfig - sort numeric columns numerically even if they contain some text;
*) winbox - added "pw-type" to "/interface vpls bgp-vpls" menu;
*) winbox - added "use-control-word" and "pw-mtu" to "/interface vpls cisco-bgp-vpls" menu;
*) winbox - added /interface wireless setup-repeater;
*) winbox - added all the rates settings to the capsman;
*) winbox - added flip-screen option to lcd settings;
*) winbox - added init-delay option to routerboard settings;
*) winbox - added ipv6 firewall missing log option;
*) winbox - added missing eap-ttls-mschamv2 method to wireless security profile;
*) winbox - added mtu=auto support to eoipv6 tunnel;
*) winbox - added sfp-mac for GPON interfaces;
*) winbox - added support for new settings from wireless-rep package;
*) winbox - added support for route action in mangle rules;
*) winbox - allow to set additional-network-modes;
*) winbox - allow to set multiple dh-groups;
*) winbox - disable autostart for wireless scan,snooper,align etc. on open;
*) winbox - do not show "enable-jumper-reset" setting on devices without serial port;
*) winbox - do not show real-tx-power column in current-tx-power by default;
*) winbox - fixed unset options in /routing ospf interface menu;
*) winbox - hotspot default-trial user shows profile as "unknown" in Winbox;
*) winbox - improved winbox connection loss detection, fixes winbox safe mode;
*) winbox - limit ospf key to 16 symbols;
*) winbox - make additional-network-mode optional for lte interface;
*) winbox - make build with latest lte changes;
*) winbox - make mrru disabled and set mtu+mru to auto by default on new servers;
*) winbox - show "usb-power-reset" option on all boards that have it;
*) wireless - fixed crash on nstreme-dual interface stats update;
*) wireless-rep - added 802.11g/n only band;
*) wireless-rep - added STEP feature for the scan-list;
*) wireless-rep - added WPS client support;
*) wireless-rep - added support for saving wireless scan results to file;
*) wireless-rep - added support for wireless background scan for 802.11 protocol;
*) wireless-rep - added support for wireless repeater mode for 802.11 protocol;
*) wireless-rep - added support for wireless scan rounds setting;
*) wireless-rep - adjust roaming scan times;
*) wireless-rep - allow to connect to AP after scan;
*) wireless-rep - do not allow empty ssid for AP modes;
*) wireless-rep - fixed crash on non-HT clients;
*) wireless-rep - fixed latency issues with Intel wireless clients;
*) wireless-rep - fixed nv2 protocol;
*) wireless-rep - fixed qos frame-priority when nv2 protocol used in station-wds mode;
*) wireless-rep - fixed signal leds;
*) wireless-rep - fixed speed issue when connected with Intel 802.11ac;
*) wireless-rep - initial support for station roaming for station mode in 802.11 protocol;
*) wireless-rep - request interface name for setup-repeater;
*) wireless-rep - use full identity where possible;
*) wireless-rep,capsman - added more configuration settings;
*) wireless-rep,capsman - added rate config support.

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after crash.

OMG .. 2 meters long changelog

A note for users who want to upgrade to v6.35 from 6.35rcXX:
We have found the issue randomly causing boards to fail on upgrade during the rc testing, this fix is included in 6.35 (current),

To successfully upgrade to 6.35 from 6.35rc29-rc49, please do a /system reboot, and then on bootup make an upgrade straight away.

queue - added bucket-size setting to queues (derived from max-limit);
hotspot - clean-up all dead entries at once;

what exactly those ones are doing?

iisues. .upgraded made me upgrade winbox.. now when I try to log in with winbox it wont let me says rmon is not enabled.

OMG .. 2 meters long changelog

Yes. It is very nice. All changes desribed and sorted!. Not like before...
Very nice work Mikrotik

Can we get changelog since last rc?

CCR1016-12G just came unresponsive after upgrade from 6.34.3 to 6.35

Upon reboot I see the ethers all come up on kernel boot, as soon as starting services they all go away.

Reset config I get ethers back but load my backup all goes away again.

Can't send supout as I can't talk to the CCR only factory default works. Had this since 6.23 and it's never happened ever.

Just tried going back to 6.34.4 and load backup no issue.

Suggestions?

A note for users who want to upgrade to v6.35 from 6.35rcXX:
We have found the issue randomly causing boards to fail on upgrade during the rc testing, this fix is included in 6.35 (current),

To successfully upgrade to 6.35 from 6.35rc29-rc49, please do a /system reboot, and then on bootup make an upgrade straight away.

Is this not the only way to do an upgrade? You upload the new package anyway you want (ftp, drag and drop winbox, telnet) and only after the reboot the new packages are installed? Or am I wrong here?

To successfully upgrade to 6.35 from 6.35rc29-rc49, please do a /system reboot, and then on bootup make an upgrade straight away.

I had 6.35rc43. So I do a reboot via WinBox, wait till WinBox reconnect, make an upgrade via System > Packages > Download&Install. But I got beeping & cyclically rebooting brick instead of router.
What I do wrong? Should I reboot via terminal instead of WinBox? Or making upgrade via "System > Packages > Download&Install" isn't "straigh way"?
Thank you for thorough testing, Mikrotik team!
UPD: well, I have successfully recovered my router via NetInstall, but the situation itself is very unpleasant.

Found out why my CCR1016-12G became dead on all ethernets!

Okay why was the maximum L2 MTU dropped by 4 bytes?

Used to support 10226 now dropped to 10222

Thanks for the warning

Wasted 20 minutes reloading configuration.... down and up versions, etc, etc

I don't see this. Upgraded a 951Ui and added wireless-rep (it was not included in main package)

Found out why my CCR1016-12G became dead on all ethernets!

Okay why was the maximum L2 MTU dropped by 4 bytes?

Used to support 10226 now dropped to 10222

Thanks for the warning

Wasted 20 minutes reloading configuration.... down and up versions, etc, etc

it is in thechangelog:
*) tile - corrected max-l2mtu;

where do you actually use such L2MTU? i had 9100 and no problems on upgrade.

I had 6.35rc43. So I do a reboot via WinBox, wait till WinBox reconnect, make an upgrade via System > Packages > Download&Install. But I got beeping & cyclically rebooting brick instead of router.
What I do wrong? Should I reboot via terminal instead of WinBox? Or making upgrade via "System > Packages > Download&Install" isn't "straigh way"?
Thank you for thorough testing, Mikrotik team!
UPD: well, I have successfully recovered my router via NetInstall, but the situation itself is very unpleasant.

you really need to choose one of two: ether complain about netinstall OR using RC versions. Both don't go together.

Found out why my CCR1016-12G became dead on all ethernets!

Okay why was the maximum L2 MTU dropped by 4 bytes?

Used to support 10226 now dropped to 10222

Thanks for the warning

Wasted 20 minutes reloading configuration.... down and up versions, etc, etc

it is in thechangelog:
*) tile - corrected max-l2mtu;

where do you actually use such L2MTU? i had 9100 and no problems on upgrade.

CCR to CCR

CCR1016 series ether1-ether12:10226; sfp1-sfp12:10226; sfp-sfpplus1:10226
CCR1036 series ether1-ether12:10226; sfp1-sfp4:10226; sfp-sfpplus1-sfp-sfpplus2:10226
CCR1072 series ether1:9116; sfp-sfpplus1-sfp-sfpplus8:10226

On CRS125-24G-1S I have these new lines appear in my configuration export:
What's the deal about these? Documentation in wiki says this is the default value anyway...
http://wiki.mikrotik.com/wiki/Manual:CR ... t_Settings

I have a PPPOE over VPLS network.
VPLS from Base Box 5 (Client access point) to CCR1036 (PPPOE concentrator)
Upgrade Base Box 5 from 6.34.2 to 6.35 broke my VPLS. Cannot ping at 1508 without fragmentation. Revert back to 6.34.2 and everything is OK.

keep up the good work guys

Massive update!
Its also been one of the longest number of release candidates I think I've ever seen(me since v4.17). Thought I was going to see an RC50 in there

Just upgraded a RB-951-2n to 6.35, so far so good for that unit..

Upgraded RB2011UAS-2HnD from 6.34.2 to 6.35 and router boot to 3.33 via npk file. Looking good so far.

Can't wait to test pppoe-client fastpath support. ISP here just rolled out 100, 300 & 500mbps FTTH.

On CRS125-24G-1S I have these new lines appear in my configuration export:

A bug was introduced late in the RC series (RC49) that causes lots of default settings to be exported.
It was quickly fixed but apparently not completely.

CCR to CCR

CCR1016 series ether1-ether12:10226; sfp1-sfp12:10226; sfp-sfpplus1:10226
CCR1036 series ether1-ether12:10226; sfp1-sfp4:10226; sfp-sfpplus1-sfp-sfpplus2:10226
CCR1072 series ether1:9116; sfp-sfpplus1-sfp-sfpplus8:10226

But you need MTU support from endpoint-to-endpoint, middle 2 CCR to 10226 will do nothing.
So my question is what end devices uses more than 9100, what interfaces nad drivers you use?

Using commands: "/system package update install once" caused my home CCR1009 to upgrade almost fine from v6.34.4 to v6.35

However: I had the multicast package installed and active, but the system didn't upgrade this package even though it did download the package to upgrade:

/file print
34 multicast-6.35-tile.npk package 144.1KiB apr/16/2016 12:06:16


So I have to manually install the multicast package again, this isn't good!

Was the new wireless-rep pulled in the last minute? I've just tested on one SXT-ac, after upgrade from 6.34.4 to 6.35 the list of packages shows wireless-fp (disabled) and wireless-cm2 (enabled) as before. If yes then it's understandable, but please fix the 6.35 changelog.

Was the new wireless-rep pulled in the last minute?

It is simply not in the combined package. You have to download it separately.

Code: Select all

*) wireless-rep - added 802.11g/n only band;

I don't see this. Upgraded a 951Ui and added wireless-rep (it was not included in main package)

For a regular wireless interface settings (not CAPsMAN) the 802.11g/n-only band setting appears to be only accessible via the command line at the moment. As with some other features, winbox and webfig support will come in a later RouterOS version.

For a regular wireless interface settings (not CAPsMAN) the 802.11g/n-only band setting appears to be only accessible via the command line at the moment. As with some other features, winbox and webfig support will come in a later RouterOS version.

Setting through cli works.

Long changelogs are so exciting. Like with Jolla.

Hi, I have CCR1016-12S-1S+
have a problem after uppgrading to 6.35 from 6.34.3.

When I setup my internet Connection under Quick Set

Mode: Router

Port: eth1,
but when I select eth1 and press Apply it change it to SFP1

I tried to reset config and tried to restore config, but nothing sems to work.
I tried via console (serial), after I type in eth1 in Setup, it changed to SFP1.

It works when I downgrade to 6.34.3

Anyone know what is cause and how to fix it?

cool.
and changelog is impressive, indeed :=)

A note for users who want to upgrade to v6.35 from 6.35rcXX:
We have found the issue randomly causing boards to fail on upgrade during the rc testing, this fix is included in 6.35 (current),

To successfully upgrade to 6.35 from 6.35rc29-rc49, please do a /system reboot, and then on bootup make an upgrade straight away.

I have 2011UAS-2HnD. It was RC from the list above. Good and easier way to upgrade to 6.35 was to click DOWNGRADE button on System -> Packages -> Downgrade

Works fine for me.

I have the Hap AC upgraded to ROS 6.35 when I input "int eth mon sfp1" it doesn't show me the GPON side SN but it shows sfp-vendor-serial which is not what I'm looking for to recap:
Hap AC on ROS 6.35
GPON SFP Module
still can't obtain GPON-side SN with "/int eth mon sfp1"

Torrent?
http://www.mikrotik.com/download/router ... 35.torrent

..

After upgrade to 6.35 my WinBox can't connect(and not see) my Routerboards(RB951G and RB2011UiAS-2HnD-IN).
WinBox v3.3 and v3.4.

As a further control, and gain control of the router?

Try to connect using Mac address.

After upgrade my CCR from 6.34.4 to 6.35 I still have randomly exhibiting misplaced ARPs. What's going on?

any sugestion? It's over 200 misplaced entries in ARP table.


Regards Mariusz

I just tried the v6.35 x86 CD image.
Within a minute after getting the login prompt, it powers off the PC.
I tried a second fresh installation with the same results.
No such problem with earlier versions.

Hi

Houston we have a problem.
When upgrade 6.35 my RB951Ui-2HnD lost interface.
After reset config and again lost interface.No wireless card no ethernet.

Best Regards

After upgrade my CCR from 6.34.4 to 6.35 I still have randomly exhibiting misplaced ARPs. What's going on?

These are not misplaced. They are unresolved ARP entries, i.e. there was some traffic for those IP addresses
but nothing is replying to the ARP request. These were always there but due to a change they are now shown
and previously they were not.

But it's only on inetrfaces with dual IP configuration. On vlan interface there are both private and public addresses, where only private addresses - problem does not occur. such a thing happens from version ROS 6.33.2. Last patch in 6.35 don't resolve this problem. Really bother me these descriptions and unnecessarily increase the ARP tables. Maybe downgrade to version 6.33.1

Regards Mariusz

unnecessarily increase the ARP tables

There's no "unnecessarily increase", those entries have always been in the ARP table. The only difference is previously they were not shown in the UI, whereas now they are.

randomly exhibiting misplaced ARPs was not arps with 00:00:00:.... , those ARPs are incomplete, that was feature,

that change fixed situations when device was actually sending out ARP packets with wrong IPs.

How can I check this ?
*) pppoe-client - implemented fastpath support;

Hi

Houston we have a problem.
When upgrade 6.35 my RB951Ui-2HnD lost interface.
After reset config and again lost interface.No wireless card no ethernet.

Best Regards

Can you please send supout.rif after upgrade to support@mikrotik.com


We where unable to reproduce that exact issue.

CCR1016-12G just came unresponsive after upgrade from 6.34.3 to 6.35

Upon reboot I see the ethers all come up on kernel boot, as soon as starting services they all go away.

Reset config I get ethers back but load my backup all goes away again.

Can't send supout as I can't talk to the CCR only factory default works. Had this since 6.23 and it's never happened ever.

Just tried going back to 6.34.4 and load backup no issue.

Suggestions?

CCR1036-12G-4S - exactly the same bug!
For now downgraded to 6.35rc49 - it works on RC.

Torrent?
http://www.mikrotik.com/download/router ... 35.torrent

..

@Mikrotik any update ?

Torrent?
http://www.mikrotik.com/download/router ... 35.torrent

..

@Mikrotik any update ?

For crying out loud, for the last year or even more Mikrotik is hosting download versions in the cloud (Amazon as far as i can tell from IPs), they are not making any torrents and most probably never will, stop asking them. From cloud they can get download statistics, from torrent you can't. Any torrent that was actually created lately was not official. So if you need torrent, download from page and create your own..

I have the Hap AC upgraded to ROS 6.35 when I input "int eth mon sfp1" it doesn't show me the GPON side SN but it shows sfp-vendor-serial which is not what I'm looking for to recap:
Hap AC on ROS 6.35
GPON SFP Module
still can't obtain GPON-side SN with "/int eth mon sfp1"

That field wont show anything for first batch GPON modules, this field is something that we added for future batches. In other words this first batch modules does not have anything written yet in eeprom parts where this data is read from.

Torrent?
http://www.mikrotik.com/download/router ... 35.torrent

..

@Mikrotik any update ?

For crying out loud, for the last year or even more Mikrotik is hosting download versions in the cloud (Amazon as far as i can tell from IPs), they are not making any torrents and most probably never will, stop asking them. From cloud they can get download statistics, from torrent you can't. Any torrent that was actually created lately was not official. So if you need torrent, download from page and create your own..

No worries, i'll never ask again. And about officiality - "official" tracker http://tracker.mikrotik.com/ui.php has not only -ALL- torrent listed.

queue - added bucket-size setting to queues (derived from max-limit);

Thanks guys. Keep doing great job.

I have a PPPOE over VPLS network.
VPLS from Base Box 5 (Client access point) to CCR1036 (PPPOE concentrator)
Upgrade Base Box 5 from 6.34.2 to 6.35 broke my VPLS. Cannot ping at 1508 without fragmentation. Revert back to 6.34.2 and everything is OK.

Can anyone help out on this please.

petrn - Thank you for link to tracker. We simply did forget to turn it off. Now it is done.

Quick question - Can RouterOS do LAC yet (not just LNS), i.e. forwarding pppoe sessions over L2TP to an LNS?

Is there any documentation on the LNS features yet, specifically how to set it up?

PPPoE session from CCR1036-8G-2S+ (6.35) to RB1100 (6.35) is lost after upgrade and cannot be established anymore. Downgrade to 6.34.2 on CCR solved the problem.

folkeri - We have tested this and PPPoE works in our lab between two different devices with 6.35 version. It must be something specific in your case. Please reproduce situation when it is not wotkin, generate supout files on both of devices and send these files to support@mikrotik.com

folkeri - We have tested this and PPPoE works in our lab between two different devices with 6.35 version. It must be something specific in your case. Please reproduce situation when it is not wotkin, generate supout files on both of devices and send these files to support@mikrotik.com

Files send. Regards, Folkert

Hi,

because I can not send any file to the dude?

Best regards,

Vagner Felipe Becker

Quick question - Can RouterOS do LAC yet (not just LNS), i.e. forwarding pppoe sessions over L2TP to an LNS?

Is there any documentation on the LNS features yet, specifically how to set it up?

Hi Joe,

LAC is not supported yet. Maybe one day

LNS is currently very simple. You just add PPPoE server with interface set to <l2tp> and enter a tunnel secret.

I'm hoping that PPP on RouterOS gets something along the lines of Cisco's SSS in the future. As much as I dislike SSS configuration, it does add a huge amount of flexibility.

Hi all,

does anybody of you see problems with OSPFv3 since the installation of this release? I've got a CCR1036-8G-2S+ and since I installed this release other OSPFv3 enabled devices started to crash because of OSPFv3 every time a topology change gets announced by the mikrotik router.

I've got two 2011UiAS. Both are connected to the internet and to the CCR1036-8G-2S+. All three have this new release installed. The CCR1036-8G-2S+ is configured as ABR in the backbone area. If I e.g. restart one of the two 2011UiAS other routers (not mikrotik) in the backbone crash upone receiving the change(d) information from the mikrotik ABR.

Greez,

dialsc

But it's only on inetrfaces with dual IP configuration. On vlan interface there are both private and public addresses, where only private addresses - problem does not occur

Do you think it is possible to understand what you mean when you hide all the relevant information from your screenshot??

But it's only on inetrfaces with dual IP configuration. On vlan interface there are both private and public addresses, where only private addresses - problem does not occur.

There's your answer. Public IP addresses are always getting scanned. Whenever a scan requests a public IP that doesn't exist, ROS must send an ARP request for this address - it stores the "incomplete" ARP in the ARP table. These are displayed as all-zeroes in the GUI, or just as "incomplete" in the terminal.

It's normal behavior. You're not seeing it on private-only interfaces because none of your internal hosts is doing IP scans or trying to reach an IP that does not exist.

Sadly, still no luck on getting 6.35 final work.
Right now it is i have my config or i have 6.35 final, if both - i have all interfaces down completely after boot finishes.

*) queue - added bucket-size setting to queues (derived from max-limit);
.

BUG !!
this things made me crazy
i have my router-board 1100 with a normal router mode for 50 IPs queue , in an aggerate of 50MB for all the internet

after upgrade , all clients including me ., (adminstrator) which i am not inside of any queue , have a very horrible speed packet loss and slow response ,
all of the customers had simultaneously very bad internet service response ,

anyhow , i had to do a Netinstall to recover for a previuos version so the service went back normal
now to the other end , HOW is it possible to alter this new queue setting "bucket size " for a dhcp queue or for a hotspot queue . !

I would venture to guess that the ros6.35 has problems with ethernet on CloudCore routers.
I have Ether1 Flapping, which only started to flap after upgrade, the router it is connected to receives no Link Partner Advertisments.
Also SFPplus1 was set to No Autonegotiate at 1gps, after upgrade it must be set to autonegotiate to work.

[EDIT]
SFPplus1 registers a connection when autonegotiate is set, but does not pass traffic.
[/EDIT]

Hi

Houston we have a problem.
When upgrade 6.35 my RB951Ui-2HnD lost interface.
After reset config and again lost interface.No wireless card no ethernet.

Best Regards

Can you please send supout.rif after upgrade to support@mikrotik.com

Cant create.Get error.

What's new in 6.35 (2016-Apr-14 12:55):


*) wireless-rep,capsman - added rate config support.

thx a lot going to test right now

I have had some issues with NAT on this version, had a simple NAT rule for SMTP to internal mail server and router was dropping packets on external interface. Funny thing is some connections actually went through, did investigate this because people complained about mail not being received. Have reverted to previous version for now.

Sadly, still no luck on getting 6.35 final work.
Right now it is i have my config or i have 6.35 final, if both - i have all interfaces down completely after boot finishes.

It happened to me too. Found the problem:

*) tile - corrected max-l2mtu;


You probably have a CCR and had the interfaces MTU set to a value bigger than 10222. Set it to 10222 and your interfaces will be happy and kicking again after the upgrade.

It made me waste almost one hour of time finding why the router was inoperational after the upgrade.

I hope this helps.

Sadly, still no luck on getting 6.35 final work.
Right now it is i have my config or i have 6.35 final, if both - i have all interfaces down completely after boot finishes.

It happened to me too. Found the problem:

*) tile - corrected max-l2mtu;


You probably have a CCR and had the interfaces MTU set to a value bigger than 10222. Set it to 10222 and your interfaces will be happy and kicking again after the upgrade.

It made me waste almost one hour of time finding why the router was inoperational after the upgrade.

I hope this helps.

Thanks! It works now! ^_^

Hello,
After 6.35 upgrade there are no more firewall events sent via email.

I have a rule that logs all incoming SSH connections to a certain host.


/ip firewall mangle print
.
.

2 ;;; log incoming SUCCESSFUL SSH connections
chain=postrouting action=log protocol=tcp src-address=!192.168.1.0/24 dst-address=192.168.1.3 dst-port=22 connection-bytes=6500-10000 log=no log-prefix="SSH_Incoming"

.
.

In /system logging I have firewall topic set to send events to a remote host and via email.
I receive the events on the remote host, but none are being sent via email.

Emailing works ok, as I receive other type of logger topics ok. Critical events are sent properly.

4 critical sendmail
7 firewall sendmail

Both critical and firewall topics are using the same action, but only critical are sent properly.

Can you please take a look?
Thanks,
Mihai.


LE : I confirm that going back to 6.34.4 fixes it.

Hi guys,

Im tring the new FW on RB411U with MC7710 Sierra Wiereless modem and 4G SIM (but the serice 4G is not yet enable by ISP) and I notice settng 3G + LTE the interface LTE doesnt connect.
Resuming:
Using GSM + 3G + LTE the interface connect on 3G (is OK).
Using 3G only the interface connect (is OK).
Using GSM + 3G the interface connect (is OK).
Using 3G + LTE the interface doesnt connect (is not OK). It should connect to 3G (why not?).

Thanks, DaxStox for report, we will try to replicate that issue.


There is an issue with CAPsMAN in 6.35.
It could lockup wireless interface on CAP, if CAP looses connection to CAPsMAN on second retry, We are working on fix for that right now. For now, simple reboot will help till the next connection loss.

Torrent?
http://www.mikrotik.com/download/router ... 35.torrent

@Mikrotik any update ?

For crying out loud... they are not making any torrents and most probably never will, stop asking them... Any torrent that was actually created lately was not official.

This is the first release where MT hasn't posted a torrent file. They stopped linking to them on the downloads page, but they were still there.

So if you need torrent, download from page and create your own..

Obviously, you no longer "need" the torrent once you have downloaded ~15 links, unpacked everything and arranged it all in a directory structure... but it sure would have been a time-saver.

My CCR1036-8G-2S+ had problem also.
Problem was with ether1 and sfpplus1.
Still broken even after downgrade.
my MTU is set for 1500

petrn - Thank you for link to tracker. We simply did forget to turn it off. Now it is done.

You are welcome. Can make request?: Make changelog downloadable, it's primary function is documentation replacement ...
[Edit] Or at least make release notes part of documentation wiki.

Since 6.32 isn´t possible to change dynamic items anymore, like Queues for pppoe connection.

But, I need to change the simple queues, even after the connections was established...

I was used to do this by terminal, CLI

Is that possible again? Or, are you guys planning to make this possible again?

Others dynamic items I don´t care, but queue is something I need to change... My RB are stucked on 6.31, the last version that this was possible...

CCR1016-12G just came unresponsive after upgrade from 6.34.3 to 6.35

Upon reboot I see the ethers all come up on kernel boot, as soon as starting services they all go away.

Reset config I get ethers back but load my backup all goes away again.

Can't send supout as I can't talk to the CCR only factory default works. Had this since 6.23 and it's never happened ever.

Just tried going back to 6.34.4 and load backup no issue.

Suggestions?

CCR1036-12G-4S - exactly the same bug!
For now downgraded to 6.35rc49 - it works on RC.

Fix

Change the L2 MTU back to 12222, then upgrade

Its still a bug, the import script should have detected 12226 and since now only max of 12222 is supported, it should have dropped them back, thats why they disable on services starting as it disables the Ethernet ports

Since 6.32 isn´t possible to change dynamic items anymore, like Queues for pppoe connection.

But, I need to change the simple queues, even after the connections was established...

That's not going to work the way it used to anymore. Now you have to use CoA to change dynamic items.

PS. Please learn how to use forum search function. This question has been asked and answered enormous amount of times already. If you need some examples- again, search the forum!

Good day.
Hardware - RB951G-2HnD
After update to 6.35 begin trouble with SNMP.
My Zabbix server can'not read parameter "Current CPU load"
OID 1.3.6.1.4.1.2021.11.52.0
Please confirm this bug and fix it in next update

My Zabbix server can'not read parameter "Current CPU load"
OID 1.3.6.1.4.1.2021.11.52.0

Always reading ChangeLog before the upgrade is a good habit:

What's new in 6.35 (2016-Apr-14 12:55):
...
*) snmp - fixed cpu load reporting to 1min average and change oid to 1.3.6.1.4.1.2021.11.10.0;

More details can be found here: http://forum.mikrotik.com/viewtopic.php ... 00#p525545

Working before in dude and stopped graphing since update 6.35:
Function: ros_command("/caps-man registration-table print count-only")

Other probes/data sources are all timeout too

That's not going to work the way it used to anymore. Now you have to use CoA to change dynamic items.

PS. Please learn how to use forum search function. This question has been asked and answered enormous amount of times already. If you need some examples- again, search the forum!

Ok, thanks for your answer... Sorry for my mistake!

I have 6.32.3 RB2011UAS and I try to update via winbox System - Packages - Download&Install, MT reboots but it isn't updated. Same when I press only "Download" and then reboot. Nothing changes.

That's not going to work the way it used to anymore. Now you have to use CoA to change dynamic items.

CoA is good, but why not allow changes to dynamic queues the old way as well? I have used this to remove all speed limits at night on the PPPoE server - disable/enable queues from scheduled scripts.

Was the new wireless-rep pulled in the last minute?

It is simply not in the combined package. You have to download it separately.

I see - thanks. Using wireless-cm2 for now, will give more time for the new stuff to mature (hoping to see more nv2/802.11ac improvements).

Hello,

I installed v6.35 onto a RB1100AHx2 - Working like a charm.

Thank you

RB433UAH (power 24V 2A) RouterOS 6.35 ...freeze/crash (uptime 5days) no winbox, no ssh, no http, no webpage internet..ping/dns work board/internet, statistic all graf no log graf
routerboard power off/on works

In cap clients recursive dupeliclate virtual wlan interface after reconnect capsman server

example:
2 X ;;; managed by CAPsMAN
;;; channel: 2412/20-Ce/gn(20dBm), SSID: XXXXX1, CAPsMAN forwarding
wlan1 wlan 1500 1600 2290 4C:5E:0C:06:3F:FC
3 DX ;;; managed by CAPsMAN
;;; SSID: XXXXX2, CAPsMAN forwarding
wlan2 wlan 1500 1600 4E:5E:0C:06:3F:FC
4 DX ;;; managed by CAPsMAN
;;; SSID: XXXXX3, CAPsMAN forwarding
wlan3 wlan 1500 1600 4E:5E:0C:06:3F:FD
5 X wlan4 wlan 1600 2290 4E:5E:0C:06:3F:FC <- here
6 X wlan5 wlan 1600 2290 4E:5E:0C:06:3F:FD <- here
....
12 X wlan11 wlan 1600 2290 4E:5E:0C:06:3F:FD <- here

probelm in CM2 also in REP wireless module
tested on:
Server CCR1009-8G-1S
Client: RBmAP2n, RB952Ui-5ac2nD, RB962UiGS-5HacT2HnT, RB751G-2HnD,

Hi, i have a problem with my CCR i update to the new version,
The problem is i am using Radius Manager and the api doesn't work here and all user speed stay like it's except if i disconnect them by myself when you will repair this problem

105547111 - MTU and L2MTU issues are already fixed in 6.36rc
Beone - We will look into this
CyberTod,andriys - Just noticed and reported to developers that g/n is missing from Winbox drop list. You can set it through CLI and it will work
eworm,pe1chl - Export for switch configuration is fixed in 6.36rc
folkert - Do you have MRRU on PPPoE. Try to reduce it so it would be lower than L2MTU on ethernet
freemannnn - Bucket is well explained here - http://wiki.mikrotik.com/wiki/Manual:HTBv6
hatred,napismizpravu - Please report to support@mikrotik.com with detailed explanation of problem, if you experience it again. If router has serial port, then we would want to see what you see there during these reboots
hohwin3a - If installation still reboots your x86 constantly, then please report to support@mikrotik.com. If you see some error output, then make picture or video with it and attach to message to support
lgkahn - Yes, it is mentioned in changelog that latest Winbox is required. If it says that RoMON is disabled, then if you are admin, then connect to router through Winbox, enable RoMON policy and then connect through RoMON
marekm - Wireless-rep needs to be installed manually. You can still use -cm2
McTedson - When you think that NAT is working have you tried to clear connections list and check again?
nuru, dialsc,rommo911,mitzone,qbek - Please report to support@mikrotik.com with detailed explanation and supout files from problematic version
PtDragon,tgrand,RomanHujer - Please try 6.36rc version
Sergey371 - Do router work and Winbox is only problem?
TecnoNet - If API changes dynamic queue speed limit then it is and will not be possible. You have to use static queues or CoA
VirusDr - this issue is already reported to developers. We will try to fix it as soon as possible
WirelessRudy - Yes, normally upgrade works like that, but these specific version had a bug which required router to be rebooted first (6.35rc29-rc49)

Everyone - http://forum.mikrotik.com/viewtopic.php?f=21&t=107422

105547111 - MTU and L2MTU issues are already fixed in 6.36rc
eworm,pe1chl - Export for switch configuration is fixed in 6.36rc

and so on. I hope to be released version 6.35.1 with bugfixes?

Hi,
Just to save someone's time,

it took me one and a half day to (finaly) read this thread, and to understand that 6.35 stable is unable to connect to any Cap.

Upgraded to 6.36rc and it just worked (even without any further configuration).

My eyes hurt.


Have a nice day, keep up the good work.

I get huge discrepancy in Ping latency using the Dude on a CHR 6.35. Pings from Winbox are good. Pings from Dude client are bad.
http://forum.mikrotik.com/viewtopic.php?f=8&t=107519

I get huge discrepancy in Ping latency using the Dude on a CHR 6.35. Pings from Winbox are good. Pings from Dude client are bad.
http://forum.mikrotik.com/viewtopic.php?f=8&t=107519

I've been seeing the same thing since they resumed x86 support with the separate package, FWIW.

RB433UAH (power 24V 2A) RouterOS 6.35 ...freeze/crash (uptime 5days) no winbox, no ssh, no http, no webpage internet..ping/dns work board/internet, statistic all graf no log graf
routerboard power off/on works

I also encountered some odd behavior when I upgraded an RB433AH. In my case the upgraded unit was an older hardware version, and it uses the "IC Plus 175C" switch chip instead of the "175D" version. It appeared that the upgrade did not handle this older chip correctly, and my Ethernet interfaces were either unavailable, or the bridge that I had configured was not working with the selected Ethernet bridge ports. This, in turn, caused some of my firewall filter rules to become invalid. Furthermore, I observed that some of my filter rules were lost after the upgrade.

I worked around these problems using the serial console by first inserting a permissive rule that allowed me to gain access via one of the Ethernet interfaces. At this point I could use Winbox (or Webfig) to take a closer look at what had changed. In my case, I needed to re-implement my Bridge configurations, and I eventually decided to just restore all of my filter rules from a backup (I've learned it's always a good idea to capture an export to a file before playing around with firmware upgrades).

I'm sharing this experience in case it is helpful to others. So far, after resolving these glitches, the RB433AH is working fine with 6.35, including the wireless AR922X card. I'll be conducting further testing.

This issue is now fixed in 6.36rc version:
Known issue: some huawei lte modems might not get IP address after the reboot of the router - disable/enable of the modems fixes that

routing is not working or packet mark is not working

packet comes in on interface and is logged by prerouting after which it disappears

supout sent to support

reproduce: create Route Rule that sends packet to some other router that routes it back to this one on another interface
receive same packet on another interface, where mange rule adds packet mark in Prerouting
packet is not detected by mangle rule in forward with that packet mark

extreme fail

CCR1072

P.S. ontop of this when this packet is eventually routed, it is not source NAT-ed

Try to disable/enable routing rules.

After some clicking I sniffed and saw that packet indeed goes out. Its just not catched by mangle rule.

Now current problem is that MASQ rule does not change the source IP of the packet as it goes out.

You need to clear connection tracking. Probably connection was established before that mangle rule was functional.

entire device went silent on reboot and does not come up

datacenter reported port is flapping so it must be in a reboot loop

6 35 pppoe disconnect if user funcition idle timeout

Version 6.35.1 has been released:
http://forum.mikrotik.com/viewtopic.php?f=21&t=107686