MikroTik

Posted: **Fri Aug 02, 2019 3:56 pm**

RouterOS version 6.45.3 has been released in public "stable" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.45.3 (2019-Jul-29 12:11):

Important note!!!
Due to removal of compatibility with old version passwords in this version, downgrading to any version prior to v6.43 (v6.42.12 and older) will clear all user passwords and allow password-less authentication. Please secure your router after downgrading.
Old API authentication method will also no longer work, see documentation for new login procedure:
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

Changes in this release:

*) certificate - renew certificates via SCEP when 3/4 of lifetime reached;
*) crs317 - fixed multicast packet receiving (introduced in v6.45);
*) hotspot - fixed default profile values not being used (introduced in v6.45);
*) rb4011 - fixed SFP+ interface linking (introduced in v6.45.2);
*) smips - reduced RouterOS main package size (disabled LTE modem, dot1x and SwOS support);
*) supout - fixed SIM slot printing (introduced in v6.45);
*) wireless - improved U-APSD (WMM Power Save) support for 802.11e;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this particular RouterOS release.

Posted: **Fri Aug 02, 2019 4:17 pm**

installed on RB2011UiAS, RB951Ui, hAP Lite without any problem.

Sent from my SM-A705FN using Tapatalk

Posted: **Fri Aug 02, 2019 4:27 pm**

Install it on hap Lite, hap AC2 without issues.

hap Lite memory issue solved for me. Thx.

One Note : hap Lite shows still 6.45.1 as current Routerboard FW.

Regards

Posted: **Fri Aug 02, 2019 5:21 pm**

UMarcus: are you sure Hap lite has been updated ??

I've tried also to update via /system packages and manually via file upload, it seems it still fails....

npk file is displayed on files section , winbox reports 16MB of16MB used, maybe no more space allowed for updating process....

Posted: **Fri Aug 02, 2019 5:50 pm**

Nice to see official release of 6.45.3.
But there was no need of removing my thread viewtopic.php?t=150735 I feel like a criminal

Since MT did not post this info, I try to help out. What's new in 6.45.3 (2019-Jul-29 12:11):

Just close it with a link to this thread....

Posted: **Fri Aug 02, 2019 8:21 pm**

GRE fixed?

Posted: **Fri Aug 02, 2019 8:45 pm**

GRE fixed?

What exactly do you have in mind? The incorrect flagging of actually new GRE packets as invalid? If so, then no, this is not fixed in 6.45.3, but it can be worked around by adding protocol=!gre to the action=drop connection-state=invalid rules in the default firewall, or several other equally simple ways. If you mean that GRE "stopped working although it did before", read the 6.45.1 and 6.45.2 topics, it has been discussed there up and through multiple times why this happens and how to fix it.

Posted: **Fri Aug 02, 2019 10:39 pm**

Board: RB4011iGS+5HacQ2HnD
Problem: on all ros 6.44.x-6.45.x on PPP client/server interfaces (L2TP, PPTP, PPPoE) appear at the same time small Tx Drops counters. On ros 6.43.16 works well on same config.

Posted: **Sat Aug 03, 2019 2:05 am**

I have installed the update on my 4011 wired only router and had no initial issues. After the reboot and upgrade i updated the routerboard firmware and initiated the reboot. After the firmware update the device has not come back online. I am also remote to the device and will be looking at it later tonight when i get home from work. I will post or edit my findings here.

After i was onsite with the 4011, i was able to reboot one more time and the sfp+ dac linked to the switch without any other changes. I did have link on eth1 and 2 prior to the manual reboot.

Posted: **Sat Aug 03, 2019 3:04 am**

GRE fixed?
What exactly do you have in mind? The incorrect flagging of actually new GRE packets as invalid? If so, then no, this is not fixed in 6.45.3, but it can be worked around by adding protocol=!gre to the action=drop connection-state=invalid rules in the default firewall, or several other equally simple ways. If you mean that GRE "stopped working although it did before", read the 6.45.1 and 6.45.2 topics, it has been discussed there up and through multiple times why this happens and how to fix it.

I think that statement like "!somthing" is not good... in any iptables on so on firewalls...

Posted: **Sat Aug 03, 2019 7:54 am**

I think that statement like "!somthing" is not good... in any iptables on so on firewalls...

Why? For security or for CPU load reasons?

Posted: **Sat Aug 03, 2019 8:02 am**

Still Hotspot captive portal not show automatically.

Posted: **Sat Aug 03, 2019 9:54 am**

UMarcus: are you sure Hap lite has been updated ??

I've tried also to update via /system packages and manually via file upload, it seems it still fails....

npk file is displayed on files section , winbox reports 16MB of16MB used, maybe no more space allowed for updating process....

For me its working. But first I have to remove all files from 'Files' Dialog. There was a file from broken update procedure of 6.45.2 which needs to be removed.
I got ~7.5MB free space which allow updating wihtout issues.

Posted: **Sat Aug 03, 2019 12:46 pm**

Unable to upgrade on HAP AC and WAP AC. Also appear unstable, seem to lack memory. Tried to remove files but without success. In Resources it states that I have only 3,3 MB free HD space... What to do?

Posted: **Sat Aug 03, 2019 2:12 pm**

RB4011 wifi 5ghz not solve, wlan1 crashes as always.
PS.
already gone the second year since the release of RB4011. But the problem has not been resolved.

Posted: **Sat Aug 03, 2019 4:11 pm**

v6.45.3 is released! but when I tried to update my system then it shows an error windows defender error 577, I really have no idea how to remove this error. if you have any idea about it then please share with me.

How are you updating? The device itself downloads the updates if you do it through Winbox so Windows Defender should not have any impact.

Posted: **Sat Aug 03, 2019 5:23 pm**

Just updated my RB4011iGS+RM from 6.45.1 to 6.45.3. I had skipped 6.45.2 as I'm using the SFP+ port for downlink into my network. I've used the "Download and Install" option from WinBox to perform the installation. After reboot, the SFP+ port will not pass traffic. Everything else works as expected when using the gbit interfaces.

6.45.3 claims to resolve the SFP+ issue... is anyone else using this configuration? I'm using a Cisco active DAC which was working without problems under 6.45.1.

edit: power cycle of the router after the upgrade finally resolved the issue. Fortunately this device is local to me...

Posted: **Sat Aug 03, 2019 11:27 pm**

edit: power cycle of the router after the upgrade finally resolved the issue. Fortunately this device is local to me...

Did you only upgrade ROS or remember to also upgrade firmware (/system routerboard upgrade)?

Posted: **Sun Aug 04, 2019 2:32 pm**

Hello,

The dude snmp v3 problem not fix ?

Posted: **Sun Aug 04, 2019 2:44 pm**

Posted by spacex — Fri Aug 02, 2019 12:25 am

Not fix dude snmp v3 ?

Posted by spacex — Sun Aug 04, 2019 2:32 pm

Hello,

The dude snmp v3 problem not fix ?

No, since it is not mentioned in the change log - Please keep this forum topic strictly related to this particular RouterOS release. - no need to repeat yourself.

emils response in the 6.45.2 topic still applies:

As for SNMPv3 and GRE issues. We are aware of these issues and are working on resolving them. However we much rather release a quicker update with fewer bug fixes which may help other users than waiting longer for issues that takes longer to fix.

Posted: **Sun Aug 04, 2019 3:14 pm**

Posted by spacex — Fri Aug 02, 2019 12:25 am
Not fix dude snmp v3 ?

Posted by spacex — Sun Aug 04, 2019 2:32 pm
Hello,

The dude snmp v3 problem not fix ?

No, since it is not mentioned in the change log - Please keep this forum topic strictly related to this particular RouterOS release. - no need to repeat yourself.

emils response in the 6.45.2 topic still applies:

As for SNMPv3 and GRE issues. We are aware of these issues and are working on resolving them. However we much rather release a quicker update with fewer bug fixes which may help other users than waiting longer for issues that takes longer to fix.

Everyone just needs to do his job! It is important for us to see the status of the problems.

Posted: **Sun Aug 04, 2019 3:23 pm**

It's actually rather annoying to see release topics filled with non-release specific replies, more annoying if you're replying to the post above and are still quoting the whole thing.

1. I have requested a mod to remove our posts, which are all offtopic.
2. If you want to be helpful, please do not post facts or findings as a question. Describe your issue thoroughly, describe the test you are actually performing with what parameters, what you expect and what you get instead. Mail to support with supout.rif.

Posted: **Sun Aug 04, 2019 4:40 pm**

Did you only upgrade ROS or remember to also upgrade firmware (/system routerboard upgrade)?

I'm not sure - I used the "Download and Install" option in WinBox (per this guide), then the router restarted, then I had to go run some cable to one of the gbit ports to restore management access to the router as the device never came back online (due to the SFP+ port not working).

Is there some other procedure I should be following?

Posted: **Sun Aug 04, 2019 4:47 pm**

Is there some other procedure I should be following?

Yes, firmware is not automatically upgraded together with RouterOS. You have to do /system routerboard upgrade, and once it succeeds (it takes less than three seconds), reboot the machine.

Posted: **Sun Aug 04, 2019 6:40 pm**

Just to clarify something, the routerboard firmware is part of ROS installation package, so you need to first update ROS, reboot into new version, and then do the firmware upgrade from within.
You can find the current version and the version available for upgrade under System > Routerboard in all management interfaces (winbox/webfig/CLI).
I'm mostly curious if your existing/old firmware was 6.45.1 or even older.

Posted: **Sun Aug 04, 2019 8:21 pm**

*) crs317 - fixed multicast packet receiving (introduced in v6.45);
*) hotspot - fixed default profile values not being used (introduced in v6.45);
*) rb4011 - fixed SFP+ interface linking (introduced in v6.45.2);
*) supout - fixed SIM slot printing (introduced in v6.45);

and once again mostly fixes for bugs introduced in recent STABLE releases. excuse my harsh criticism but are you kindergarden business or do you want to be recognized as a serious software development company...? what about software QA?

Posted: **Sun Aug 04, 2019 8:30 pm**

and again mostly fixes for bugs introduced in previous STABLE releases. excuse my harsh criticism but are you kindergarden business or do you want to be known as a serious software development company...?

That is actually expected to work exactly like this. The "stable" release channel used to be called "current", and that caused a lot of confusion. So at some point Mikrotik renamed it to "stable", and, in my opinion, it just made the matters worse. Anyways, you can read what "stable" means in the context of Mikrotik releases here.

My own take on this is If you need something production quality, you should always stick to "long-term" release channel, and only use "stable" for testing or if it contains some features that you absolutely cannot leave without.

Posted: **Sun Aug 04, 2019 9:34 pm**

Board: RB4011iGS+5HacQ2HnD
Problem: on all ros 6.44.x-6.45.x on PPP client/server interfaces (L2TP, PPTP, PPPoE) appear at the same time small Tx Drops counters. On ros 6.43.16 works well on same config.

UPDATE: +2 Tx Drops exactly every 60 seconds

Posted: **Sun Aug 04, 2019 10:46 pm**

1. I have requested a mod to remove our posts, which are all offtopic.
2. If you want to be helpful, please do not post facts or findings as a question. Describe your issue thoroughly, describe the test you are actually performing with what parameters, what you expect and what you get instead. Mail to support with supout.rif.

1)You can't decide what to ask me how.
2)We already share the necessary files with mikrotik support

Posted: **Mon Aug 05, 2019 12:26 am**

2)We already share the necessary files with mikrotik support

Then thanks, that is helpful.

[/offtopic]

Posted: **Mon Aug 05, 2019 2:47 pm**

Changes in this release:

*) smips - reduced RouterOS main package size (disabled LTE modem, dot1x and SwOS support);

Does it mean that LTE modem that is in the USB slot won't work?

Posted: **Mon Aug 05, 2019 2:55 pm**

There are no SMIPS devices with USB slot.

Posted: **Mon Aug 05, 2019 2:59 pm**

Does it mean that LTE modem that is in the USB slot won't work?

Could you please describe to us how you are planning to connect USB interface to devices which do not have USB?

Posted: **Mon Aug 05, 2019 4:05 pm**

I don't know what smips device is, I have hAP and two hAP lites. Maybe I don't need the whole smips package.

Posted: **Mon Aug 05, 2019 5:56 pm**

I don't know what smips device is, I have hAP and two hAP lites. Maybe I don't need the whole smips package.

Processor architecture, hAP is mipsbe, hAP Lite is smips.

Posted: **Mon Aug 05, 2019 7:08 pm**

My RB4011 generated a autosuppout.rif. Another cAP ac told me something about a kernel failure within its log.

Posted: **Mon Aug 05, 2019 8:08 pm**

I don't know what smips device is, I have hAP and two hAP lites. Maybe I don't need the whole smips package.
Processor architecture, hAP is mipsbe, hAP Lite is smips.

ok, thanks, so I assume noone needs LTE on smips so everything's fine

Posted: **Mon Aug 05, 2019 10:18 pm**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.

Posted: **Mon Aug 05, 2019 10:30 pm**

Don´t know if this is related, but after having upgraded to 6.45.3 I have encountered strange behavior on a few different devices: they suddenly stop responding to ping and can no longer be accessed via web. Forced to use winbox, but not really sure if the device works properly. They are CAP´s, of different types. Tried to reset with CAP config, but they are still behaving strange. Maybe some faulty config, created by me. But they have been working without any issues before upgrade.

Posted: **Mon Aug 05, 2019 11:03 pm**

I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

The upgrade package is downloaded to ramdisk, which may be occupied also by hidden files, so try rebooting just before the upgrade. So the 16 MB flash size is not the issue in this case, the issue is small RAM.

Posted: **Mon Aug 05, 2019 11:10 pm**

I just discovered that an export of IPSec policies does not include peer= information in 6.45.3 I do not know when this problem arose
Steps to reproduce -- export config either full or just /ip ipsec policy
Attempt to import : fails with missing peer
attempted after first migration to do a export verbose -- no change, peer information missing.

Posted: **Tue Aug 06, 2019 11:27 am**

It will not include peer, if you upgraded from version where policy was set without peer.
If you set peer after upgrade or added policy already in v6.45.3 then it will be exported.

Posted: **Tue Aug 06, 2019 10:17 pm**

I can not receive RIP multicast announcements via ipip tunnels anymore on 6.45.3.
The UPD port 520 packets via tunnel don't even hit the firewall.

Downgrading to 6.45.2 restores full functionality (no configuration change).

Hw iis tile RB1009

Posted: **Wed Aug 07, 2019 12:19 am**

I have a problem
After updating to version 6.45 I was unable to login on the microtech via winbox what solution please advise
Login or password is wrong

Posted: **Wed Aug 07, 2019 12:27 am**

Upgrade Winbox to 3.19

Posted: **Wed Aug 07, 2019 12:29 am**

Upgrade Winbox to 3.19

yas!!
I did but the same problem

Posted: **Wed Aug 07, 2019 8:05 am**

Try "admin" with empty password then

Posted: **Wed Aug 07, 2019 5:28 pm**

hAP Lite (RouterBOARD 941-2nD) - still problem with space. (32MB RAM)
Last stable version which I could install is something around 6.40.x

Empty file list, almost bare metal config, file download OK, but after reboot it says "no space"
The only answer from support is "It's strange, do netinstall". Yeah.... I've got several dozen of them. It's impossible.

Are you gonna fix thix or should I put it to trash?

The only what I can do now is to use beta channel - packages are smaller and it's working on SMIPS.

Posted: **Wed Aug 07, 2019 6:33 pm**

hAP Lite (RouterBOARD 941-2nD) - still problem with space. (32MB RAM)
Last stable version which I could install is something around 6.40.x

Empty file list, almost bare metal config, file download OK, but after reboot it says "no space"
The only answer from support is "It's strange, do netinstall". Yeah.... I've got several dozen of them. It's impossible.

Are you gonna fix thix or should I put it to trash?

The only what I can do now is to use beta channel - packages are smaller and it's working on SMIPS.

Try individual packages

viewtopic.php?p=738017

Posted: **Thu Aug 08, 2019 12:20 am**

Board: RB4011iGS+5HacQ2HnD
Problem: on all ros 6.44.x-6.45.x on PPP client/server interfaces (L2TP, PPTP, PPPoE) appear at the same time small Tx Drops counters. On ros 6.43.16 works well on same config.

/ip neighbor discovery-settings
set discover-interface-list=none

dropped packet are discovery packet

set discover interface without pppoe-client by using interface list

Posted: **Fri Aug 09, 2019 3:53 am**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.

I got same problem, Not enough space!
Free HDD Space: 7.3 MiB Architecture Name: smips Board Name: hAP lite Version: 6.45.2 (stable)

Posted: **Fri Aug 09, 2019 7:27 am**

Still Hotspot captive portal not show automatically.

The same thing happened to me, I was trying three days, I took another one with version 6.43 and there was no problem.
The login page does not appear automatically or is not redirected. I have to write manually in the browser.
Mikrotik HAP Lite OS 6.45.3

Posted: **Fri Aug 09, 2019 9:31 am**

Hi, a problem with sstp and ovpn tunnels between ccr1009 and rb2011 over a high latency link (700-1000ms) has appeared after the update. Tunnel is dropping, never stays open for more than a minute, sometimes drops after a few seconds, reconnects are slow - unusable. Tried fiddling with mtu/mru no change, sstp debug showed IPCP TIMER message at disconnects. Reverting to 6.44.5 long term solved the issue.

Kind regards, Andrej

Posted: **Fri Aug 09, 2019 8:16 pm**

Board: RB4011iGS+5HacQ2HnD
Problem: on all ros 6.44.x-6.45.x on PPP client/server interfaces (L2TP, PPTP, PPPoE) appear at the same time small Tx Drops counters. On ros 6.43.16 works well on same config.

yes my router ccr1009 loss tx packet in ppp client after upgarde to 6.45.x

Posted: **Sat Aug 10, 2019 3:08 am**

web proxy is not working with stable 6.45.3 on hAP Lite, not with the redirect firewall rule, nor with the explicit setting of the proxy server in the browser. Did work before, returned to long term 6.44.5 and it is working again.
Why a web-proxy on such a small device, without even caching something? Well the HTTP request handling by the proxy is much better than a Chrome browser. Pages do load 5 to 10 times faster with the proxy over a line with long round trip delay. (Satellite links have 600ms+ delays). Remote handling of the web interface of a router was not even possible over the direct satellite link, with the proxy server its again workable. It seems to be related to HTTP session reuse. (avoiding the long TCP session setup handshake, 600ms per request or answer)

Posted: **Mon Aug 12, 2019 3:40 am**

This L7 Regexp does not work anymore since update:

\.(exe|dmg|cab|msi|flv|mp2|mp3|m4a|mp4|torrent)($|\?)

I used this to block file download. I also don't know which MikroTik version I had before. I think it was the 6.43.

Posted: **Mon Aug 12, 2019 8:36 am**

Please don't try to use L7 for file extension blocking. It's not for that.

Posted: **Mon Aug 12, 2019 1:51 pm**

Can't login via linux MAC-Telnet 0.4.4. after update to this version.
Connecting to.......done
Login failed, incorrect username or password

ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet.

The password is correct.

Posted: **Mon Aug 12, 2019 2:04 pm**

Can't login via linux MAC-Telnet 0.4.4. after update to this version.
Connecting to.......done
Login failed, incorrect username or password

ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet.

The password is correct.

Seems like you did not read the release notes ...

Important note!!!
Due to removal of compatibility with old version passwords in this version, downgrading to any version prior to v6.43 (v6.42.12 and older) will clear all user passwords and allow password-less authentication. Please secure your router after downgrading.
Old API authentication method will also no longer work, see documentation for new login procedure:
https://wiki.mikrotik.com/wiki/Manual:API#Initial_login

Posted: **Mon Aug 12, 2019 2:57 pm**

This L7 Regexp does not work anymore since update:
Code: Select all
\.(exe|dmg|cab|msi|flv|mp2|mp3|m4a|mp4|torrent)($|\?)
I used this to block file download. I also don't know which MikroTik version I had before. I think it was the 6.43.

You do understand that this is useless in an ever growing https world, right?

Posted: **Mon Aug 12, 2019 3:40 pm**

We know that a WinBOX upgrade was needed to v3.19 for login in release 6.45.x , now WinBOX v3.19 does succeed in this login but only sometimes for 6.45.3 (and even for the latest test version) . When it fails then 6 or more attempts are needed to log in (user en password wrong message), all that time login via the web is immediate without problems. Combine this with a long latency connection (satelite is 600ms+) , failing logins with WinBOX , unstable SSTP tunnel and not functioning of the webproxy in the hAP Lite, and my remote management has become quite stressfull.

I have remotely a hEX with DUDE. The hEX makes a SSTP tunnel to my hAP Lite (the hEX cannot be contacted from the outside, for many reasons). The hEX and DUDE take care of managing multiple local networks, and gives connections to the web pages and other management tools for routers, switches, APs, line modems (and SXT LTE) . The 2 transparant webproxies in hAP Lite and hEX are very effective accelerators for the management web pages. This all worked fine in 6.44 ,

Posted: **Mon Aug 12, 2019 8:49 pm**

I have upgraded multiple Routers without major issues but I just have noticed that my RB2011 stopped to advertise SLAAC addresses for my IPv6 setup. None of my clients are able to get a global IPv6 address. When I connect to the router I can ping IPv6 addresses but none of the clients can't as they don't get IPv6 addresses.

It was working on on 6.45.2 version

I just downgraded my RB2011 from 6.45.3 to 6.45.2 and all my IPv6 devices got Global Address and can reach IPv6 internet sites normally.

This version has an issue with SLAAC advertising IPv6 addresses to clients.

Posted: **Tue Aug 13, 2019 10:35 am**

Hi, may be I was find the bug.

Than Mikrotik send to RADIUS packet of Interim-Update for DHCP lease the value of Acct-Input-Octets and Acct-Output-Octets is the same!
In Queues I can see the different values of send and recieved octets.

Packet recieved by RADIUS:

rad_recv: Accounting-Request packet from host 192.168.4.254 port 34324, id=124, length=214
        User-Name = "B0:4E:26:D0:33:DB"
        NAS-Port-Type = Ethernet
        NAS-Port = 2213551065
        Calling-Station-Id = "1:b0:4e:26:d0:33:db"
        Framed-IP-Address = 188.114.223.27
        Called-Station-Id = "vlan_22"
        Agent-Remote-Id = 0x646f6d5f3630625f355f32
        Agent-Circuit-Id = 0x30303334
        Event-Timestamp = "Aug 13 2019 08:11:35 MSK"
        Acct-Status-Type = Interim-Update
        Acct-Session-Id = "d91bf083"
        Acct-Authentic = RADIUS
        Acct-Session-Time = 1796
        Acct-Input-Octets = 381994156
        Acct-Input-Gigawords = 0
        Acct-Input-Packets = 290516
        Acct-Output-Octets = 381994156
        Acct-Output-Gigawords = 0
        Acct-Output-Packets = 181132
        NAS-Identifier = "NAS - Center"
        Acct-Delay-Time = 1
        NAS-IP-Address = 192.168.4.254

Posted: **Tue Aug 13, 2019 4:34 pm**

L2TP/IPsec tunnel stopped working after I updated my RouterBOARD 3011UiAS from v6.44.1 to v6.45.3
error:
failed to pre-process ph2 packet.

Had same problem with other router and after downgrade back to rOS v6.42.4 it solved the problem...
Any ideas is it known issue? And when it could be fixed?

Posted: **Tue Aug 13, 2019 5:14 pm**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.
I got same problem, Not enough space!
Free HDD Space: 7.3 MiB Architecture Name: smips Board Name: hAP lite Version: 6.45.2 (stable)

I have seeing this space error already in few devices: A CRS326, hAP AC, hAP ac2 with any 6.45.x version and I have been unable to find a solution. Even when I manually upload the firmware it reports wrongly the free space (i.e. 5% free) but I can upload the firmware that in theory exceeds this space limit.

I think this is a bug on the code and way files handling is done and/or how they are reported on the File System.

Posted: **Wed Aug 14, 2019 3:38 am**

I have seeing this space error already in few devices: A CRS326, hAP AC, hAP ac2 with any 6.45.x version and I have been unable to find a solution. Even when I manually upload the firmware it reports wrongly the free space (i.e. 5% free) but I can upload the firmware that in theory exceeds this space limit.

I think this is a bug on the code and way files handling is done and/or how they are reported on the File System.

Update packages are usually uploaded to RAM so free flash space is not an issue here. Exclusions are devices with >16 MB flash (mostly Routerboard and CCR devices) and hAP lite as it has only 32 MB of RAM so not enough room there either...

Posted: **Thu Aug 15, 2019 5:34 am**

hap lite upgrade issue is not fixed! I have a hap lite with very very very basic config (wifi pseudo bridge to local ports + dhcp client). I am running 6.45.1 and if I try to update to 6.45.3 I get an error : "ERROR: not enough disk space, 7.3MiB required and only 7.3MiB is free." ... I have no files on the device.

Looks like 16MiB flash size on hap lite devices was a very bad decision for mikrotik .... hope they learned a lesson from this fiasco!

JF.
I got same problem, Not enough space!
Free HDD Space: 7.3 MiB Architecture Name: smips Board Name: hAP lite Version: 6.45.2 (stable)

On hAP Lite, due limitation of storage so upgrade process

main package *.npk

using FTP method will fail because not enough disk space. All you need just change upgrade method using netinstall https://wiki.mikrotik.com/wiki/Manual:Netinstall read the wiki carefully.

Posted: **Thu Aug 15, 2019 12:58 pm**

On hAP Lite, due limitation of storage so upgrade process

main package *.npk

using FTP method will fail because not enough disk space. All you need just change upgrade method using netinstall https://wiki.mikrotik.com/wiki/Manual:Netinstall read the wiki carefully.

Thank you hAP Lite upgraded!

Posted: **Fri Aug 16, 2019 12:03 pm**

https://download.mikrotik.com/routeros/ ... 6.45.3.npk

Pleas need mirror download
Problem 9 kB/s

Posted: **Fri Aug 16, 2019 12:08 pm**

$ wget https://download.mikrotik.com/routeros/6.45.3/routeros-mipsbe-6.45.3.npk
Connecting to download.mikrotik.com (download.mikrotik.com)|2a02:610:7501:4000::226|:443... connected.

routeros-mipsbe-6.4 100%[===================>]  11.54M  5.56MB/s    in 2.1s

IPv4:

$ wget -4 https://download.mikrotik.com/routeros/6.45.3/routeros-mipsbe-6.45.3.npk
Connecting to download.mikrotik.com (download.mikrotik.com)|159.148.172.226|:443... connected.

routeros-mipsbe-6.4 100%[===================>]  11.54M  7.24MB/s    in 1.6s

Posted: **Fri Aug 16, 2019 1:20 pm**

2019-08-16 13:19:34 (33.2 MB/s) - ‘routeros-mipsbe-6.45.3.npk’ saved [12097165/12097165]

Maybe check your ISP ?

Posted: **Fri Aug 16, 2019 10:07 pm**

upgraded an rb450g from 6.44.3 to 6.45.3. my gre tunnel would not come up ike/ipsec working fine but could not get the tunnel up. Also seemed to affect logging, I could not get any debug info, in fact all that filled my logs were fw drops of the gre tunnel establishment traffic. Had to downgrade to my remote net back up. Everything else seemed to work fine as does a rb2011uas which I upgraded as well, but no gre tunnel config on that box.

I also found that downgrading to 6.44.5_lts did not correct the problem.

Posted: **Sun Aug 18, 2019 5:36 pm**

Good day, sirs.
I have a problem: I connected 2 Mikrotiks with IPSec pre-shared keys. When I tryed to make export, I get

#error exporting /ip ipsec identity
#error exporting /ip ipsec policy
#error exporting /ip ipsec settings

How I can reset this error?
I made downgrade from 6.45.3 to 6.44.5, but this not helped.
I can reach this router only through internet. Please, help me.

Posted: **Sun Aug 18, 2019 8:48 pm**

upgraded an rb450g from 6.44.3 to 6.45.3. my gre tunnel would not come up ike/ipsec working fine but could not get the tunnel up. Also seemed to affect logging, I could not get any debug info, in fact all that filled my logs were fw drops of the gre tunnel establishment traffic.

Why did you not fix the firewall instead? Or read about this problem in the earlier discussions about released versions?

Posted: **Sun Aug 18, 2019 11:32 pm**

omnitik crashes after upgrading firmware version to 6.45.3

Posted: **Mon Aug 19, 2019 8:48 am**

omnitik crashes after upgrading firmware version to 6.45.3

Provide more detailed information about "crash". After crash appears, write to support@mikrotik.com and send supout file from your router.

Posted: **Mon Aug 19, 2019 1:30 pm**

My feedback after upgraded ~80x RB951G from 6.43.2 to 6.45.3

About 10x devices at the First login from WinBox 3.19 give me error credentials but second and every try later was successful.

3x devices loose all /user information and new user admin without password appeared. By default I not use admin user and he is deleted.

Posted: **Tue Aug 20, 2019 6:00 am**

Hello! There is the bug in the latest 6.45.3 firmware for RBcAP2nd . If you update fimware on this access point to the latest 6.45.3 and then try to reset it - you will recieve the brick. Next step is only to flash it with netinstall to make it working again. I tryed this with three RBcAP2nd's. And in all cases result was the same - you will recieve the brick.

Posted: **Tue Aug 20, 2019 1:30 pm**

Can't login via linux MAC-Telnet 0.4.4. after update to this version.
Connecting to.......done
Login failed, incorrect username or password

ROS log: echo: system,error,critical login failure for user admin from XX:XX:XX:XX:XX:XX via mac-telnet.

The password is correct.

Same issue here. It seems to be layer 2 side. e.g I can log into the routers if there is layer 3 access. However not via mac telent. Brand new routers, only updated ROS. i.e not downgraded. As soon as layer 3 establishes e.g pppoe then we can login with the correct admin/password combo.

Posted: **Tue Aug 20, 2019 4:16 pm**

As login method was changed in v6.43 and old login method support was dropped in 6.45, you cannot use old MAC-Telnet clients anymore.

Posted: **Tue Aug 20, 2019 9:26 pm**

omnitik crashes after upgrading firmware version to 6.45.3

I've got same problem with RB1100-AhX4. I've got 4 RB1100 and all 4 crashing....

Posted: **Wed Aug 21, 2019 2:30 am**

After upgrading RB3011 from 6.44.3 to 6.45.3, all my PPTP has stopped working, inbound and outbound.

Downgrading one by one PPTP works again only when I got to 6.44.4. Not good!

Posted: **Wed Aug 21, 2019 7:05 am**

After upgrading RB3011 from 6.44.3 to 6.45.3, all my PPTP has stopped working, inbound and outbound.

Search back in the 6.45.x topics for the fix of GRE handling in firewall and the bug introduced by that fix and how to deal with it.

And although PPTP can be fixed easily, think about its drawbacks and consider other types of VPN - it could have been nicknamed a "Poor Privacy Tunneling Protocol" already a long time ago.

Posted: **Wed Aug 21, 2019 1:27 pm**

951Ui-2nD user here.
My internet provider uses pppoe.
I have observed that while using 6.44.5 I do not have occasional disconnects with "peer is not responding" as I have experienced with 6.45.1/2/3.So 6.44.x seem to be ok in this regard.
With 6.45.3 .i may have one or 2 disconnects in 24 hours.
Same.keepalive set at 5.
So it-s not quite "stable" in my view.
If i remember correctly i have used the betas of the 45s series in the past, but i can't remember pppoe disconnecting being an issue with the versions that i have tested.

Posted: **Wed Aug 21, 2019 1:31 pm**

As login method was changed in v6.43 and old login method support was dropped in 6.45, you cannot use old MAC-Telnet clients anymore.

ok so I would need to also upgrade ROS on the interconnected router I am mac-telneting from?

Posted: **Wed Aug 21, 2019 4:16 pm**

ok so I would need to also upgrade ROS on the interconnected router I am mac-telneting from?

Looks like it's not the same problem as Olexandr999's (he's connecting from third-party Linux client, not from RouterOS or WinBox), but yes, you need to upgrade both MAC Telnet server and client

Posted: **Wed Aug 21, 2019 7:16 pm**

In version 6.45.3 this problem is presented. Still Hotspot captive portal not show automatically. In the client devices the message "Internet not available" is presented

Posted: **Thu Aug 22, 2019 7:53 am**

In version 6.45.3 this problem is presented. Still Hotspot captive portal not show automatically. In the client devices the message "Internet not available" is presented

Try ROS 6.44.5 long-term version instead.

thread viewtopic.php?f=21&t=150045
changelogs https://mikrotik.com/download/changelogs
download https://mikrotik.com/download

Posted: **Fri Aug 23, 2019 7:09 am**

it seams to be broken on this version

[admin@MikroTik] > /ip kid-control pause Peter
[admin@MikroTik] > /ip kid-control print

Docu says:
It is also possible to pause all restrictions and then resume them whenever you want it.

But when I pause the ip firewall rules are still active.

Posted: **Sat Aug 24, 2019 7:10 am**

web proxy is not working with stable 6.45.3 on hAP Lite, not with the redirect firewall rule, nor with the explicit setting of the proxy server in the browser. Did work before, returned to long term 6.44.5 and it is working again.
Why a web-proxy on such a small device, without even caching something? Well the HTTP request handling by the proxy is much better than a Chrome browser. Pages do load 5 to 10 times faster with the proxy over a line with long round trip delay. (Satellite links have 600ms+ delays). Remote handling of the web interface of a router was not even possible over the direct satellite link, with the proxy server its again workable. It seems to be related to HTTP session reuse. (avoiding the long TCP session setup handshake, 600ms per request or answer)

Confirmed. Using the Web-Proxy to form a walled garden with a redirect to sign-up server. Was working under 6.44. Upgraded to 6.45.3 and redirect quit working. Downgraded to 6.44.5. Redirect started working again. Upgraded to 6.45.2 and redirect quit again.

Posted: **Thu Aug 29, 2019 7:53 am**

v6.45.5 [stable] is released!

MikroTik

v6.45.3 [stable] is released!

v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!

Re: v6.45.3 [stable] is released!