MikroTik

*) route-filters - fixed "as-path" regexp matcher;

No container package? Didn't mentioned in the changelog.

*) ssh - made SSH work in VRF's;

*) route-filters - fixed "as-path" regexp matcher;

Please document the as-path matching syntax. It looks like the work on the help page stopped in the middle of this.

Please document the as-path matching syntax. It looks like the work on the help page stopped in the middle of this.

documentation updated with some of examples to start with.

if ( bgp-med < 30 ) { accept }

There are two common ways how to operate with AS Path data:

    convert whole AS path to string and let regexp operate on the string (ROS v6 or Cisco style)
    let regexp operate on each entry in the AS path as a number (ROS v7, Juniper style)

The latter method is much faster and less resource-intensive than the string matching approach.

But now with as-path instead of bgp-med. Anything I try gets rejected as a syntax error.

/routing/filter/rule/add rule="if ( bgp-as-path ^1234 ) { accept }" chain=test

This would seem to indicate that the as-path match gets passed a list of AS numbers and there are operators that would match one (e.g. the last) or "any item" in that list.
But the regexp examples still seem to assume the match is against an expanded numeric string of the entire path.

when will PIM-SM be fixed? it isn't working at all currently.

But now with as-path instead of bgp-med. Anything I try gets rejected as a syntax error.

Code: Select all

/routing/filter/rule/add rule="if ( bgp-as-path ^1234 ) { accept }" chain=test

No syntax error, all of provided regexp examples from the documentation works without syntax errors

@Grant newbie in mikrotik where can i execute or to set that in winbox?

No examples represent exactly what documentation says, you should look through examples more carefully (look at what is matched and what is not matched from the example).

If found that L2TP client login reboots my CCR2004. Have to disable L2TP-server for stable system.
This did not happen with rc4.

Why from softpedia?
What's wrong with the official download for 7.1rc4 / arm64 ? https://download.mikrotik.com/routeros/ ... -arm64.npk

*) lte - added AT chat support for Telit LN960;

/interface/lte/at-chat lte1 input="AT#CAINFO?"
  output: #CAINFO: 121,800,5,457,-119,-82,-14,92,8b1e,11,1,1,123,2000,3,40,-112,
          -90,-5,0,1,0,2,131,5110,3,125,-116,-86,-13,0,1,0,0 OK

/interface/ppp-client/at-chat ppp-out1 input="AT#CAINFO?"
  output: ERROR: reply timeout

Hopefully Winbox in a VRF will follow?

Edit: the matches of bgp-as-path still do not work, no matter if a 12345$ or 12345+ match is used. It won't match.
Test case used: rule="if (bgp-as-path 4220406100+ and dst == 0.0.0.0/0) { accept; }"

Edit: the matches of bgp-as-path still do not work, no matter if a 12345$ or 12345+ match is used. It won't match.
Test case used: rule="if (bgp-as-path 4220406100+ and dst == 0.0.0.0/0) { accept; }"

Please provide full AS path that this rule supposedly should match.

Edit: the matches of bgp-as-path still do not work, no matter if a 12345$ or 12345+ match is used. It won't match.
Test case used: rule="if (bgp-as-path 4220406100+ and dst == 0.0.0.0/0) { accept; }"

Please provide full AS path that this rule supposedly should match.

It should match any path that ends in 4220406100 (I also tried \$ instead of +) like:
4220404000,4220407200,4220403600,4220406000,4220406100
4220406100

These are shown as "filtered" after applying the above filter, also when using this: "if (dst == 0.0.0.0/0 and bgp-as-path 4220406100\$) { accept; }"
but when using the rule "if (dst == 0.0.0.0/0) { accept; }" they are accepted.
I also tried using a num-set but I cannot find the syntax to use it.
"if (dst == 0.0.0.0/0 and bgp-as-path [[num-set-name]]\$) { accept; }" is refused (after creating name=num-set-name with range=4220406100).

if (dst == 0.0.0.0/0 and bgp-as-path -74561196\$) { accept; }

using RouterOS 7.1RC6 with EVE-NG, when we configure OSPFv3 when starting the routers, everything works perfectly when turning off the lab and turning on OSPV3 again stops working, and does not form a neighbor

proxy-arp on bridge not working (running 7.1rc4 - as 7.1rc6 reboots 2004 router during IPsec/L2TP connection).
In case anybody asked - to define split VPN without extra routes and to not create extra phase 2 definitions for site-2-site IPSec VPN.
It just simplifies configuration significantly.
This RoS development sucks... they are using users to test the software... My 2004 is completely unusable in this state.
Is there any option to get back to 7.0.4 factory installed?

I have not upgrade my RB5009 to any RC version,afraid I can't go back to factory if got any bugs from my use perspective.

If found that L2TP client login reboots my CCR2004. Have to disable L2TP-server for stable system.
This did not happen with rc4.

try:

Code: Select all

if (dst == 0.0.0.0/0 and bgp-as-path -74561196\$) { accept; }

edit: spoiler: it's definitely a signed/unsigned bug.

Did you get the num-set feature working? I cannot figure out how it should work from the docs (commandline config does not like [[ nor \[\[ or similar)...

rule="if (bgp_as_path [[:numset_name:]]) {accept}"

CAKE queue still not fix yet on hexS with
pppoe-server

Router reboot

using RouterOS 7.1RC6 with EVE-NG, when we configure OSPFv3 when starting the routers, everything works perfectly when turning off the lab and turning on OSPV3 again stops working, and does not form a neighbor @mrz

High memory usage on Caplite and RB750gr3 after 7.1b6
(About 16 MB more than version 6.49 )
6.49 => 44.1MB free memory
7.1b6 => 27MB free memory

High memory usage on Caplite and RB750gr3 after 7.1b6
(About 16 MB more than version 6.49 )
6.49 => 44.1MB free memory
7.1b6 => 27MB free memory

Yes that works! Indeed a signed/unsigned bug. Let's hope it will be fixed soon because we use this range all over the (closed) network.

Did you get the num-set feature working? I cannot figure out how it should work from the docs (commandline config does not like [[ nor \[\[ or similar)...

My audience wifiwave2 is finally stable on latest rc builds.
It has been very unstable on betas, dropping clients sometimes every few minutes.
Thanks for fixing this!
I haven’t spotted however anything on any tv release notes which would explain improvement.

hAP ac2, 7.1rc6, winbox 3.31, missing routerboard options: protected routerboot, reformat-hold-button and reformat-hold-button-max.

hAP lite (RB941-2nD) - Ros 7.1 rc6
Edit: after 4h it completed the verbose export. Update the error list.

hAP lite (RB941-2nD) - Ros 7.1 rc6
Edit: after 4h it completed the verbose export. Update the error list.

Nice to know the issue from the 7.0rc is still present, it's very hard to provide a supout when the process to create one take 4 hours to complete.

using RouterOS 7.1RC6 with EVE-NG, when we configure OSPFv3 when starting the routers, everything works perfectly when turning off the lab and turning on OSPV3 again stops working, and does not form a neighbor @mrz

Nice to know the issue from the 7.0rc is still present, it's very hard to provide a supout when the process to create one take 4 hours to complete.

In the mean time it generated also a supout.rif, say in 5 minutes!

What entries are to be expected in /routing/table ?

What entries are to be expected in /routing/table ?

It is very worrying to take it to a mountain more than 100 kilometers away and that the electricity goes away and does not return until someone goes to turn it on again

It is very worrying to take it to a mountain more than 100 kilometers away and that the electricity goes away and does not return until someone goes to turn it on again

Simple solution: Do not use beta software in production.

This is by definition not possible.
RB5009UG+S+IN
Operating System: RouterOS (v7 only)

My understanding is that the factory installed version (now at 7.0.9) is considered stable for the device. It won’t have all the tweaks that have been made in RC that are released after the factory installed version was created, but it’s suppose to be stable. So if you’re really worried, stick with the factory version for now. If you’ve already updated your RB5009 to an RC you can email support and they can provide you the 7.0.9 image and/or netinstall just in case you need it.

Panbambaryla please email support@mikrotik.com and report all these issues you are having

I have received a lot of this warning message on my RB5009 over my neighbor which is using ROS v6.49. Is this a bug from the beta3 version?

Severe port flapping with RB4011iGS+5HacQ2HnD + rc6.

Severe port flapping with RB4011iGS+5HacQ2HnD + rc6.

Anything in logs after unsuccessfull upgrade?

Low wi-fi speed if fasttrack is disabling

Hap ac2

Severe port flapping with RB4011iGS+5HacQ2HnD + rc6.

Submitted supout: https://help.mikrotik.com/servicedesk/s ... /SUP-65942

Disabling auto negotiation does not fix this. Disabling port and re-enabling it fixes it (temporarily).

on CCR2004-16G-2S+ we have 2 of them in production running around 100 pppoe clients each i get random reboot every 3-5 days. have you found any solution regarding the same. 1 running 7.1rc5 and 1 running 7.1rc6. generated a ticket already on support

on CCR2004-16G-2S+ we have 2 of them in production running around 100 pppoe clients each i get random reboot every 3-5 days. have you found any solution regarding the same. 1 running 7.1rc5 and 1 running 7.1rc6. generated a ticket already on support

Hi!
Give it a try and install 7.1rc4 which seems to be more stable as rc5 introduces IPSec hardware accelleration what could be the problem. Look at my previous posts.

Does the ether1 connect to a LAN device (not WAN) ? If you switch to another ethernet port , do you still have this port flapping ? If yes, it could be the issue of the device. for example: the apple TV 4K has this issue (if it is wire connection). It is a well known issue of Apple TV.

on CCR2004-16G-2S+ we have 2 of them in production, 1 running 7.1rc5 and 1 running 7.1rc6. generated a ticket already on support

on CCR2004-16G-2S+ we have 2 of them in production, 1 running 7.1rc5 and 1 running 7.1rc6. generated a ticket already on support

I would not have run beta software in production. Only if there was no other solution. Even then I would have looked for other solution.

I would not have run beta software in production. Only if there was no other solution. Even then I would have looked for other solution.

...

disconnected, group key exchange timeout

I repartitioned my RB4011 under 6.49, copied to both partitions and upgraded one to 7.1rc5, now rc6.
That all worked fine. So I am not sure if repartition works on v7 but running from a partition certainly does.

A strange situation has arisen with the keys. Previously, devices did not turn off in batches

disconnected, group key exchange timeout

Delegated IPv6 Prefix Parameter is still not included in Radius Accounting Packet for PPP Service.

I can't imagine it only doesn't work on a RB5009.

RB5009 IGMP Proxy not working

Unlike pim, igmp-proxy is working fine here on 2 different devices. I can't imagine it only doesn't work on a RB5009. Check that you don't accidently block igmp, and make sure the RB5009 is the igmp-querier for all downstream interfaces. Also try to disable and re-enable igmp-snooping in bridge settings.

Works great here on my RB5009

RB5009 IGMP Proxy not working

In my configuration not work.

In my configuration not work.

Your configuration is missing from your post. At least do a /routing igmp-proxy export and post the output here.

In my configuration not work.

Your configuration is missing from your post. At least do a /routing igmp-proxy export and post the output here.

...

When I upgraded from rc5 to rc6 I did not have those issues again, but probably I was just lucky... I have learned by now that after every reboot of v7 one should export the config and diff it to an export made before the reboot, to make sure nothing was silently lost.
(and I often have to do that twice because the first time I forget to add the show-sensitive parameter...)

is really frustrating

A strange situation has arisen with the keys. Previously, devices did not turn off in batches

disconnected, group key exchange timeout

I temporarily solved the situation by changing the "Group Key Update" parameter from 00:05:00 to 02:00:00
I hope there will be a full-fledged solution to this problem
Mikrotik Chateau 12
v7.1rc6

When I upgraded from rc5 to rc6 I did not have those issues again, but probably I was just lucky... I have learned by now that after every reboot of v7 one should export the config and diff it to an export made before the reboot, to make sure nothing was silently lost.
(and I often have to do that twice because the first time I forget to add the show-sensitive parameter...)

Diff an export after each reboot? What a headache. I'm also seeing regular configuration loss on reboot, particularly on devices which I've been actively working/making changes on. Configuration loss is not something we should be seeing at RC level, alpha and maybe beta, sure. I really hope Mikrotik are prioritizing this issue for next updates. Also the need to disable and re-enable bgp-networks address-list after reboot or intermittent issues, is really frustrating

Delegated IPv6 Prefix Parameter is still not included in Radius Accounting Packet for PPP Service.

As I said before, If I were you, I would try to create an SQL script that automatically updates the PPP accounting sessions with the IPv6 DHCP accounting information. It should be possible at least, now that everything is being stored in RADIUS.