Page 1 of 1
v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 11:29 am
by strods
RouterOS version 6.49.3 has been released in public "stable" channel!
Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.
New RouterOS 6.49.3 (Dec/22/2021 13:49:22):
*) bridge - improved system stability when initialising bridge interface
*) console - updated copyright notice;
*) defconf - fixed secondary-frequency configuration;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) led - fixed default LED configuration for CubeG-5ac60ad;
*) netinstall - fixed x86 installation process;
*) socks - fixed SOCKS5 support;
*) upgrade - improved 404 error handling when checking for new versions;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - added U-NII-2 support for US and Canada country profiles for OmniTik 5, Metal 52 ac, and GrooveA 52 devices;
*) x86 - fixed downgrade from RouterOS v7.1.2 and above;
To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page:
http://www.mikrotik.com/download
If you experience version related issues, then please send supout file from your router to
support@mikrotik.com. File must be generated while router is not working as suspected or after some problem has appeared on device
Please keep this forum topic strictly related to this particular RouterOS release.
Re: v6.49.3 [stable] is released! Post Reply
Posted: Tue Feb 15, 2022 11:50 am
by pe1chl
Before an upgrade:
1) Remember to make backup/export files before an upgrade and save them on another storage device;
2) Make sure the device will not lose power during upgrade process;
3) Device has enough free storage space for all RouterOS packages to be downloaded.
Please add this text to the text shown in "check for updates" on the device itself.
This is especially important in case the user selected a channel that will result in an upgrade to v7.
In that case it would be better when an additional warning is shown that an upgrade to v7 could cause additional issues not commonly experienced when doing an update within v6.xx.
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 12:36 pm
by VitaliySte
Dec/22/2021 ?
Back to the future 4?
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 12:41 pm
by amt
upss, something wrong in here ?
version.png
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 12:57 pm
by normis
try again, it should work correctly now
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 1:13 pm
by amt
try again, it should work correctly now
Yes, Now it's okay. :)
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 1:31 pm
by Jotne
try again, it should work correctly now
Was 6.49.3 really compiled Des 22 2021?
.
6.49.3.jpg
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 1:50 pm
by strods
The Christmas party simply took longer than expected...
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 1:51 pm
by dave3
It underwent 2 months of rigorous testing before release. :)
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 2:04 pm
by pe1chl
The Christmas party simply took longer than expected...
No wonder with Eva in the company :-)
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 2:24 pm
by Jotne
If this compile time is true, this is the far longest time between compile date and post date. Longest I did found other than this is the 19 day for 6.42.11.
viewtopic.php?t=143805
:)
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 3:22 pm
by normis
Yes, see above Strods response.
We
you guys
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 15, 2022 5:27 pm
by Jotne
Or some forgot that it was done :)
Just another strange notice. I do always open this page with scripts and announcement:
viewforum.php?f=9 to look for new releases and scripts problem. But this time this page does not show the new 6.49.3 post???? But if you look at this page:
viewforum.php?f=21 you see it. All other post are equal. One with 11 post and the other with 12?? Bug in forum, or some other posting error?
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 1:37 am
by Vlad2
Hi!
I decided to update the CHR, take a look. And tell me, is it still 2021 or is it already 2022? (joke/reality) ?
Year2021-realy.JPG
P.S.
If I'm wrong, or it should be, then sorry.
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 1:54 am
by bpwl
2021: Correct at time of compilation:
viewtopic.php?p=913348#p913162
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 8:11 am
by normis
Fixed post announcement placement. Not it shows in all forum sections.
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 8:16 am
by mducharme
Or some forgot that it was done :)
I suspect the same thing - with all the excitement around v7, somebody possibly forgot that 6.49.3 stable was never actually posted.
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 8:26 am
by mkx
Or some forgot that it was done :)
I suspect the same thing - with all the excitement around v7, somebody possibly forgot that 6.49.3 stable was never actually posted.
Guys, have faith in Mikrotik ... nobody forgot anything, they performed diligent testing and this takes time. ;-)
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 1:57 pm
by rpingar
New RouterOS 6.49.3 (Dec/22/2021 13:49:22):
*) bridge - improved system stability when initialising bridge interface
*) console - updated copyright notice;
*) defconf - fixed secondary-frequency configuration;
*) ethernet - improved system stability when receiving large packets on devices with 88F3720 CPU (nRAY, LHGG);
*) led - fixed default LED configuration for CubeG-5ac60ad;
*) netinstall - fixed x86 installation process;
*) socks - fixed SOCKS5 support;
*) upgrade - improved 404 error handling when checking for new versions;
*) winbox - show "System/Health" only on boards that have health monitoring;
*) wireless - added U-NII-2 support for US and Canada country profiles for OmniTik 5, Metal 52 ac, and GrooveA 52 devices;
*) x86 - fixed downgrade from RouterOS v7.1.2 and above;
date in changelog is broekn!!!!
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 2:17 pm
by msatter
New RouterOS 6.49.3 (Dec/22/2021 13:49:22):
shorter
date in changelog is broekn!!!!
When that is only problem then we have a winner and the first release EVER without bugs....oh bugger, something just bit me!!!
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 2:26 pm
by Znevna
If they test the release before public publishing, people are bitching that the date is wrong and what took them so long.
If they release it soon after compile and it has critical bugs, people are bitching that it wasn't fully tested for critical bugs.
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 3:33 pm
by mkx
If they test the release before public publishing, people are bitching that the date is wrong and what took them so long.
If they release it soon after compile and it has critical bugs, people are bitching that it wasn't fully tested for critical bugs.
Ain't that great? We can bitch whatever they do ...
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 9:14 pm
by Dude2048
He has a point. Just stop bitching about it.
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 9:44 pm
by GuntOn
By the way how long RoS 6 version will be developed and maintained?
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 9:49 pm
by msatter
Till V7 is bug free....and that will be a long wait. ;-)
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 10:37 pm
by mikrotikedoff
I thought some devices will never be able to use 7 so 6 was intended to be maintained for the foreseeable future?
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 16, 2022 11:06 pm
by Sob
There's v7 for all supported devices. Some old ones don't seem to get much testing, but nobody said anything about discontinuing support for any, and there's no good reason to. Possibly problematic are those with just 32MB RAM. Even worse when they also have 16MB flash, but that should be only hAP mini and hAP lite. And they still sell them, so if they can make those work, the rest must work too.
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 2:56 am
by mducharme
I thought some devices will never be able to use 7 so 6 was intended to be maintained for the foreseeable future?
No, I believe in another thread they have said that once there is a true long-term channel release of v7, after that point v6 development will completely end, no updates.
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 5:37 am
by pothi
Probably, security updates will continue for sometime. Since these are policy decisions, I expect the change to be slow and a long time will be given before ending development and / or maintenance of v6 branch.
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 7:12 am
by SergeS
Have two CAP AC configured as Bridge AP. Have updated from 6.49.2 to 6.49.3 both of them.
One is OK, the other one is bricked... E1 indicator is blinking, but no access at all, including MAC.
User LED is ON, although I have never enable it. Have tried to reset to default with RESET button, no luck.
What are my options?
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 12:02 pm
by bpwl
Upgraded hAP ac2, wAPac and Omnitik ac yesterday from 6.47.9, 6.48.6 and 6.49.2.
All went well, stable operation, no performance issues or unexpected disconnects so far.
(handpicked old versions were already working well)
6.49.3 looks like a good really "stable" release.
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 1:05 pm
by eddieb
I also upgraded all my devices to 6.49.3 no problems found.
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 4:53 pm
by mkx
I will be happy to listen to any suggestions on how to revive it.
Did anybody mention netinstall in this context?
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 5:01 pm
by SergeS
Did anybody mention netinstall in this context?
Have heard about it but have never used it.
Also, have heard it is not working on win10 64bit.
Are there any good instructions on how to use NetInstall?
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 5:21 pm
by pe1chl
https://wiki.mikrotik.com/wiki/Manual:Netinstall
However, be warned that using Netinstall is never easy the first time or when it has not been used for a long time.
There are a lot of things that can go wrong and can be diagnosed when you know how it proceeds when everything is well.
There often are posts claiming "netinstall does not work" but actually it is usually some user error. The next day it may be fine.
Re: v6.49.3 [stable] is released!
Posted: Thu Feb 17, 2022 5:23 pm
by mfrommel
Are there any good instructions on how to use NetInstall?
https://help.mikrotik.com/docs/display/ROS/Netinstall
Re: v6.49.3 [stable] is released!
Posted: Fri Feb 18, 2022 4:43 am
by mducharme
Probably, security updates will continue for sometime. Since these are policy decisions, I expect the change to be slow and a long time will be given before ending development and / or maintenance of v6 branch.
I don't expect it to be that long. When RouterOS v6 came out, the last update for v5 came out only a few months later and then that was the end of v5. The scenario here is a little different and obviously I do not believe RouterOS v7 will be retired as quickly as v5 was. I can see them potentially releasing security updates for v6 if there is some very serious issue after it has been discontinued, but aside from that, nothing.
Re: v6.49.3 [stable] is released!
Posted: Fri Feb 18, 2022 5:37 am
by dave3
I used netinstall on windows 10 64 bit to install both v6.49.2 and v6.49.3. From what I've read, it's the best way to insure a problem-free upgrade, if you don't mind reconfiguring it. It worked fine, as long as I enabled the "apply default config." Without that, I couldn't find it on my network after it was finished.
Re: v6.49.3 [stable] is released!
Posted: Fri Feb 18, 2022 6:40 am
by SergeS
Have recovered with NetInstall, thanks to everybody.
Run NetInstall on my Win10 64bit laptop, but NetInstall64 by some reasons cannot find my device, 32bit version make the trick.
Re: v6.49.3 [stable] is released!
Posted: Fri Feb 18, 2022 1:05 pm
by bbs2web
I have an odd situation in that two virtual RouterOS instances, both running 6.49.4 (x86), support IPSec AES hardware offloading differently. Any ideas on where I could hunt?
Both have default IPSec settings:
[user@router] > ip ipsec export verbose
# feb/18/2022 12:44:25 by RouterOS 6.49.3
# software id = xxxx-xxxx
#
#
#
/ip ipsec mode-config set [ find default=yes ] name=request-only responder=no use-responder-dns=exclusively
/ip ipsec policy group set [ find default=yes ] name=default
/ip ipsec profile set [ find default=yes ] dh-group=modp2048,modp1024 dpd-interval=2m dpd-maximum-failures=5 \
enc-algorithm=aes-128,3des hash-algorithm=sha1 lifetime=1d name=default nat-traversal=yes proposal-check=obey
/ip ipsec proposal set [ find default=yes ] auth-algorithms=sha1 disabled=no enc-algorithms=aes-256-cbc,\
aes-192-cbc,aes-128-cbc lifetime=30m name=default pfs-group=modp1024
/ip ipsec policy set 0 disabled=no dst-address=::/0 group=default proposal=default protocol=all src-address=::/0 template=yes
/ip ipsec settings set accounting=yes interim-update=0s xauth-use-radius=no
[user@router] > ip ipsec export
# feb/18/2022 12:44:28 by RouterOS 6.49.3
# software id = xxxx-xxxx
#
#
#
<blank>
L2TP IPSec configuration is identical on the two routers:
/ppp profile set *FFFFFFFE only-one=yes
/ppp secret add local-address=192.168.253.5 remote-address=192.168.253.6 service=l2tp name=site password=****************
/interface l2tp-server server set authentication=mschap2 enabled=yes ipsec-secret=******************************** \
max-mru=1379 max-mtu=1379 use-ipsec=required
/interface l2tp-server add name=vpn-site user=site
The two virtual routers have identical KVM virtualisation containers, with the same CPU family and feature codes exposed. Herewith the CPU information for when we start the virtual container using Debian 11 (bullseye):
[root@debian11 ~]# cat /proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 6
model : 61
model name : Intel Core Processor (Broadwell)
stepping : 2
microcode : 0x1
cpu MHz : 2394.454
cache size : 16384 KB
physical id : 0
siblings : 1
core id : 0
cpu cores : 1
apicid : 0
initial apicid : 0
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx rdtscp lm constant_tsc rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch cpuid_fault invpcid_single pti fsgsbase bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat
bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit srbds
bogomips : 4788.90
clflush size : 64
cache_alignment : 64
address sizes : 40 bits physical, 48 bits virtual
power management:
processor : 1
vendor_id : GenuineIntel
cpu family : 6
model : 61
model name : Intel Core Processor (Broadwell)
stepping : 2
microcode : 0x1
cpu MHz : 2394.454
cache size : 16384 KB
physical id : 1
siblings : 1
core id : 0
cpu cores : 1
apicid : 1
initial apicid : 1
fpu : yes
fpu_exception : yes
cpuid level : 13
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 syscall nx rdtscp lm constant_tsc rep_good nopl xtopology cpuid tsc_known_freq pni pclmulqdq ssse3 fma cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand hypervisor lahf_lm abm 3dnowprefetch cpuid_fault invpcid_single pti fsgsbase bmi1 hle avx2 smep bmi2 erms invpcid rtm rdseed adx smap xsaveopt arat
bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit srbds
bogomips : 4788.90
clflush size : 64
cache_alignment : 64
address sizes : 40 bits physical, 48 bits virtual
power management:
Detected system resources in RouterOS are identical between the two VMs:
[user@router] > sys resource print
uptime: 6h18m11s
version: 6.49.3 (stable)
build-time: Dec/22/2021 13:49:22
free-memory: 202.3MiB
total-memory: 256.0MiB
cpu: Intel
cpu-count: 2
cpu-frequency: 2194MHz
cpu-load: 5%
free-hdd-space: 67.3MiB
total-hdd-space: 95.3MiB
write-sect-since-reboot: 85096
write-sect-total: 85096
architecture-name: x86
board-name: x86
platform: MikroTik
Working router (shows hw-aead as being active 'HE'):
[user@router] > /ip ipsec installed-sa print where state=mature
Flags: H - hw-aead, A - AH, E - ESP
0 HE spi=0xED7D7AE src-address=1.1.103.49:4500
dst-address=2.2.72.16:4500 state=mature auth-algorithm=sha1
enc-algorithm=aes-cbc enc-key-size=256
auth-key="8a23a02449d3a1edd01d24b93ce0a85a84c1a0b1"
enc-key="cc69d8ea1b08fa311a1d5616e3804731df2a1a8afefd52e40512f0cf82cfa8f4"
addtime=feb/18/2022 12:38:55 expires-in=15m40s add-lifetime=24m/30m
current-bytes=92354 current-packets=912 replay=128
1 HE spi=0xDE4CD14 src-address=2.2.72.16:4500
dst-address=1.1.103.49:4500 state=mature auth-algorithm=sha1
enc-algorithm=aes-cbc enc-key-size=256
auth-key="489dd6dc11b292c08a3a0dc4bc761da3c38cc972"
enc-key="6cc009d1dcddd980bb1d6bcb402be5d47a35d489e25a4bad0e1634b89cf85a18"
addtime=feb/18/2022 12:38:55 expires-in=15m40s add-lifetime=24m/30m
current-bytes=92086 current-packets=912 replay=128
Non hardware accelerated router (shows hw-aead being inactive 'E'):
[user@router] > /ip ipsec installed-sa print where state=mature
Flags: H - hw-aead, A - AH, E - ESP
0 E spi=0x6E05009 src-address=1.1.35.120 dst-address=2.2.23.89
state=mature auth-algorithm=sha1 enc-algorithm=aes-cbc enc-key-size=256
auth-key="8b10c0e4fd943fc598295d0ab1540b356e5ecefd"
enc-key="e5dcd3cdf09988ed298cf50acf2b250df040ed0b09d48cf0788df889d5a0079c"
addtime=feb/18/2022 12:31:00 expires-in=7m41s add-lifetime=24m/30m
current-bytes=425537 current-packets=2947 replay=128
1 E spi=0x12C8896 src-address=2.2.23.89 dst-address=1.1.35.120
state=mature auth-algorithm=sha1 enc-algorithm=aes-cbc enc-key-size=256
auth-key="1370d7011235de40722b1227ff46d0434ebd9f33"
enc-key="d09001b3f2d6c83e85a2bf01ce3fa6e7578981d2d80d70f9f997207537be056a"
addtime=feb/18/2022 12:31:00 expires-in=7m41s add-lifetime=24m/30m
current-bytes=158794 current-packets=1554 replay=128
PS: I can further validate that AES-NI is working when booting the VM with Debian 11 (bullseye). The first result is without it using AES-NI, the second is with it enabled:
[root@debian11 ~]# openssl speed aes-256-cbc
Doing aes-256 cbc for 3s on 16 size blocks: 22326434 aes-256 cbc's in 2.98s
Doing aes-256 cbc for 3s on 64 size blocks: 5773155 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 256 size blocks: 1477639 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 1024 size blocks: 368841 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 8192 size blocks: 45853 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 16384 size blocks: 23164 aes-256 cbc's in 2.99s
OpenSSL 1.1.1k 25 Mar 2021
built on: Tue Aug 24 08:28:12 2021 UTC
options:bn(64,64) rc4(16x,int) des(int) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-MBf3dh/openssl-1.1.1k=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes
aes-256 cbc 119873.47k 123572.55k 126513.57k 126318.79k 125628.02k 126929.42k
[root@debian11 ~]# openssl speed -evp aes-256-cbc
Doing aes-256-cbc for 3s on 16 size blocks: 65818605 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 64 size blocks: 18056419 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 256 size blocks: 4754481 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 1024 size blocks: 1174841 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 8192 size blocks: 148046 aes-256-cbc's in 2.99s
Doing aes-256-cbc for 3s on 16384 size blocks: 74660 aes-256-cbc's in 2.98s
OpenSSL 1.1.1k 25 Mar 2021
built on: Tue Aug 24 08:28:12 2021 UTC
options:bn(64,64) rc4(16x,int) des(int) aes(partial) blowfish(ptr)
compiler: gcc -fPIC -pthread -m64 -Wa,--noexecstack -Wall -Wa,--noexecstack -g -O2 -ffile-prefix-map=/build/openssl-MBf3dh/openssl-1.1.1k=. -fstack-protector-strong -Wformat -Werror=format-security -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAESNI_ASM -DVPAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2
The 'numbers' are in 1000s of bytes per second processed.
type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes 16384 bytes
aes-256-cbc 352206.58k 386491.91k 407072.62k 402353.57k 405616.33k 410479.68k
Re: v6.49.3 [stable] is released!
Posted: Fri Feb 18, 2022 6:32 pm
by bajodel
A couple of RDB52 (aka hAP ac2) in my LAB went into bootloop after upgrade from 6.49.2 to 6.49.3, no special conf (AP and a GRE tunnel on it)
I had to netinstall them, so sorry no supout. They are on 6.49.3 now (netinstalled directly to that version) and working fine.
Re: v6.49.3 [stable] is released!
Posted: Fri Feb 18, 2022 9:20 pm
by pe1chl
I have an odd situation in that two virtual RouterOS instances, both running 6.49.4 (x86), support IPSec AES hardware offloading differently. Any ideas on where I could hunt?
No idea, but I also have a CHR running 6.49.2 on VMware ESXi 7 and while Debian VMs on the same host show "aes" in the cpu flags, the CHR does not show H in the IPsec SA table.
So when you find how that can be, I am interested as well!
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 8:28 am
by bajodel
Just guessing, did you "import" the vm (ova or alike) or did you make the vm from scratch ?
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 11:43 am
by pe1chl
In my case it was imported from the .ova. It has virtual hardware version 19 (7.0U2 and later), and OS settings "Linux / Other 3.x Linux (64-bit)".
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 5:41 pm
by pendie
since it appeared 6.47 until now
sector writes are huge i went back to 6.46.8 maybe i will last as long as with that version 750 gr3 ,hap lite,and rb951 2nd
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 6:21 pm
by dave3
I upgraded my RB750gr3 to v6.49.3 with netinstall. And when I connect in winbox it says I'm connected to v6.49.3 on hEX (mmips). But if I do a /system routerboard print, it says my current-firmware is 6.47.10 (the same as the factory-firmware). Should I be concerned?
[admin@MikroTik] > system routerboard print
routerboard: yes
board-name: hEX
model: RB750Gr3
revision: r4
serial-number: ---
firmware-type: mt7621L
factory-firmware: 6.47.10
current-firmware: 6.47.10
upgrade-firmware: 6.49.3
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 6:27 pm
by eworm
This is just the boot code. To upgrade run:
/ system routerboard upgrade
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 7:18 pm
by dave3
Thanks, I didn't know that. I didn't see it anywhere in the netinstall instructions. It's interesting, even the packages were listed as 6.49.3. But after doing the /system routerboard upgrade, the current-firmware is listed as 6.49.3.
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 8:25 pm
by pe1chl
The firmware is just the bootloader. It does not matter so much what version it is, after MikroTik totally messed up the version numbering on it.
The RouterOS version is what matters, you find it under /system resource print
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 19, 2022 8:57 pm
by mkx
Sometimes routerboot does matter, older routerboots sometimes can't boot newer ROS kernel. So yes, MT did screw up numbering and doesn't publish change log for it. So it seems it's wise to keep it current.
Re: v6.49.3 [stable] is released!
Posted: Mon Feb 21, 2022 1:00 am
by kehrlein
Same as with previous versions (e.g. 6.49.1, 6.49.2):
Upgrade to 6.49.3 resulted in a boot loop of a particular hEX S (RB760iGS, mmips).
No access to device was possible until Netinstall, which solved the issue.
Updated soft- and firmware on these models without any issues:
CCR2004-1G-12S+2XS
CCR1009-7G-1C-1S+
CRS112-8P-4S
CRS309-1G-8S+
RB1100AHx4
RB750GL
RBcAPGi-5acD2nD (cAP ac)
x86
Re: v6.49.3 [stable] is released!
Posted: Mon Feb 21, 2022 4:23 pm
by han
I expect the change to be slow and a long time will be given before ending development and / or maintenance of v6 branch.
I think v6 is already abandoned.
I guess there will be 1-3 more updates to current v7.1 "stable" branch, then that will probably become "long term" and v6 reaches end-of-life officially.
v6 got its last update by end of december and probably only so because 6.49 appears to have significant issues. 6.49.3 is not even the 3rd real bug-fix update as 6.49.2 was a feature update adding device-mode.
It would be really nice to see 6.49 getting a few more updates, but I don't expect it to happen.
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 1:32 am
by Vlad2
I think v6 is already abandoned.
I guess there will be 1-3 more updates to current v7.1 "stable" branch, then that will probably become "long term" and v6 reaches end-of-life officially.
Unfortunately, I don't share your opinion. I think it would be too rash on the part of the MT team to do this, and abandon version 6 and take up version 7 (and for many, this 7th is still very "raw"). It should also be understood that Mikrotik has obligations to companies and organizations, the transition to a new version is a guarantee of the operation of devices, staff training, new courses, new trainers.
In general, I think that back in 2021 it was necessary to do active tests of version 7 and we would have had a working version 7.5 or 7.7 for the current period, at the time of the release of new devices (like RB5009). But they missed the time.
So there will be a year of transition for sure, and I think even more, the company has no right to force us to switch to a new version if we, as engineers, do not trust this version.
And version 6 after the official closure, it should be supported for 6-12 months with security fixes for sure.
My point of view is only. (Translated automatically)
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 10:46 am
by han
Well, Mikrotik sold already last year devices (e.g. RB5009) that come from factory with v7. (Back then v7 was even still officially beta and v6 won't work on RB5009).
So v7 is already in production environments...
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 11:06 am
by pe1chl
Well, Mikrotik sold already last year devices (e.g. RB5009) that come from factory with v7. (Back then v7 was even still officially beta and v6 won't work on RB5009).
So v7 is already in production environments...
Yes, they have made new hardware that was too difficult to get working under v6, and thus required v7.
But unfortunately, instead of first making v7 feature complete and as bugfree as v6 (i.e. no showstopper bugs in facilities that worked OK in v6), they keep playing with new v7 features.
So now the world is in limbo between "have to use v6 or else our network won't work" and "want or have to use v7 on this new box or to have this new feature".
That is a bit unfortunate.
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 12:38 pm
by han
I'm sure Mikrotik's Support has a very clear impression how the situation is currently seen from customers....
If you have only a limited developer team, why spend half of the development power on both v6 and v7 development - risking nothing gets really done. Put all on v7 and accept bumps in the road.
In particular, when v7 has been delayed that long. But of course, that's only my personal impression. Only Mikrotik knows.
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 12:45 pm
by bpwl
See only discussion v6-versus v7. No hickups in 6.49.3 besides some upgrade processes??
Who knows what the DHCP option means in the WLAN "Multicast Helper" ? It's not in the old wiki or newer help wiki files. What does it do, and where should it be applied? In the "AP" or in the "station pseudobridge"? Or is there anything else about this ??? New for 6.49.3? Or when was it introduced? Was not in 6.48.4 yet.
Klembord-2.jpg
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 12:56 pm
by pe1chl
I'm sure Mikrotik's Support has a very clear impression how the situation is currently seen from customers....
If you have only a limited developer team, why spend half of the development power on both v6 and v7 development - risking nothing gets really done. Put all on v7 and accept bumps in the road.
It is a bit unclear what picture they have of their customers.
Of course their only direct customers are their distributors. And they have indicated several times that the distributors are the ones that call the shots w.r.t. complicated new developments.
I.e. anything major has to be asked for by the distributors. And that is not surprising, as they bring in the money.
But in the past this has lead to a lot of very diverse functionality in the MikroTik routers, and the end-users have come to rely on it. They chose MikroTik, and bought it at the distributors, because of these features.
Now the new version RouterOS is introduced, and while most features are now kind of stable, there still remain use cases where v7 is essentially UNUSABLE.
One is a private network which uses BGP for the autorouting. BGP is unfinished and buggy. It has been in (at least theoretical) development for like 10 years now, but in still lacks essential features, compared to v6.
Now, is this an issue for MikroTik? Us poor users cannot tell them what to work on. "stop working on these new things like wireguard or l3 hw accel, first finish the BGP!". We do not bring in the money (at the moment) and it may well be that major distributors have indicated that their buyers want wireguard, not BGP.
That leaves us in limbo. Cannot upgrade so cannot test, cannot provide feedback, cannot buy new devices that require v7. But too little impact for MikroTik to notice it.
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 9:23 pm
by han
I perfectly agree!
High value customers are assigned a key accountant and get fast-tracked in support and development. Low prio customers meet in support forum.
But, there is an easy solution for your BGP issue - become an important customer.
Buy 5000 RB4011 (as these still run v6), promise to buy another 5000 if they fix BGP. That should do the trick.
PS: if you really do that I would be glad to take a few RB4011 from you ;-)
Re: v6.49.3 [stable] is released!
Posted: Tue Feb 22, 2022 9:52 pm
by pe1chl
... I already have a 4011, and at the moment I am using it to test v7. I selected it because it would be a drop-in replacement of the 2011 I had for years (and became too slow).
However it has a architecture-specific bug. I hope it will be fixed sometime soon.
And I now doubt it was a wise selection. It has lots of memory, yet it cannot use the new Wifi2 driver without disabling the 2GHz WiFi. And it has no way to add more storage, so using it with the appealing "Docker container" feature is also limited.
I am certainly not going to buy 5000 of these! On the other hand, maybe the CCR2004-1G-2XS-PCIe :-)
Re: v6.49.3 [stable] is released!
Posted: Wed Feb 23, 2022 8:17 pm
by dragonauta
Hello, I recently upgraded my RB2011UiAS-2HnD from 6.49.2 to 6.49.3
I have an L2TP server up and running but after the upgrade and proper reboot, all secrets were gone, just the secrets. Profile and L2TP configuration was ok after the upgrade. Everything else is ok.
It wasn't that bad, because I had a configuration backup, just put in secrets again and done.
I wonder if this was a bug for this update or "a feature"?
Thanks
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 26, 2022 6:19 pm
by kehrlein
... I already have a 4011, and at the moment I am using it to test v7. I selected it because it would be a drop-in replacement of the 2011 I had for years (and became too slow).
However it has a architecture-specific bug. I hope it will be fixed sometime soon.
What specific architecture bug do you mean? I would be interested in some details. Thx!
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 26, 2022 7:04 pm
by pe1chl
There is a complicated problem with DSCP, PPPoE and VLAN priority tags that is not occurring with exactly the same config in a 2011. It could be CPU-architecture or switch-chip specific, I don't know. Others have reported it too.
Support tells me it is fixed in 7.1.3 but I am running 7.2rc3 at the moment, I will upgrade to 7.2rc4 tomorrow and see if that fixes it as well.
Re: v6.49.3 [stable] is released!
Posted: Sat Feb 26, 2022 7:34 pm
by holvoetn
7.1.3 and 7.2rc3/4 are not the same dev stream, I think ?
Re: v6.49.3 [stable] is released!
Posted: Wed Mar 02, 2022 10:06 am
by emils
New version v6.49.4 has been released:
viewtopic.php?t=183744
you guys