v6.48.4 [stable] is released!

emils · Mon Aug 23, 2021 5:24 pm

RouterOS version 6.48.4 has been released in public "stable" channel!

Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.

What's new in 6.48.4 (2021-Aug-18 06:43):

*) branding - fixed missing branding skins if "skins" folder does not exist;
*) bridge - added MAC and IP source addresses information for DHCP snooping log;
*) bridge - fixed "vlan-encap" setting for filter and NAT rules;
*) bridge - improved system stability when using IGMP snooping and changing bridge MAC address;
*) capsman - use Bits instead of Bytes for "ap-tx-limit" and "client-tx-limit" parameters;
*) crs3xx - fixed unknown multicast flood to CPU when IGMP snooping is used;
*) crs3xx - improved system stability when increasing interface L2MTU for CRS318 devices;
*) defconf - fixed default configuration loading on LHG R;
*) defconf - fixed minor typo in configuration description;
*) dhcpv6-server - fixed false missing IPv6 Pool warning for dynamic bindings;
*) dns - fixed CNAME query when target record is not in cache;
*) dns - fixed cache memory leak when resolving CNAME domains;
*) health - fixed voltage monitor on BaseBox5 devices;
*) health - improved temperature reporting;
*) ike2 - added "MS-CHAP-Domain" attribute to RADIUS requests;
*) leds - fixed "/system leds" menu on RBLHG-2nD;
*) lora - added additional predefined network servers;
*) lte - added support for Sharp 809SH;
*) routerboard - fixed "reset-button" on hAP ac;
*) system - improved stability when receiving bogus packets;
*) telnet - fixed "routing-table" parameter usage;
*) w60g - improved stability in low temperature environments;
*) webfig - do not show "units" twice in multi list entries;
*) winbox - added "Cloud Backup" options under "Files" menu;
*) winbox - added "interworking-profile" parameter under "Wireless" menu;
*) winbox - added support for PTP;
*) winbox - do not show "Functionality" field for LTE interface if it is not provided;
*) winbox - fixed "Switch" menu on RBwAPG;
*) winbox - fixed "vid" parameter under "Bridge/Hosts" menu;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;
*) wireless - added U-NII-2 support for US and Canada country profiles for hap ac, hAP ac^3 LTE6, Audience and Audience LTE6;
*) wireless - updated "israel" regulatory domain information;

To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device

Please keep this forum topic strictly related to this particular RouterOS release.

freemannnn · Mon Aug 23, 2021 7:06 pm

*) winbox - added "Cloud Backup" options under "Files" menu;

cloud backup time is not "time zoned" correct showned.

###why there is not a restore/download button to restore directly from cloud or save to internal storage the backup from cloud.
ok i right click the file and there is an option to download.

osc86 · Mon Aug 23, 2021 7:08 pm

upgraded a pair of CubeG-5ac60ad from 6.47.10 to 6.48.4 and one unit didn't survive the upgrade. Have to check tomorrow what's wrong. Probably needs to be netinstalled again.

BrateloSlava · Mon Aug 23, 2021 8:25 pm

CCR1016. Wrong voltage displayed.

Mon Aug 23, 2021 8:34 pm

Interesting....

The Public access btest server ( IPv4 23.162.144.120 / IPv6 2605:6340:0:1b::4 ) CHR ROS upgrade from 6.46.3 to 6.46.4 with no issues detected.

I have been having some problems with two Mikrotik routers running some interfaces with large MTUs where the remote Mikrotik with the larger MTU on one of the 1-Gig SFP fiber interfaces would often and have problems and I would loose all communications on all fiber ports to the remote Mikrotik. So I attempted to perform the RUS update to the two following Mikrotiks:

CRS326-24S+2Q+ ( updated from 6.48.3 to 6.48.4 - No issues detected )
CRS354-48P-4S+2Q+ ( problem ). Using Winbox , there is a 6.48.4 update shown in the latest version , however , when performing the [ Download&Install] it looks like it is downloading but when it reboots, it is still version 6.48.3

goodbye · Mon Aug 23, 2021 9:34 pm

*) wireless - added U-NII-2 support for US and Canada country profiles for hAP ac^3;
*) wireless - added U-NII-2 support for US and Canada country profiles for hap ac, hAP ac^3 LTE6, Audience and Audience LTE6;

Fantastic news! Thank you!

Ansy · Mon Aug 23, 2021 10:32 pm

poe-out, warning    Failed to upgrade poe FW on /dev/poe, diag code -778/0

Is it harmfull? I've high building setup with only PoE-based wireless connectivity to RB750UP.
It's working now... can I reboot it or I'll loose the control?

biomesh · Mon Aug 23, 2021 10:33 pm

I have a CCR1009 with the incorrect voltage reported, like post #5. Seems to only affect tile based devices. All of my arm or mipsbe devices with voltage monitoring are correct.

OlofL · Mon Aug 23, 2021 11:47 pm

Can't believe that "Delegated-IPv6-Prefix" didn't fixed in this release also. How many months do we have to wait to fix this option in stable release?
Is it really hard to get fix from 6.49beta and implement it? Unbelievable...

What is this bug?
Im just trying to implement ipv6 using dhcp-pd...

nichky · Tue Aug 24, 2021 12:26 am

i really what to know in which cases can i use
*) winbox - added "interworking-profile" parameter under "Wireless" menu;

bbs2web · Tue Aug 24, 2021 2:12 am

Please may we have some details relating to 'system - improved stability when receiving bogus packets'.

PS: Upgrades to CCR1036, RB3011, RB750Gr2, hAP ac and CHR all worked perfectly...

Guscht · Tue Aug 24, 2021 10:22 am

Wrong voltage in our CCR1036 (the drop shortly after 08:30, after the update):

Zwischenablage01.jpg

No problems with our CCR1072.

rextended · Tue Aug 24, 2021 10:25 am

CRS354-48P-4S+2Q+ ( problem ). Using Winbox , there is a 6.48.4 update shown in the latest version , however , when performing the [ Download&Install] it looks like it is downloading but when it reboots, it is still version 6.48.3

The security package is disabled or not installed?

rextended · Tue Aug 24, 2021 10:38 am

What is this bug?
Im just trying to implement ipv6 using dhcp-pd...
It's a radius attribute to distribute prefixes to users. DHCPv6 server create dynamic rule for it but with empty name. So first user can connect and rest get an error. Pics attached fyi.

Is not better to use directly pppoe-server to distribute IPv6 with "DHCPv6 PD Pool" on pppoe-server profile?
Work perfectly without any need of dhcpv6 by radius (but the user still authenticate as usual from radius)

rextended · Tue Aug 24, 2021 10:53 am

We want to keep static per user because of regulations. Otherwise every user take an block from pool individually.

Thanks, understanded.

eddieb · Tue Aug 24, 2021 12:05 pm

upgraded all my devices from .3 to .4 without any issues.
Keep up the great work

eworm · Tue Aug 24, 2021 12:11 pm

I have another CCR1009 with wrong voltage reporting. It jumps between (exactly) 15.2 V to about 26 V (which could be correct - what voltage do the ccr power supplies have?). My script for health monitoring is constantly sending notifications.

Also the script reports high temperate on a hAP ac, though the >= 50°C could be realistic given it is hidden behind a cupboard.
Wondering if the reporting was broken before or the device runs hotter after the update.

biomesh · Tue Aug 24, 2021 1:27 pm

I have the Ccr1009-8g-1s-1s+PC and those shipped with 24V power bricks. With .4, the voltage is showing ~40V instead of ~24V.

megabitus · Tue Aug 24, 2021 1:44 pm

Upgrades to hAP ac, hAP ac 2, LtAP mini, hEX PoE, CRS112, CHR, RB4011 updated with no problem.

Tue Aug 24, 2021 1:54 pm

nichky wireless clients with matching certificates will connect to the access point automatically. The feature isn't new in RouterOS, just the GUI support for it is. It's for services like eduroam or Google Orion.
https://help.mikrotik.com/docs/display/ ... g+Profiles

roe1974 · Tue Aug 24, 2021 5:07 pm

extra firewall rule like:

ip firewall filter add action=accept chain=input comment="CAPsMAN accept all local traffic" dst-address-type=local src-address-type=local

place before

add action=drop chain=input comment="drop all not coming from LAN" in-interface-list=!LAN

??
br, Richard

ofer · Wed Aug 25, 2021 10:15 am

Upgraded 3xHapAC from 6.48.3 -> 6.48.4 - seems to be working ok so far

Thanks!

toast · Thu Aug 26, 2021 6:13 am

Edit - downgrading to 6.48.3 resolved the issue - did not touch the config before or after. Will get in touch with Mikrotik.

Having a weird issue since moving from 6.48.3 to 6.48.4.
Unable to route out to the internet with IPv6.

My ISP gives me a ::/48 and I use the settings below.
The pool address I add as below (the first ::/64) gets marked with comment "duplicate address detected".

/ipv6 address
add from-pool=isp interface=bridge
/ipv6 dhcp-client
add add-default-route=yes interface=ether1-isp-gateway pool-name=isp \
    request=prefix

/ipv6 firewall filter
add action=accept chain=input comment="Allow all ICMP6" protocol=icmpv6
add action=accept chain=input comment="Allow DHCP for PD" dst-port=546 \
    protocol=udp
add action=drop chain=input comment="Drop (invalid)" connection-state=invalid
add action=accept chain=input comment="Accept (established, related)" \
    connection-state=established,related
add action=drop chain=input comment="Drop the rest" in-interface=\
    ether1-launtel-gateway
add action=accept chain=forward comment="Allow all ICMP6" protocol=icmpv6
add action=drop chain=forward comment="Drop (invalid)" connection-state=\
    invalid
add action=accept chain=forward comment="Accept (established, related)" \
    connection-state=established,related
add action=drop chain=forward comment="Drop the rest" in-interface=\
    ether1-launtel-gateway

/ipv6 nd
set [ find default=yes ] interface=bridge ra-interval=5s-10s

Going to try downgrading back to 6.48.3. Will update when there's a resolution, otherwise happy to provide more info.

Jotne · Thu Aug 26, 2021 9:50 am

HMM. Not sure why this went wrong.

I did upgrade one RB750G r3 from 6.48.2 to 6.48.4 and at least found one big error.

Before upgrade 304 static DNS
After upgrade 26 static DNS

Nearly all my static DNS was gone???
Restore from backup did fix this, but why?

After upgrade my DoH server did not work. Adding static DNS 8.8.8.8 and DNS started to work.
Did not understand why DoH has stopped, but since I have a stack DNS for the DoH name, DoH server did not resolve.

Kindis · Thu Aug 26, 2021 10:00 am

I have given up on static entries in the DNS. CNAME does not work at all for me. I see that all CNAME's I have are resolved externally and as they do not exist publicly, only internally, it does not work. As I pay for NextDNS and they have a static DNS entry I have added all my DNS entries there. Works like a charm!
And yes I have a case on CNAME issue.

Jotne · Thu Aug 26, 2021 10:24 am

For me static DNS works like a charm.
I thought of by a DNS from dynDNS or other service, but it cost more than getting my self my own domain (around 10$ a year)
So now I use Cloud function on MT to set my DNS at my own domain. All public DNS are at domain site (no limit of number of DNS at no cost)
All internal stuff that are not needed outside are static entry on the MT router.

Kindis · Thu Aug 26, 2021 10:30 am

The problem I have is that if I add a CNAME that does not exist externally, for example test.example.local, and then add the value to a URL that does esist, for example www.google.com. This does not work. I get a domain does not exist and the reason is that the DNS resolver sends this CNAME question to my external resolver and does not look into the cache. If I ping the A record I have as value in the CNAME, meaning www.google.com is added to the cache for a while, then the CNAME works until www.googe.com is removed from cache.
Reason I want to use this is that I have added names of all routers with name.remote.lan as a CNAME with Mikrotik cloud name for each router as value. This way I can access a router on the external IP without remembering the IP (external). This also works if external IP is changed which means my monitoring works as well.
But as stated I moved all this config to NextDNS and now this works like a charm.

Jotne · Thu Aug 26, 2021 2:03 pm

If the router itself does not complain, you have to adjust the alarm level on zabbix. Router should work fine with 14% free. My RB 750G has only 7% free disk.

Hominidae · Thu Aug 26, 2021 6:51 pm

*) lte - added support for Sharp 809SH;

...errr...what's that all about?
Are you telling us that finally RoS has arrrived on a mobile/portable LTE tingy (-> https://jp.sharp/products/809sh/) ???

Jotne · Thu Aug 26, 2021 9:34 pm

Bug found.

After upgrading to 6.48.4 from 6.48.3 this command does not give any output

/interface wireless registration-table print  as-value

So this breaks Splunk for MikroTik. It will not show any Wireless status.

kehrlein · Thu Aug 26, 2021 10:03 pm

Updated several devices without any issues:
CCR1009-7G-1C-1S+
CCR2004-1G-12S+2XS
CRS326-24G-2S+
CRS112-8P-4S
RB750GL
RB1100AHx4

nmt1900 · Sat Aug 28, 2021 12:12 pm

Short answer: Yes; but I do not know the ''local" part in your syntax; i've used "127.0.0.1"

"dst-address-type=local" and "dst-address=127.0.0.1" are not same things!

mozerd · Sat Aug 28, 2021 1:15 pm

THE Upgrade from RoS v6.48.3 [Stable] to RoS v6.48.4 [Stable] CAUSED ALL my dynamic Blacklist to be removed and/or deleted .... The very same has been reported by many of my MOAB Clients

Chupaka · Sat Aug 28, 2021 2:45 pm

"dst-address-type=local" and "dst-address=127.0.0.1" are not same things!

At least, the former includes the latter

mkx · Sat Aug 28, 2021 3:42 pm

THE Upgrade from RoS v6.48.3 [Stable] to RoS v6.48.4 [Stable] CAUSED ALL my dynamic Blacklist to be removed and/or deleted .... The very same has been reported by many of my MOAB Clients

What exactly did happen? Reboot (needed to perform upgrade) AFAIK always causes removal of all dynamic items - including members of address lists.

Chupaka · Sat Aug 28, 2021 4:45 pm

AFAIR, on "managed" reboot (not a power failure), RouterOS saves dynamic entries on disk and restores them on boot.

Jotne · Sat Aug 28, 2021 5:03 pm

THE Upgrade from RoS v6.48.3 [Stable] to RoS v6.48.4 [Stable] CAUSED ALL my dynamic Blacklist to be removed and/or deleted .... The very same has been reported by many of my MOAB Clients

And I lost nearly all my static DNS...

mozerd · Sat Aug 28, 2021 5:06 pm

What exactly did happen? Reboot (needed to perform upgrade) AFAIK always causes removal of all dynamic items - including members of address lists.

@mkx
I have 2 address-lists that are dynamic and when I upgraded today I observed that those 2 lists where gone -- I had to reload those dynamic lists. All other non-dynamic lists survived the upgrade process. This is the 1st time I have seen this type of behavior after an upgrade.

However I will admit that I just recently converted my black lists to be dynamic and so the behavior you describe as being normal for dynamic entries was new to me. Thank You for your note!

Znevna · Sat Aug 28, 2021 5:36 pm

"quality tested service provided by an IT Expert"
https://wiki.mikrotik.com/wiki/Manual:I ... dress_list
Note: If the timeout parameter is not specified, then the address will be saved to the list permanently to the disk. If a timeout is specified, the address will be stored on the RAM and will be removed after a system's reboot.

si458 · Sun Aug 29, 2021 11:50 pm

we have noticed a sudden increase in power current on our RB1100x4 with 6.48.4 ?
it was bobbing at 450ma for months then after the update its jumped to 750ma?
roll back to 6.48.3 and the current drops back to 450ma?

nmt1900 · Mon Aug 30, 2021 12:22 am

"dst-address-type=local" and "dst-address=127.0.0.1" are not same things!
At least, the former includes the latter :)

Logically it should, but in this case

ip firewall filter add action=accept chain=input comment="CAPsMAN accept all local traffic" dst-address-type=local src-address-type=local

and

ip firewall filter add action=accept chain=input comment="CAPsMAN accept all local traffic" dst-address=127.0.0.1 src-address=127.0.0.1

would produce quite different results. The point is that

ip firewall filter add action=accept chain=input dst-address=127.0.0.1

is included in default firewall rules and serves the purpose of access to local services like CAPsMAN and Dude - and only that. Not the access to all local addresses.

nmt1900 · Mon Aug 30, 2021 12:26 am

we have noticed a sudden increase in power current on our RB1100x4 with 6.48.4 ?
it was bobbing at 450ma for months then after the update its jumped to 750ma?
roll back to 6.48.3 and the current drops back to 450ma?

Can this be related to other incorrect system health/voltage readings on some devices? Maybe current and power readings are also affected in addition to voltages...

si458 · Mon Aug 30, 2021 1:11 am

we have noticed a sudden increase in power current on our RB1100x4 with 6.48.4 ?
it was bobbing at 450ma for months then after the update its jumped to 750ma?
roll back to 6.48.3 and the current drops back to 450ma?
Can this be related to other incorrect system health/voltage readings on some devices? Maybe current and power readings are also affected in addition to voltages...

Possibly yes but I’m not sure,
the voltage is correct and hasn’t changed, only the current that’s either incorrect or more usage
(I don’t have our router plugged into a power monitor sadly to verify)

rushlife · Mon Aug 30, 2021 8:36 am

upraded all of my 200 units, no problem so far

eworm · Mon Aug 30, 2021 11:00 am

Can this be related to other incorrect system health/voltage readings on some devices? Maybe current and power readings are also affected in addition to voltages...

I think the voltage readings on CCR are a different issue.

But I reported my hAP ac is running hotter than before... (see post #21)
That would perfectly match a higher energy consumption.

bda · Mon Aug 30, 2021 11:42 am

we have noticed a sudden increase in power current on our RB1100x4 with 6.48.4 ?
it was bobbing at 450ma for months then after the update its jumped to 750ma?
roll back to 6.48.3 and the current drops back to 450ma?

Any news on this problem?
We have many rb1100x4 units too...

nmt1900 · Mon Aug 30, 2021 2:30 pm

These incorrect voltage readings do not seem to be related to architecture, but to specific devices - my RB962 has correct reading, but old CRS-112 switch has 33V instead of 24V as before upgrade.

Both are mipsbe devices and have 24V external power supplies.

It is possible, that some might even have incorrect temperature readings as well, but my RB962 (hAP ac) has same temperature readings as before...

guipoletto · Thu Sep 02, 2021 1:34 am

I can reproduce the voltage bug in a CCR1036

in 6.48.3, the reading is always 24v

in 6.48.4, it varies between 18 with no load, and 27.5 when running a btest to 127.0.0.1

91A50910E3DC-Voltage.png

mducharme · Thu Sep 02, 2021 3:46 am

I submitted a ticket about this, but skins are no longer getting installed in this version from the branding packages that were working fine before. Using hap ac3 devices.

adonato · Thu Sep 02, 2021 1:51 pm

Hello to all, I don't know what to do, since I upgrade to last version I have 24 hours problems with dns.... in some case when I ping 8.8.8.8 or 8.8.4.4 or 1.1.1.1 I get response but if I ping www.google.com or www.google.com.ar I don't get nothing and I loose Internet connection in all the NET.
This issue get fix magically.... it happens about 10 or 15 seconds in one hour.
I have fibra and I don't have any problem with the ISP. This happens since I update to the last version.
What do you recommend?

jondavy · Thu Sep 02, 2021 2:41 pm

if I have many networks in ip address these routes are inaccessible after reboot, only disabling the address and activating it again come back
this when I have more than 150 addresses in ip address in ccr1036-8g-2s+

CZFan · Thu Sep 02, 2021 5:39 pm

On 2011, trying to print bridge ports, I get the following:

bridge-port.JPG

When I export, get below:

bri-exp.JPG

Jotne · Thu Sep 02, 2021 6:02 pm

It may be a 2011 problem. Works fine on hEX and hAP

nescafe2002 · Thu Sep 02, 2021 6:07 pm

/int bri por is expanded to /interface bridge port-controller for some reason.. just don't abbreviate cli commands, they are suspected to change anyway.

[admin@MikroTik] > /int bri por pri
              ;;; disabled
          switch: none
   control-ports: 
  excluded-ports:
[admin@MikroTik] > /int bri port pri
Flags: I - INACTIVE; D - DYNAMIC; H - HW-OFFLOAD
[...]

CZFan · Thu Sep 02, 2021 9:28 pm

/int bri por is expanded to /interface bridge port-controller for some reason.. just don't abbreviate cli commands, they are suspected to change anyway.
...

Yes, that will explain it, thx, tested and that is the case

denisun · Fri Sep 03, 2021 4:34 pm

I have a pppoe connection with my provider with ipv6 enabled in selected profile.
I have selected in the profile to change mss (yes), that work only in ipv4. Not in ipv6.
In ipv6 i must have a statement in fw mangle in forward to change mss (via static value or clamp to pmtu).

Please fix it.

nescafe2002 · Fri Sep 03, 2021 4:54 pm

denisun, can you advertise a lower mtu via ND settings?

denisun · Fri Sep 03, 2021 5:38 pm

No. I have not tried this.
Its more efficient than add fw mangle?

rextended · Thu Sep 09, 2021 1:06 am

any of your customers will be unfortunate, if you do not take courses first, instead of asking in a forum ...

Zetle · Thu Sep 09, 2021 9:29 am

Can someone tell, what the new action "reset" does in:

interface wireless registration-table reset

The comment says:

reset -- Reset a specific registration-table

but I do not understand the difference between this and "remove"

WeWiNet · Thu Sep 09, 2021 11:04 am

Can someone tell, what the new action "reset" does in:

It resets the counters of a specific entry. Like in firewall.

msatter · Thu Sep 09, 2021 11:21 am

Strange that this version is offered as default version to install on v7 only devices!

https://mikrotik.com/product/rb5009ug_s ... -downloads

revan · Fri Sep 17, 2021 7:25 pm

When will the bug with the return of the mac-table via snmp be fixed? It passed more than six months with the confirmation of the bug of your technical support! What the heck?!

holmesm · Sun Sep 19, 2021 1:51 am

x86 here...update went fine, but internet really slow with a lot of disconnects. Downgrade to 6.48.3 and back to good.

nuffrespect · Mon Sep 27, 2021 4:26 pm

Suddenly, finded strange in dhcp_v4 with old Avaya IP-phone (4610), after upgrade to 6.48.4.
This models can not receive ip address.

But some newer (newest) Avaya models, works normal.

Tested this bug with production network, and with empty config with standalone DHCP + TEL (server-port-client)
Downgrade to 6.47.1 ver - fixes this situation

Sent message to MikroTik support #[SUP-61593] - to investigate this strange dhcp bug.

danz9370 · Mon Sep 27, 2021 8:57 pm

Current and Power-Consumption are both ZERO

Doesn't seem to improve "health reporting"

Screenshot from 2021-09-28 01-50-25.png

Ferrograph · Tue Sep 28, 2021 5:35 pm

"DHCP without success" symptom cause by 5G radio crash (broadcasts stop being forwarded - zero TX counter) still not fixed.

TimothyKoval · Mon Oct 04, 2021 1:33 am

Not sure if it's this release's fault, but on my cap ac interface-activity led settings are not working for wlan under capsman

sutrus · Mon Oct 04, 2021 8:27 pm

"DHCP without success" symptom cause by 5G radio crash (broadcasts stop being forwarded - zero TX counter) still not fixed.

Same problem with 5G radio on RB-962 ROS 6.48.3, 6.48.4, 7.1RC4

Who is online