MikroTik

RouterOS version 7.1beta1 has been released in public "development" channel!

What's new in 7.1beta1 (2020-Jul-21 08:58):

!) added FastTrack and NAT hardware offloading support for CRS317-1G-16S+RM;
!) ported features and fixes introduced in v6.47.1;
*) route - added rpki-check;
*) route - bgp improvements;
*) route - do not allow modifying/deleting "main" table;
*) route - fixed incorrectly interpreted prefix states received from RTR;
*) route - fixed IPv6 ECMP connected routes;
*) route - fixed IPv6 policy routing;
*) route - routing rules improvements;
*) wireless - fixed wireless performance for 802.11b/g/n and 802.11a/n interfaces on non-ARM architecture devices;
*) other minor fixes and improvements;

P.S: version numbering has been updated to v7.1beta due to internal workflow modifications. This is just the next beta version after 7.0beta8

All released RouterOS v7 changelogs are available here:
https://mikrotik.com/download/changelog ... lease-tree

How to report RouterOS v7 bugs:
viewtopic.php?f=1&t=152006

!) added FastTrack and NAT hardware offloading support for CRS317-1G-16S+RM;

Holy...<beep>. When is this coming to other CRS3xx switches? The CRS305 in particular? Please pretty please?

When is this coming to other CRS3xx switches? The CRS305 in particular?

I hope ... but won't hold my breath. CRS317 is built around 98DX8216 SoC while most of the rest are built around 98DX32xx ... not sure if 98DX32xx can do the same magic as 98DX82xx ... CRS309 and CRS312 might support it soon (they both have 98DX82xx as well).

.
"ip route" context is still a CLI-only domain
.

"ip route" context is still a CLI-only domain

For me it is possible to manage routes from winbox, however:
- whenever I change something in a route table entry it disappears from view
- when I go to another TAB on the window and back to the overview, the modified route again appears
- when a status changes on a route, e.g. a route with ping check goes to available/not it is not updated on an open route overview.

It looks like there is some difficulty with the access from the dynamic contents of the route table from winbox.
(this was the same in earlier v7 betas that I tried!)

Updated HAP AC lite, great wireless performance. Hope for fast progress!

.
a ball plus : ) vrf-menu has joined ip-context in winbox
.

NAT Hardware Offloading !
Great news. When is this coming to the actual router products like CCR series or new router products ?

NAT Hardware Offloading !
Great news. When is this coming to the actual router products like CCR series or new router products ?

Same Question from my side!

NAT Hardware Offloading !
Great news. When is this coming to the actual router products like CCR series or new router products ?

Not going to happen. They don't have the hardware for it, up to and including the CCR2004. Maybe, just maybe, the CCR2016 will be an ARM64/PresteraDX combo, but I wouldn't count on it (would be great, though...).

The USB port of my CCR1036-8G-2S+ now works again

The USB port of my CCR1036-8G-2S+ now works again

Great to Hear That

ROS v7.1beta1 still have trouble with IPv6 BGP as described here: viewtopic.php?f=1&t=162424&p=800209

bgp keep alive not sent or broken to the second bgp session estabilished.
on both essions we check rpki.
On 7b8 the two session were working fine, now the second goes down each 180s for hold time expire on remote (ccr with 6.47.1).

Also when we clear the session the main routing rable is not able to clean, or it is not able to clean in a reasonable time.

regards
Ros

Great news! Can't wait to see RoS 7.X stable. Maybe 7.5?

Let GPT3 write the rest of the code to reach 7.1 production, and the day after UltimateROS.

tried to install from packages menu to update but I get the following error:
missing routeros-smips-7.1beta1.npk
Unit is hap lite (for testing)
not sufficient space to download and move to files (manual mode)

Hi.
After upgrading RBD53G-5HacD2HnD-TC&EG12-EA to new v7.1 beta, router shut down many times, because for no apparent reason CPU nominal frequency automatically set to = auto.
When change it to normal frequency = 716, all start work correctly after several restarts. I had to flash netinstall, so that the router would come to life. But in winbox still trying upgrade to 6.47.1 version. LTE modem also work not correctly. wAP ac LTE6 kit working on the same project with the same sim card give more speed with only 2 bands.
After the firmware v7.1beta1 it shows all the time - internet limited access.

We use sim card Bite operator - Latvia.
Thank you,
Alex

Reboot loop on RBSXTR with LTE6 modem.
Reproducible, also tried netinstall.
Could not generate supout, did not find an autosupout.
Log told me: Device rebootet after kernel panic.
Uptime 33seconds, then the device rebooted.

Edit: I tried to overcome the boot loop by disabling the lte device (which was just a guess) , which did not work. It rebooted anyway and after reboot, the lte device was active again.
I upgraded an other device earlier (hap ap lite) which still works very good!

found a main routing table bgp related bug:
- if you have a static invalid route about a prefix
- then you learn the same prefix from a bgp peer
- then the bgp session goes down
- routeros don't clear the bgp route learned, leaving it as invalid

regards
Ros

is ospf working properly now? can anyone confirm?

hi, how many nat rules can we add with hardware offload? Is there a limitation?

CRS317 supports up to 4096 NAT entries. To clarify it is not about how many rules you have, but how many connections can be offloaded.

tried to install from packages menu to update but I get the following error:
missing routeros-smips-7.1beta1.npk
Unit is hap lite (for testing)
not sufficient space to download and move to files (manual mode)

These devices already have problems updating RouterOS v6 from the device itself... There is simply not enough space on the flash and not enough RAM to upload a second version so it can update it in-place.
(other devices with 16MB flash but with 256MB RAM usually have no problem because they can upload the new version in RAM for installation)

Given that v7 will of course grow, and that it now is all in a single package so you can no longer trim down the size by using separate packages and installing only what you need, I guess these devices in the long run will not be able to run v7 realistically...
For now of course you can use netinstall to install a v7 beta, but likely when the next beta appears you again face the same issue and have to use netinstall every time you want to update.

@notToNew - Please create a support ticket at support@mikrotik.com with all the information about this issue so we can troubleshoot it.

How is HW-offloaded NAT configured?
Does it kick in automatically?
How do I notice that the 4096 connection limit is reached?
Is it shown, which connections aren't HW-offloaded anymore?

routes learnt from ibgp becomes invalid.
[admin@MikroTik] /routing/bgp/connection> add remote.address=2a0f:9400:8017:32::2 local.address=2a0f:9400:8017:32::1 local.role=ibgp-rr template=ipv6-ibg connect=yes listen=yes
[admin@MikroTik] /routing/bgp/connection> add remote.address=2a0f:9400:8017:20::2 local.address=2a0f:9400:8017:20::1 local.role=ibgp-rr template=ipv6-ibg connect=yes listen=yes
[admin@MikroTik] /routing/bgp/connection> ..
[admin@MikroTik] /routing/bgp> peer-cache/
[admin@MikroTik] /routing/bgp/peer-cache> print
Flags: E - established
0 E remote.address=192.168.168.46 .as=213196 .id=192.168.40.2 .refused-cap-opt=no .capabilities=mp,rr,as4 .messages=161 .bytes=3179 .eor=""
local.address=192.168.168.45 .as=213326 .id=10.28.115.18 .capabilities=mp,rr,gr,as4 .messages=148 .bytes=3106 .eor=""
output.procid=22
input.procid=22 ebgp
hold-time=3m keepalive-time=1m

1 E remote.address=192.168.168.2 .as=213326 .id=192.168.254.2 .refused-cap-opt=no .capabilities=mp,rr,as4 .messages=23 .bytes=467 .eor=""
local.role=ibgp-rr .address=192.168.168.1 .as=213326 .id=10.28.115.18 .capabilities=mp,rr,gr,as4 .messages=24 .bytes=638 .eor=""
output.procid=24
input.procid=24 ibgp
multihop=yes hold-time=3m keepalive-time=1m

2 E remote.address=192.168.168.22 .as=213326 .id=192.168.254.10 .refused-cap-opt=no .capabilities=mp,rr,as4 .messages=22 .bytes=476 .eor=""
local.role=ibgp-rr .address=192.168.168.21 .as=213326 .id=10.28.115.18 .capabilities=mp,rr,gr,as4 .messages=22 .bytes=600 .eor=""
output.procid=25
input.procid=25 ibgp
multihop=yes hold-time=3m keepalive-time=1m

3 E remote.address=2a0f:9400:8017:69::2 .as=213326 .id=115.187.62.14 .refused-cap-opt=no .capabilities=mp,rr,as4 .afi=ipv6 .messages=16 .bytes=390 .eor=""
local.role=ibgp-rr .address=2a0f:9400:8017:69::1 .as=213326 .id=10.28.115.18 .capabilities=mp,rr,gr,as4 .afi=ipv6 .messages=16 .bytes=550 .eor=""
output.procid=26
input.procid=26 ibgp
multihop=yes hold-time=3m keepalive-time=1m

4 E remote.address=2a0f:9400:8017:32::2 .as=213326 .id=192.168.254.2 .refused-cap-opt=no .capabilities=mp,rr,as4 .afi=ipv6 .messages=11 .bytes=288 .eor=""
local.role=ibgp-rr .address=2a0f:9400:8017:32::1 .as=213326 .id=10.28.115.18 .capabilities=mp,rr,gr,as4 .afi=ipv6 .messages=11 .bytes=411 .eor=""
output.procid=27
input.procid=27 ibgp
multihop=yes hold-time=3m keepalive-time=1m
Routes learnt from ibgp are getting marked as invalid.

Show output of
/routing/route/print detail

Show output of
/routing/route/print detail

[admin@MikroTik] > /routing/route/print detail
Flags: X - disabled, I - inactive, F - filtered, U - unreachable, A - active; c - connect, s - static, r - rip, b - bgp, o - ospf, d - dhcp, v - vpn, m - modem, a - ldp-address, l - ldp-mapping; + - ecmp
As afi=ip4 contribution=active dst-address=0.0.0.0/0 routing-table=main pref-src="" gateway=10.28.115.17 immediate-gw=10.28.115.17%WAN check-gateway=ping distance=1 scope=30 target-scope=10 belongs-to="Static route"
debug.fwp-ptr=0x20202190

Ac afi=ip4 contribution=active dst-address=10.28.115.16/30 routing-table=main gateway=WAN immediate-gw=WAN distance=0 scope=10 belongs-to="Connected route" local-address=10.28.115.18%WAN
debug.fwp-ptr=0x202020C8

Ab afi=ip4 contribution=active dst-address=172.22.146.0/25 routing-table=main gateway=192.168.168.2 immediate-gw=192.168.168.2%ether10 distance=200 scope=40 target-scope=30 belongs-to="BGP IP routes from 192.168.168.2"
bgp.peer-cache-id=*B000005 .local-pref=100 .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x202024B0

Ac afi=ip4 contribution=active dst-address=172.22.146.0/27 routing-table=main gateway=ether9 immediate-gw=ether9 distance=0 scope=10 belongs-to="Connected route" local-address=172.22.146.1%ether9
debug.fwp-ptr=0x2020212C

Ac afi=ip4 contribution=active dst-address=172.22.146.32/27 routing-table=main gateway=LAN immediate-gw=LAN distance=0 scope=10 belongs-to="Connected route" local-address=172.22.146.33%LAN
debug.fwp-ptr=0x202021F4

As afi=ip4 contribution=active dst-address=172.22.146.64/26 routing-table=main pref-src="" gateway=192.168.168.2 immediate-gw=192.168.168.2%ether10 distance=1 scope=30 target-scope=10 belongs-to="Static route"
debug.fwp-ptr=0x202025DC

Ab afi=ip4 contribution=active dst-address=192.168.30.0/24 routing-table=main gateway=192.168.168.46 immediate-gw=Peer-Burdwan distance=20 scope=40 target-scope=10 belongs-to="BGP IP routes from 192.168.168.46"
bgp.peer-cache-id=*B000003 .as-path="213196" .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202640

Ab afi=ip4 contribution=active dst-address=192.168.50.0/24 routing-table=main gateway=192.168.168.46 immediate-gw=Peer-Burdwan distance=20 scope=40 target-scope=10 belongs-to="BGP IP routes from 192.168.168.46"
bgp.peer-cache-id=*B000003 .as-path="213196" .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202640

Ab afi=ip4 contribution=active dst-address=192.168.108.0/24 routing-table=main gateway=192.168.168.22 immediate-gw=Dumdum-PoP distance=200 scope=40 target-scope=30 belongs-to="BGP IP routes from 192.168.168.22"
bgp.peer-cache-id=*B000009 .local-pref=100 .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202514

Ac afi=ip4 contribution=active dst-address=192.168.168.0/30 routing-table=main gateway=ether10 immediate-gw=ether10 distance=0 scope=10 belongs-to="Connected route" local-address=192.168.168.1%ether10
debug.fwp-ptr=0x20202064

Ac afi=ip4 contribution=active dst-address=192.168.168.4/30 routing-table=main gateway=Madhyamgram-PoP immediate-gw=Madhyamgram-PoP distance=0 scope=10 belongs-to="Connected route" local-address=192.168.168.5%Madhyamgram-PoP
debug.fwp-ptr=0x202023E8

Ac afi=ip4 contribution=active dst-address=192.168.168.20/30 routing-table=main gateway=Dumdum-PoP immediate-gw=Dumdum-PoP distance=0 scope=10 belongs-to="Connected route" local-address=192.168.168.21%Dumdum-PoP
debug.fwp-ptr=0x20202384

Ac afi=ip4 contribution=active dst-address=192.168.168.44/30 routing-table=main gateway=Peer-Burdwan immediate-gw=Peer-Burdwan distance=0 scope=10 belongs-to="Connected route" local-address=192.168.168.45%Peer-Burdwan
debug.fwp-ptr=0x2020244C

Ac afi=ip4 contribution=active dst-address=192.168.254.1 routing-table=main gateway=loopback immediate-gw=loopback distance=0 scope=10 belongs-to="Connected route" local-address=192.168.254.1%loopback
debug.fwp-ptr=0x20202000

Ac afi=ip6 contribution=active dst-address=2af:9400:8017:20::/64 routing-table=main gateway=Dumdum-PoP immediate-gw=Dumdum-PoP distance=0 scope=10 belongs-to="Connected route" local-address=2af:9400:8017:20::1%Dumdum-PoP
debug.fwp-ptr=0x20202384

Ac afi=ip6 contribution=active dst-address=2af:9400:8017:44::/64 routing-table=main gateway=Peer-Burdwan immediate-gw=Peer-Burdwan distance=0 scope=10 belongs-to="Connected route" local-address=2af:9400:8017:44::1%Peer-Burdwan
debug.fwp-ptr=0x2020244C

Ac afi=ip6 contribution=active dst-address=2a0e:46c5:f012::/64 routing-table=main gateway=UL-Redpanda immediate-gw=UL-Redpanda distance=0 scope=10 belongs-to="Connected route" local-address=2a0e:46c5:f012::2%UL-Redpanda
debug.fwp-ptr=0x202026A4

Ib afi=ip6 contribution=unreachable dst-address=2a0e:b107:9e4::/46 routing-table=main gateway=:: distance=200 scope=40 target-scope=30 belongs-to="BGP IP6 routes from 2a0f:9400:8017:32::2"
bgp.peer-cache-id=*B00000C .aggregator="213326:192.168.254.2" .local-pref=100 .atomic-aggregate=yes .origin=incomplete
debug.fwp-ptr=0x20202578

As afi=ip6 contribution=active dst-address=2a0e:b107:9ec::/46 routing-table=main pref-src="" gateway=blackhole immediate-gw="" distance=1 scope=250 target-scope=10 belongs-to="Static route"
debug.fwp-ptr=0x20202708

Ib afi=ip6 contribution=unreachable dst-address=2a0e:b107:b00::/46 routing-table=main gateway=:: distance=200 scope=40 target-scope=30 belongs-to="BGP IP6 routes from 2a0f:9400:8017:69::2"
bgp.peer-cache-id=*B00000A .local-pref=100 .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202578

Ib afi=ip6 contribution=unreachable dst-address=2a0e:b107:b04::/46 routing-table=main gateway=:: distance=200 scope=40 target-scope=30 belongs-to="BGP IP6 routes from 2a0f:9400:8017:69::2"
bgp.peer-cache-id=*B00000A .local-pref=100 .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202578

Ib afi=ip6 contribution=unreachable dst-address=2a0e:b107:b08::/46 routing-table=main gateway=:: distance=200 scope=40 target-scope=30 belongs-to="BGP IP6 routes from 2a0f:9400:8017:69::2"
bgp.peer-cache-id=*B00000A .local-pref=100 .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202578

Ib afi=ip6 contribution=unreachable dst-address=2a0e:b107:b0c::/46 routing-table=main gateway=:: distance=200 scope=40 target-scope=30 belongs-to="BGP IP6 routes from 2a0f:9400:8017:69::2"
bgp.peer-cache-id=*B00000A .local-pref=100 .atomic-aggregate=yes .origin=igp
debug.fwp-ptr=0x20202578

As afi=ip6 contribution=active dst-address=2a0f:9400:8017::/48 routing-table=main pref-src="" gateway=blackhole immediate-gw="" distance=1 scope=250 target-scope=10 belongs-to="Static route"
debug.fwp-ptr=0x20202708

Ac afi=ip6 contribution=active dst-address=2a0f:9400:8017::/64 routing-table=main gateway=loopback immediate-gw=loopback distance=0 scope=10 belongs-to="Connected route" local-address=2a0f:9400:8017::1%loopback
debug.fwp-ptr=0x20202000

Ac afi=ip6 contribution=active dst-address=2a0f:9400:8017:32::/64 routing-table=main gateway=ether10 immediate-gw=ether10 distance=0 scope=10 belongs-to="Connected route" local-address=2a0f:9400:8017:32::1%ether10
debug.fwp-ptr=0x20202064

Ac afi=ip6 contribution=active dst-address=2a0f:9400:8017:69::/64 routing-table=main gateway=Madhyamgram-PoP immediate-gw=Madhyamgram-PoP distance=0 scope=10 belongs-to="Connected route" local-address=2a0f:9400:8017:69::1%Madhyamgram-PoP
debug.fwp-ptr=0x202023E8

Ac afi=ip6 contribution=active dst-address=fe80::%ether1/64 routing-table=main gateway=ether1 immediate-gw=ether1 distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe93:b153%ether1
debug.fwp-ptr=0x20202320

Ac afi=ip6 contribution=active dst-address=fe80::%sfp1/64 routing-table=main gateway=sfp1 immediate-gw=sfp1 distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe93:b158%sfp1
debug.fwp-ptr=0x202022BC

Ac afi=ip6 contribution=active dst-address=fe80::%ether8/64 routing-table=main gateway=ether8 immediate-gw=ether8 distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe93:b15b%ether8
debug.fwp-ptr=0x20202258

Ac afi=ip6 contribution=active dst-address=fe80::%ether9/64 routing-table=main gateway=ether9 immediate-gw=ether9 distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe93:b15c%ether9
debug.fwp-ptr=0x2020212C

Ac afi=ip6 contribution=active dst-address=fe80::%ether10/64 routing-table=main gateway=ether10 immediate-gw=ether10 distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe93:b15d%ether10
debug.fwp-ptr=0x20202064

Ac afi=ip6 contribution=active dst-address=fe80::%WAN/64 routing-table=main gateway=WAN immediate-gw=WAN distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe69:6969%WAN
debug.fwp-ptr=0x202020C8

Ac afi=ip6 contribution=active dst-address=fe80::%loopback/64 routing-table=main gateway=loopback immediate-gw=loopback distance=0 scope=10 belongs-to="Connected route" local-address=fe80:deff:fe69:55ec%loopback
debug.fwp-ptr=0x20202000

Ac afi=ip6 contribution=active dst-address=fe80::%LAN/64 routing-table=main gateway=LAN immediate-gw=LAN distance=0 scope=10 belongs-to="Connected route" local-address=fe80::6e3b:6bff:fe93:b155%LAN
debug.fwp-ptr=0x202021F4

Ac+ afi=ip6 contribution=active dst-address=fe80::%Dumdum-PoP/64 routing-table=main gateway=Dumdum-PoP immediate-gw=Dumdum-PoP distance=0 scope=10 belongs-to="Connected route" local-address=fe80::5efe:a1c:7312%Dumdum-PoP
debug.fwp-ptr=0x20202384

Ac+ afi=ip6 contribution=active dst-address=fe80::%Dumdum-PoP/64 routing-table=main gateway=Dumdum-PoP immediate-gw=Dumdum-PoP distance=0 scope=10 belongs-to="Connected route" local-address=fe80::2:a0e:5ee8%Dumdum-PoP
debug.fwp-ptr=0x20202384

Ac+ afi=ip6 contribution=active dst-address=fe80::%Madhyamgram-PoP/64 routing-table=main gateway=Madhyamgram-PoP immediate-gw=Madhyamgram-PoP distance=0 scope=10 belongs-to="Connected route" local-address=fe80::5efe:a1c:7312%Madhyamgram-PoP
debug.fwp-ptr=0x202023E8

Ac+ afi=ip6 contribution=active dst-address=fe80::%Madhyamgram-PoP/64 routing-table=main gateway=Madhyamgram-PoP immediate-gw=Madhyamgram-PoP distance=0 scope=10 belongs-to="Connected route" local-address=fe80::2:a0e:606d%Madhyamgram-PoP
debug.fwp-ptr=0x202023E8

Ac+ afi=ip6 contribution=active dst-address=fe80::%Peer-Burdwan/64 routing-table=main gateway=Peer-Burdwan immediate-gw=Peer-Burdwan distance=0 scope=10 belongs-to="Connected route" local-address=fe80::5efe:a1c:7312%Peer-Burdwan
debug.fwp-ptr=0x2020244C

Ac+ afi=ip6 contribution=active dst-address=fe80::%Peer-Burdwan/64 routing-table=main gateway=Peer-Burdwan immediate-gw=Peer-Burdwan distance=0 scope=10 belongs-to="Connected route" local-address=fe80::2:6702:8462%Peer-Burdwan
debug.fwp-ptr=0x2020244C

Ac+ afi=ip6 contribution=active dst-address=fe80::%UL-Redpanda/64 routing-table=main gateway=UL-Redpanda immediate-gw=UL-Redpanda distance=0 scope=10 belongs-to="Connected route" local-address=fe80::5efe:a1c:7312%UL-Redpanda
debug.fwp-ptr=0x202026A4

Ac+ afi=ip6 contribution=active dst-address=fe80::%UL-Redpanda/64 routing-table=main gateway=UL-Redpanda immediate-gw=UL-Redpanda distance=0 scope=10 belongs-to="Connected route" local-address=fe80::3:a1c:7312%UL-Redpanda
debug.fwp-ptr=0x202026A4

A afi=link contribution=active dst-address=ether1 routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=sfp1 routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=ether8 routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=ether9 routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=ether10 routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=WAN routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=loopback routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=LAN routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=Dumdum-PoP routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=Madhyamgram-PoP routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=Peer-Burdwan routing-table=main distance=0 belongs-to="Interface"

A afi=link contribution=active dst-address=UL-Redpanda routing-table=main distance=0 belongs-to="Interface"

hgh cpu show in profile.(CCR1009)
so many unclassified 100% cpu

[admin@MikroTik-Lab-01] > /tool/profile freeze-frame-interval=1 cpu=all
Columns: NAME, CPU, USAGE
NAME C USAGE
unclassified 0 100%
cpu0 100%
console 1 0%
networking 1 0.5%
winbox 1 0%
management 1 1%
telnet 1 0%
unclassified 1 98.5%
cpu1 100%
management 2 0%
unclassified 2 100%
cpu2 100%
winbox 3 0%
management 3 0%
unclassified 3 100%
cpu3 100%
networking 4 0%
unclassified 4 100%
cpu4 100%
console 5 0.5%
management 5 0.5%
unclassified 5 99%
cpu5 100%
management 6 0%
unclassified 6 100%
cpu6 100%
networking 7 0%
profiling 7 0%
unclassified 7 100%
cpu7 100%
networking 8 0%
unclassified 8 100%
cpu8 100%

IDK why Mikrotik haven't implemented fq_codel or CAKE qdiscs since they're already present in Linux 5.6, leave the classic mangle based traffic classification and prioritization for the enterprise but home users just need a simpler way to get rid of the bufferbloat caused by ISP misconfiguration. Even if you get to create lots of mangle rules for each kind of traffic you have inside your home network and create queue trees, PCQ/SFQ is a dumb shaper (round robbin algorithm as a fancier term) that adds extra latency + packet loss during load.

Can not able to call /routing/filter/rule as output.filter in bgp template...
Note: In attachment image it is manually written not auto-complete by pressing "Tab"

RPKI check is working fine but while filtering it block valid Routes also..

Can not able to call /routing/filter/rule as output.filter in bgp template...
Note: In attachment image it is manually written not auto-complete by pressing "Tab"

Hello,
Output requires selection rules:

/routing filter rule
add action=accept chain=xx

/routing filter select-rule
add chain=xx-select do-where=xx

/routing bgp template
set 0 output.filter=xx-select

regards
Ros

Is the problem about ignoring MTU settings still happening in 7.1beta? ( viewtopic.php?t=158457 )

Is the problem about ignoring MTU settings still happening in 7.1beta? ( viewtopic.php?t=158457 )

no, jumbo frame is working fine at least on mellanox board.

refards
ros

Can not able to call /routing/filter/rule as output.filter in bgp template...
Note: In attachment image it is manually written not auto-complete by pressing "Tab"

Hello,
Output requires selection rules:

/routing filter rule
add action=accept chain=xx

/routing filter select-rule
add chain=xx-select do-where=xx

/routing bgp template
set 0 output.filter=xx-select

regards
Ros

Thanks for sharing the information. Now RPKI filtering remains....

*) wireless - fixed wireless performance for 802.11b/g/n and 802.11a/n interfaces on non-ARM architecture devices;

1. Will this be backported to RouterOS 6.x?
2. Only b/g/n and a/n, but not ac?

The specific issue was with version 7 only. If you have issues with v6, please feel free to open a ticket in support system.

Tried to install .iso image into KVM on Proxmox, but after install it reboots and is stuck at "Booting from hard disk..."

Same procedure works fine on the same KVM setup with 6.47.1... any idea?

Cheers, Jan

I can install version 7 on my device or it cannot be done because low-level license?
Device Model: 951Ui-2HnD
Architecture: mipsbe
License level: 4

ERROR: missing lora-7.1beta1-arm.npk

attempting on hAP ac2 from 6.48b12 to 7.1b1 yields above error msg.

edit:

i can go back to 6.47.1 but still can't go to 7.1. returned to 6.48 no problem, but 7.1 still won't download beyond the error msg. everything else is working normally/great! any ideas on what prevents the upgrade? thanks in advance for any help.

Short question, anybody tested it on an rb2011?
I would like the openvpn udp feature but my router is my main device at home. I dont use anything on special features

The RB2011 still supports partitioning. So partition it into 2 partitions, copy your current config to second partition, and update it.
When you are not happy, activate the 2nd partition and reboot and you will have the old version.
When it fails to boot or you powercycle it halfway through the boot, it will switch partitions automatically.

The RB2011 still supports partitioning. So partition it into 2 partitions, copy your current config to second partition, and update it.
When you are not happy, activate the 2nd partition and reboot and you will have the old version.
When it fails to boot or you powercycle it halfway through the boot, it will switch partitions automatically.

Thanks for tipp. At the moment it runs fine without any error.
UDP with OpenVPN works also.

RB760igs
tried to upgrade from 6.47.1

wooow, RB is dead
only Netinstall could help

shame

RB760igs
tried to upgrade from 6.47.1

wooow, RB is dead
only Netinstall could help

shame

Same here with a 3011. I thought maybe it was because I had two partitions so I netinstalled back to 6.47.1 repartitioned back to a single partition, upgraded my firmware to be sure then tried the upgrade to 7.1beta1 again. Still stuck on “starting services”. Tried netinstalling straight to 7.1beta1 and still stuck on “starting services”.

Tried to install .iso image into KVM on Proxmox, but after install it reboots and is stuck at "Booting from hard disk..."

Same procedure works fine on the same KVM setup with 6.47.1... any idea?

Cheers, Jan

I just upgraded from 7.0beta8 to 7.1beta1 from system/packages/update without any issue in a Proxmox KVM

word of advice, don't use ISO for VM. use CHR image.

just a question. when ros 7 will be stable release. could i just update chr or i will have to create new vm ? thanks

RB951G-2HnD not working. Tried to upgrade from 6.46.6 by uploading .npk but it crashes entirely (no communication through LAN, no wi-fi). Fortunately after power reset it has switched to a second partition with 6.46.6, so no netinstall needed.

RB951G-2HnD not working. Tried to upgrade from 6.46.6 by uploading .npk but it crashes entirely (no communication through LAN, no wi-fi). Fortunately after power reset it has switched to a second partition with 6.46.6, so no netinstall needed.

You probably can't upgrade from 6.46.6. Only latest stable RouterOS 6.x release usually works to upgrade to RouterOS 7.

Any word on what the wireless performance upgrade actually does?
has anybody tried any side by side testing?

I tried (net)installing ROS7 on a spare RB600A. It didn't work. The board didn't boot with the new software.
@Mikrotik: Will the RB600A be supported in a future release? Or am I doing something wrong?

Is the problem about ignoring MTU settings still happening in 7.1beta? ( viewtopic.php?t=158457 )

no, jumbo frame is working fine at least on mellanox board.

refards
ros

Confirmed, I tried and it worked. In 7.0beta5 the VLAN setup was only working with ICMP and UDP, but TCP was broken.

So I'm giving it serious testing.

NAT Hardware Offloading !
Great news. When is this coming to the actual router products like CCR series or new router products ?

Same Question from my side!

word of advice: if you're on 1036 oder 1072 your box can usually handle any 10G nat traffic, of course depending on your setup you could also overload those CPUs with lots of firewall-rules, but we haven't seen this happening at our bigger customer-setups using those boxes.
also the nat table on CRS seems a bit limited (4k), therefore if you need 1M+ or more connections you might have to look for some other gear as 1036 and 1072 are limited to 1M connections (at least in the stable releases, don't know about v7).
at the usual customer setups on 10G we see 100k+ connections and this is just fine, but could not be offloaded on CRS317.

so basically if you see 4k+ connections in your firewalltable you probably should not go for a crs317 nat-offloading (but we haven't tested this new feature in our lab, therefore reality might be different)

maybe someone from MT can clarify how 4k+ sessions would be handled on the CRS317 - like would those be dropped or handled in cpu or would simply all sessions go to cpu once the hardwaretable is full or whatever

thx
hk

@hknet please, don't mess up count of NAT rules with conntrack table size limit.

@hknet please, don't mess up count of NAT rules with conntrack table size limit.

The 4k number for NAT offloading is not the number of rules, but the number of connections:
viewtopic.php?f=1&t=163957#p807204

Having a 4K limit would be lowish, but it depends on how the acceleration table is managed.
I understand that connections over thr 4K limit will not be accelerated, but maybe there could be some effort (now or in the future) to keep useful connections in the hardware table, i.e. connections that make a lot of traffic.
When nothing is done, and there is a simple "use hw table when there is space in it" method, of course after a while there will be only long-lived connections with maybe very little traffic in the hw table (SIP registrations, ssh sessions, etc), and all new shortlived connections like web traffic will be handled in software only.

This version and 7.0 beta8 still has problems with the IPSec connection to my Avaya 1140 IP phone. This phone worked on version 7.0 beta 6 but since the upgrade to beta 8 and 7.1 beta 1 it does not work. I have verified the vpn works with my Vyos router virtual machine. I also verified it was not the firewall on my Mikrotik as I disabled the deny all at the bottom of the firewall rule set.

Tried installing 7.1beta1 on my hap ac^2. First, it didn't want to download from Packages, "not found".
After downloading manually, install didn't go well. I got a bootloop. Okay, netinstall. After netinstalling 7.1beta1, it lanunched successfully. Tried to restore an old binary backup -- got a bootloop.
Netinstalled 7.1beta1 again. Tried to /import an old .rsc config, got a syntax error. Okay, tried to import it manually, line by line. The router decided to reboot unexpectedly, and I got a bootloop again
So, I've netinstalled 6.47.1, restored my backup and decided to wait for a more stable version.

Hi my big problem RBD53G-5HacD2HnD (arm) v7.1beta firmware. I have 2 devices Yealink SIP-T19_E2 MAC address firstly 00:15:65:ХХ:ХХ:ХХ DHCP status offered
`but the devices Yealink SIP-T19_E2 MAC address firstly 80:5E:C0:ХХ:ХХ:ХХ status bound
I used default configuration & I'm not understand why you did this buggg????
please change firmware this not funy. I cannot fix this bug.
Please please

My log full 2000 messages & not stop

Please fix it as soon as possible not possible to work

Cosmetic error on a RB1100AHx4 in Winbox under System>Health. It's showing 49.5 amps. Terminal is showing 495 ma.

Cosmetic error on a RB1100AHx4 in Winbox under System>Health. It's showing 49.5 amps. Terminal is showing 495 ma.

Oh- was about to ask for an upgrade from our electric provider

I hope the release will be end of this year?

@hknet please, don't mess up count of NAT rules with conntrack table size limit.

not me

*) wireless -[...]

Comparing v7 with v6 are there any improvements or enhancements with regerads to wireless?

Comparing v7 with v6 are there any improvements or enhancements with regerads to wireless?

viewtopic.php?f=1&t=163957#p807036

How stable is v7beta? im having ping timeout problems with 6.4x, but i dont wanna brick my device

Cosmetic error on a RB1100AHx4 in Winbox under System>Health. It's showing 49.5 amps. Terminal is showing 495 ma.

Scheduled for fixing.

How stable is v7beta? im having ping timeout problems with 6.4x, but i dont wanna brick my device

I do not think ICMP timeout problems are related to the version the device has.
V7 is a beta version, but still, the latest version should not brick any device.

Cosmetic error on a RB1100AHx4 in Winbox under System>Health. It's showing 49.5 amps. Terminal is showing 495 ma.

Scheduled for fixing.

How stable is v7beta? im having ping timeout problems with 6.4x, but i dont wanna brick my device

I do not think ICMP timeout problems are related to the version the device has.
V7 is a beta version, but still, the latest version should not brick any device.

Ok then but i have another problem, even tho it says beta7 downloaded rebooting... it's still older version boots up.

Check what's in Log

Plus, you should not be able to upgrade from v6 to v7 via Packages -> Check for upgrade, you need to do that manually

After updating from /system packages on a cap ac:

• "can not install system-7.1beta1: it is not made for arm, but for i386"
  

• Link from https://download.mikrotik.com/routeros/ ... a1-arm.npk works. After update cAP ac complains about wrong cpu frequency

• TX shows 0dBm for wlan1 radio on cAP ac
  

Updated CCR1036 to version 7.1. Configured a BGP session with BIRD on Ubuntu, where Fullview is located. All routes (818 thousand) were loaded for about 15 minutes. 1-3 CPUs are constantly loaded. And all these 15 minutes I waited for the response to the command "routing/route/print count-only". After the entire FV has loaded, 1 CPU is constantly loaded. How it should work multi-cpu ?

Updated CCR1036 to version 7.1. Configured a BGP session with BIRD on Ubuntu, where Fullview is located. All routes (818 thousand) were loaded for about 15 minutes. 1-3 CPUs are constantly loaded. And all these 15 minutes I waited for the response to the command "routing/route/print count-only". After the entire FV has loaded, 1 CPU is constantly loaded. How it should work multi-cpu ?

I think mikrotik team is still working on this issue. BGP Load is still not properly using Multiple cores.

Hope these issues will fix soon and expecting a Stable release for mikrotik team asap...

Does anyone see a problem with per client queues? When I try to use pcq-upload-default it reboots. I have had trouble with QEMU, I am not sure if it is my settings there.

Does anyone see a problem with per client queues? When I try to use pcq-upload-default it reboots. I have had trouble with QEMU, I am not sure if it is my settings there.

I am using that on a CCR-1009 without issues.

When can we expect update on the wireless performance on the Netmetal 5 and LHG 5

FYI : little unstable for CRS354, sometimes this unit won't boot with this version ROS

How is HW-offloaded NAT configured?
Does it kick in automatically?
How do I notice that the 4096 connection limit is reached?
Is it shown, which connections aren't HW-offloaded anymore?

, where:
FastTrack connections that are HW-offloaded have H flag in

Having a 4K limit would be lowish, but it depends on how the acceleration table is managed.
I understand that connections over thr 4K limit will not be accelerated, but maybe there could be some effort (now or in the future) to keep useful connections in the hardware table, i.e. connections that make a lot of traffic.
When nothing is done, and there is a simple "use hw table when there is space in it" method, of course after a while there will be only long-lived connections with maybe very little traffic in the hw table (SIP registrations, ssh sessions, etc), and all new shortlived connections like web traffic will be handled in software only.

There is a smart connection pickup algorithm for the HW offload implemented already. It is nothing like the first 4k long-lasting connections occupy the entire HW table and sit there forever. If the connection has no traffic, or the amount of data is low, the connection gets removed from the HW table and replaced by another one with more traffic.

Without going deep into details, the more traffic the connection has, the higher chance for it to be HW-offloaded.

Ok, that sounds good!

Does anyone see a problem with per client queues? When I try to use pcq-upload-default it reboots. I have had trouble with QEMU, I am not sure if it is my settings there.

I am using that on a CCR-1009 without issues.

Thanks for your reply. I have played around some more, knowing that you have it working. I'm not sure exactly why, but I can use pcq-upload-default on some of my Queue Tree entries, but on others it causes the router to reboot. I don't think it's a problem with my QEMU settings.


On another topic, does anyone know if v7.1 has a working i40e driver? I was thinking of buying an Intel card for use with SR-IOV.

Ok I was not aware that it was in a v7 topic (my phpBB skin does not clearly show that anymore), I am running 6.47.1 on the CCR1009 and it works OK there.
Maybe it is a v7 specific issue.

.


On another topic, does anyone know if v7.1 has a working i40e driver? I was thinking of buying an Intel card for use with SR-IOV.

Yes, it does.

Upgrading wAP ac devices from 6.47.1 to v7.1beta1 results in dead devices. Had to netinstall them with to make them working running again with ROS 6.

Updated HAP AC lite, great wireless performance. Hope for fast progress!

Well, let´s post some iperf3 results comparing ROS6 and thise ROS7 firmware, please.

RB1100AHx4 does not upgrade.

Just installed v7.1beta1 on an RB2011 and found that if I plug in on ports ETH6-ETH10 the port LED does not turn on but if I plug into ETH1 both port 1 and 6 Leds turn on. This happens the same for ETH2 (turns on 2 and 7 and so forth) 3, 4 and 5
Otherwise looks ok

Subbing

Tried to install v7.1b1 on RB3011 ended up badly.
I did update from packages menu from v7.0b8 and the router stayed stuck on "Starting services..."
Tried netinstall, both 7.0b8 and 7.1b1 version of netinstall did not find the router.
Then with netinstall v6.45.9 ether boot finally worked. So I tried to install v7.1b1 again using netinstall, and router went into "Starting services..." again with small change - after short time, about 15s, the device reboot itself.
Finally reflash to 7.0b8 bringed my device back to life.

The whole time I had been connected to the router with console to watch what is going on, but there is no any information at all..

On another topic, does anyone know if v7.1 has a working i40e driver? I was thinking of buying an Intel card for use with SR-IOV.

Yes, it does.

Thanks for your reply. I have installed the card, and indeed i40e driver is working, I can passthrough the PF.

What I did not realize is that Intel uses a different driver for VF (SR-IOV), and this is not working. For now I can use macvtap but if Mikrotik could add the iavf driver that would be great.

RB1100AHx4 does not upgrade.

RB1100AHx4b7.1.PNG

See: viewtopic.php?f=1&t=163957#p808620

hi, i just bought a brand new HAP MINI, and was trying to update it directly to 7.x beta, but it says the free space is not enough to be able to complete the request... is beta firmware bigger because of debug info, or will it always be such big, and as such these cheaper devices would not ever receive v7? Thanks in advance...

HI, I have HEX-S,
after upgrade to devleopment firmware i have error: I'm trying System->Packages->Download
and
manual install from: https://download.mikrotik.com/routeros/ ... -mmips.npk

Both are the same effect.

Hi Group

I upgraded from 7.0b5 to 7.1b1 on ARM device and this broke my UDP OpenVPN tunnel (as client). When I downgraded to 7.0b5 all good again.
Anyone have any ideas why?

Thanks
Mike

I upgraded from 7.0b5 to 7.1b1 on ARM device and this broke my UDP OpenVPN tunnel (as client). When I downgraded to 7.0b5 all good again.
Anyone have any ideas why?

Because it is still beta

If You want to have working openvpn, report a bug!

VLAN tagging seems to be broken:

• Version number (if the issue is upgrade related, specify which version was installed before as well);
  v7.1beta1 before v6.74.1
• Router's model;
  RB951G-2HnD
• Steps to reproduce the issue;
  create a bridge and add ports; create vlan interface on top; add dhcp client to interface; packets are sent tagged in the beginning, untagged afterwards.
• Configuration export (use '/export hide-sensitive' command);
  Code: Select all

  # jan/02/1970 21:08:09 by RouterOS 7.1beta1
  # software id = MZ2W-H1WJ
  #
  # model = 951G-2HnD
  # serial number = 46990201AD6A
  /interface bridge
  add name=bridge1
  /interface wireless
  # managed by CAPsMAN
  set [ find default-name=wlan1 ] ssid=MikroTik
  /interface vlan
  add interface=bridge1 name=CAPS vlan-id=98
  /interface lte apn
  set [ find default=yes ] ip-type=ipv4
  /interface wireless security-profiles
  set [ find default=yes ] supplicant-identity=MikroTik
  /ip vrf
  add list=all name=main
  /interface bridge port
  add bridge=bridge1 interface=ether2
  add bridge=bridge1 interface=ether3
  add bridge=bridge1 interface=ether4
  add bridge=bridge1 interface=ether5
  /ipv6 settings
  set disable-ipv6=yes
  /interface wireless cap
  # 
  set certificate=request discovery-interfaces=CAPS enabled=yes interfaces=wlan1
  /ip dhcp-client
  add disabled=no interface=CAPS
  /system logging
  add action=echo disabled=yes topics=debug,!packet
  

• Any additional information that would help troubleshoot the issue (screenshots, debug logs, etc.).
  Exact same setup is working on v6.74.1. did try to enable vlan switching with same result, packets are sent tagged the first few seconds, untagged afterwards.
  2020-08-19 20_14_31-admin@172.17.99.254 (MikroTik) - WinBox (64bit) v6.47.1 on RB1100AHx2 (powerpc).png
  2020-08-19 20_15_18-admin@D4_CA_6D_06_97_91 (MikroTik) - WinBox (64bit) v7.1beta1 on RB951G-2HnD (mi.png

do you guys know if band steering will be awalible in ros 7?


Thanks

do you guys know if band steering will be awalible in ros 7?


Thanks

Band steering is more complex than making SSIDs the same, the AP needs to gather information from the environment and the client capabilities/signal to redirect clients to each band.

And actually, clients should (and will) do that themselves, with less issues than trying to control it from the access point.
It has been a long time since I saw a client that by default preferred 2.4 over 5 GHz connection.

It has been a long time since I saw a client that by default preferred 2.4 over 5 GHz connection.

Amazon Echo devices do this all the time.. At least 1.Gen ones that I have.

It has been a long time since I saw a client that by default preferred 2.4 over 5 GHz connection.

Amazon Echo devices do this all the time.. At least 1.Gen ones that I have.

The comparable Google devices do it OK. Your device may be too old, it will probably get confused big time by 802.1r/v/k and maybe even by bandsteering.
It is better to just ignore this, it is not that important for that kind of device anyway.
I don't think it is still an issue for more powerful devices like laptops, phones, tablets etc.

New version 7.1beta2 has been released in development RouterOS channel:

viewtopic.php?f=1&t=165248