MikroTik

Posted: **Thu Sep 15, 2011 11:38 am**

What's new in 5.7 (2011-Sep-14 10:54):

*) ovpn client - fixed crash when user name or password together
were longer than 11 symbols;
*) sstp client - added an option to skip
server address verification from certificate;
*) fixed problem - router crashed sometimes when using USB modem;
*) userman - show overall totals, show user totals if user has more
than one entry;
*) lcd - retrieving '/system lcd page' configuration did not work with
hundreds of interfaces;
*) webfig - added ability to reorder fields in skins;
*) webfig - added ability to add/remove new tabs & separators in skins;
*) webfig - added ability to add any field to special status page;
*) webfig - fixed problem when user sometimes got logged out with message
"internal server error";
*) webfig - logout didn't log user out from router;
*) webfig - added System/Password for changing user's own password;
*) system reset-configuration - if keep-users is specified ssh user keys are
preserved as well;
*) ipsec - new exchange mode (main-l2tp) for l2tp tunnel users to allow
FQDN as a peer ID with preshared key authorization in main mode;
*) ssh - fix possible server crash when connection is interrupted;
*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%;
*) add passthrough setting to change-dscp, change-ttl, change-mss,
strip-ipv4-options, change-hop-limit mangle targets;
*) ipsec - fixed problem of RB1200 rebooting when large amount of UDP traffic is
sent through IPsec;
*) sniffer - added more useful packet filtering options, also available as quick
mode command parameters;

Posted: **Thu Sep 15, 2011 11:42 am**

Torrent isn't up jet, but HTTP download works just fine.

Check out queue type

/ queue type print 
    5 name="multi-queue-ethernet-default" kind=mq-pfifo mq-pfifo-limit=50

Is this for interfaces that have multiple RX/TX queues?

Posted: **Thu Sep 15, 2011 11:51 am**

Torrent isn't up jet, but HTTP download works just fine.

Check out queue type
Code: Select all
/ queue type print 
    5 name="multi-queue-ethernet-default" kind=mq-pfifo mq-pfifo-limit=50 
Is this for interfaces that have multiple RX/TX queues?

This queue type is designed for our new dual core router RB1100AHx2, but you can use it on interfaces with multiple rx/tx queues (check "/system resources irq" menu) on multi-core machines. To make use of this queue type you have to turn off RPS on those interfaces. Most effect should be seen in configurations without simple queues and queue trees as there are still room for SMP improvements.

Posted: **Thu Sep 15, 2011 11:56 am**

Packages are again just thrown in the torrent, not separated into folders /:

Posted: **Thu Sep 15, 2011 12:03 pm**

This queue type is designed for our new dual core router RB1100AHx2, but you can use it on interfaces with multiple rx/tx queues (check "/system resources irq" menu) on multi-core machines. To make use of this queue type you have to turn off RPS on those interfaces. Most effect should be seen in configurations without simple queues and queue trees as there are still room for SMP improvements.

Hi mrz,

Is there a performance benefit to this type of queue over RPS on x86 based routers with Intel NIC's ?

Posted: **Thu Sep 15, 2011 12:04 pm**

Packages are again just thrown in the torrent, not separated into folders /:

Posted: **Thu Sep 15, 2011 12:08 pm**

No wireless changes? Why isnt in changelog?

Posted: **Thu Sep 15, 2011 12:13 pm**

add passthrough setting to change-dscp, change-ttl, change-mss,
strip-ipv4-options, change-hop-limit mangle targets;
*) ipsec - fixed problem of RB1200 rebooting when large amount of UDP traffic is
sent through IPsec;

perfect!

Posted: **Thu Sep 15, 2011 12:21 pm**

This queue type is designed for our new dual core router RB1100AHx2, but you can use it on interfaces with multiple rx/tx queues (check "/system resources irq" menu) on multi-core machines. To make use of this queue type you have to turn off RPS on those interfaces. Most effect should be seen in configurations without simple queues and queue trees as there are still room for SMP improvements.
Hi mrz,

Is there a performance benefit to this type of queue over RPS on x86 based routers with Intel NIC's ?

RPS is more artificial (software based). This queue type is more hardware based, so yes there should be performance benefits. You can test it and post your results.

Posted: **Thu Sep 15, 2011 1:02 pm**

*) ssh - fix possible server crash when connection is interrupted;

Where can i send the beer ?
Finally ssh works for me

Posted: **Thu Sep 15, 2011 1:34 pm**

the x86 iso is only 0 bytes.

edit: scrap that, all fixed

Posted: **Thu Sep 15, 2011 3:01 pm**

Hmm... My download is 0 bytes too...

Posted: **Thu Sep 15, 2011 3:04 pm**

Hmm... My download is 0 bytes too...

well, a browser wouldnt get it, i then wget it, which worked, then the browser would download.

Posted: **Thu Sep 15, 2011 3:10 pm**

No wireless changes? Why isnt in changelog?

http://forum.mikrotik.com/viewtopic.php?f=7&t=54005

Posted: **Thu Sep 15, 2011 4:00 pm**

nothing talk about the port flapping?

V5.4 is work bit good, but after that version cause some potential port flapping issue.
can look into this urgently?

Posted: **Thu Sep 15, 2011 4:21 pm**

Support layer-7 has been fixed ?
There have been improvements in wireless interfaces?
The problems in the bridge mode RB433AH been fixed?
The risk of this update is great because it never has any update fixes all bugs and there is always new.
All Mikrotik consumers are professionals with many clients.
Updates bring bad tested many problems causing loss of the provider customers.

Posted: **Thu Sep 15, 2011 4:40 pm**

The risk of this update is great because it never has any update fixes all bugs and there is always new.
Updates bring bad tested many problems causing loss of the provider customers.

When a new version of anything for anything comes out don't install it on production gear. Install it on some lab equipment. If you don't have lab equipment wait until other people have installed it on their lab equipment and reported back in the forums, and consider getting some lab equipment of your own so you can make sure to test all the functionality you use. You should do that with everything your income relies on, not just RouterOS.

Installing a new version on production gear the day it comes out is just crazy.

Posted: **Thu Sep 15, 2011 4:56 pm**

Hello fewi

I agree to put in gear production is crazy.
Often the laboratory test does not have the same potential as the gears in production.
It would be better the new versions released with less bugs.
Providers would have fewer problems with their customers.
All betting on the success and MikroTik.

Posted: **Thu Sep 15, 2011 5:11 pm**

Just yesterday I emailed mikrotik that snmp and nv2 together has issues in the 5.7 release. I disable snmp and random lockups stop. This issue started in 5.6 routeros. Before I was using routeros 5.4 and it worked. Keep in mind before upgrading. Its a know issue and Mikrotik has been working with me. Still no fix for it as far as I know. I installed 5.7 could days ago that they released to me.

Posted: **Thu Sep 15, 2011 5:18 pm**

Layer 7 Protocols fixed ?

Posted: **Thu Sep 15, 2011 5:24 pm**

I haven't tested. I have used layer 7 in the past but not recently. I am just trying to get mikrotik to fix the lockup issue when using snmp. I heard there is lockup issues with packet flow also and 5.7.

Posted: **Thu Sep 15, 2011 5:40 pm**

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%

THANK You THANK You, it rocks

)

regards

Posted: **Thu Sep 15, 2011 5:42 pm**

I liked that too.

Posted: **Thu Sep 15, 2011 5:54 pm**

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%

THANK You THANK You, it rocks )

regards

So if you have a complex config the performance gain is not as good?
Or you need to execute a simple configuration to make everything go faster?

I am not sure this sentence is either technical or makes any sense at all...

Tell us about your experiences Hellweiss. I upgraded a few RBs and by the looks of it i see no difference in performance.

Posted: **Thu Sep 15, 2011 6:02 pm**

any real-life tests on forwarding performance? =)

Posted: **Thu Sep 15, 2011 6:12 pm**

I've upgraded few 750G, 750, SXT, 433 an it seem they work fine, but I've also upgraded RB1200 and it seems that SNTP sync doesn't work now - could somebody check it please? I use standard "SNTP Client", not NTP package.

Posted: **Thu Sep 15, 2011 6:53 pm**

I've also upgraded RB1200 and it seems that SNTP sync doesn't work now - could somebody check it please? I use standard "SNTP Client", not NTP package.

Well, it is working now. I don't know what was wrong - I've tried multiple NTP servers and nothing... Then I tried to install NTP package and it was working. Then I've uninstalled it and it is still working now.

Posted: **Thu Sep 15, 2011 9:12 pm**

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%

How one is defining "simple configuration"?

Posted: **Thu Sep 15, 2011 9:19 pm**

Found another nv2 bug I could not fix. When I downgraded to 5.4 all my customers were stable.

Posted: **Thu Sep 15, 2011 10:07 pm**

Found another nv2 bug I could not fix. When I downgraded to 5.4 all my customers were stable.

Why not 5.6?

Posted: **Thu Sep 15, 2011 10:11 pm**

No dhcpv6...

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Posted: **Thu Sep 15, 2011 10:17 pm**

I wasnt on 5.6 and it had snmp issues also. So I moved to a known working routeros 5.4

Posted: **Fri Sep 16, 2011 12:34 am**

No wireless changes? Why isnt in changelog?

Which changes are you waiting for?

Posted: **Fri Sep 16, 2011 12:43 am**

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%

THANK You THANK You, it rocks )

regards

How do I see this? A packet enters router and is now send 30% faster to the port it has the gateway of destination on? Is there anything to gain here? Simple config = one route only in router. How much performance can be improved on here.

I can't place this improvement. Can anybody explain?

And Indeed, I feel sorry for those with complicate configurations. They miss the boat!

Posted: **Fri Sep 16, 2011 3:45 am**

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%
I can't place this improvement. Can anybody explain?

They obviously cut the basic packet latency. If your firewall, queue rules, bridging, ... don't swamp the difference you'll see an improvement.

If before the improvement your packet took 1000 angel heartbeats (AH) to go from in to out and your filtering rules only added 200AH you would see a 25% improvement (300/(1000+200)). If on the other hand your filter rules add 2000AH you'll only see a 10% improvement (300/(1000+2000)), and so on. Obviously with zero extra filtering overhead you get 30% (300/(1000+0)).

Posted: **Fri Sep 16, 2011 5:06 am**

No dhcpv6...

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Normis has said this is planned for 5.8, I'm planning on holding him to that!

Posted: **Fri Sep 16, 2011 5:38 am**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?

Posted: **Fri Sep 16, 2011 8:12 am**

No dhcpv6...

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Normis has said this is planned for 5.8, I'm planning on holding him to that!

http://wiki.mikrotik.com/wiki/Manual:IPv6/Pool

Posted: **Fri Sep 16, 2011 8:13 am**

How does one simple line can cause so much confusion?

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%;

IPv4 forwarding (routing) throughput performance has been increased ~30%, most benefit (all 30%) you will see in configurations that do only routing - the more other configuration you have, the less overall performance benefit you will see.

Posted: **Fri Sep 16, 2011 8:38 am**

I wasnt on 5.6 and it had snmp issues also. So I moved to a known working routeros 5.4

what snmp issue are you talking about? did you email support?

Posted: **Fri Sep 16, 2011 8:41 am**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?

I've seen this. Vanished after a while. Please send to support@mikrotik.com
If you can reproduce it.

Posted: **Fri Sep 16, 2011 9:05 am**

How does one simple line can cause so much confusion?

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%;
IPv4 forwarding (routing) throughput performance has been increased ~30%, most benefit (all 30%) you will see in configurations that do only routing - the more other configuration you have, the less overall performance benefit you will see.

This performance only fo routerboard ? or for x86 ? or fo both platform ? And what is simple configuration - only one default route or full BGP table without firewall ?

Posted: **Fri Sep 16, 2011 9:28 am**

This performance only fo routerboard ? or for x86 ? or fo both platform ? And what is simple configuration - only one default route or full BGP table without firewall ?

I think there is only one way to find out for sure - write down CPU loads and throughput with v5,6, upgrade and write down more, then compare. Post results in forum.

Posted: **Fri Sep 16, 2011 9:50 am**

No dhcpv6...

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Normis has said this is planned for 5.8, I'm planning on holding him to that!
http://wiki.mikrotik.com/wiki/Manual:IPv6/Pool

That really doesnt say much, Are you inferring that DHCPv6 is in 5.7, You might wanna add DHCPv6 to the changelog if it is! What about DHCPv6-PD, Still in 5.8 or is it in 5.7?

Posted: **Fri Sep 16, 2011 9:51 am**

It says that we have started to write the manual about it, so it's very close. v5.8 will have it.

Posted: **Fri Sep 16, 2011 10:25 am**

we have started to write the manual about it

xD 16+32=46 - IPv6 is so difficult...

Posted: **Fri Sep 16, 2011 11:34 am**

ssh - fix possible server crash when connection is interrupted;

Is it me, or didn't I read this type of fix recently in a changelog of a previous release?

(some console and ssh crash related issue)

Nah, I'm not complaining, I just thought when reading this "hey, they fixed frontstab again", but then I remembered Valve is not latvian

Posted: **Fri Sep 16, 2011 11:44 am**

Finished testing for 5.7 waiting for 5.8:

Just tested one CPE to AP in lab.

- Connections hang in all modes (801.11/nstreme/nv2) when there is interference.
Connection is up but no traffic. After a while connection drops and comes back up.
Interference is generated by an ap 4m distance with 10db lower power without a cpe
connected. I'm not sure this is a wireless problem as the connection stays up for a while
while pings do not pass.
- ping suddenly did not work from CPE to AP. I have to enter source ip. Looking at
packets CPE has chosen the wrong (ethernet IP) to send packets over wlan1
- dhcp sometimes hog cpu
- Winbox crashes on win7
- CPE crashes and needs a power cycle

CPE is RB711-5Hn-MMCX, AP is RB411AH with R52nM chain1+2 enabled.

I've only done ping and bandwidth test between CPE and AP and change protocols
between 802.11,nstreme and nv2. Testing 20MHz Channel, 5GHz-A/N, no rate settings.
security profile wpa2 PSK. AP bridges between wlan1 and ether1.

After the CPE crash I stopped ...

May be someone at MT should do some testing. I dont think I've done extensive tests
to run into a lot of problems.

Posted: **Fri Sep 16, 2011 11:52 am**

my opinion - something is really wrong with your setup, or hardware. it's not normal that you are the only one with problems all the time.

Posted: **Fri Sep 16, 2011 12:24 pm**

I installed 5.7 on two routers which are connected with a wireless bridge.

The core router is an RB1100 which has about a dozen vlans. After rebooting the RB1100 the device was unresponsive. I drove down to the NOC and found that the ethernet port connecting the wireless bridge to my house did not have a link. This specific port was set up static as 100/full and would not reconnect to the 100/full wireless bridge until I disabled and re-enabled the port.

After restoring access to the router, I noticed that the CPU utilization was pegged at 100%. At that point I forwarded a supout to support, then downgraded to 5.6. No problems there.

When I arrived back home I logged into my RB493. That also was pegged at 100% CPU utilization. I have not downgraded it back to 5.6 yet.

Hope this helps!

Posted: **Fri Sep 16, 2011 1:03 pm**

my opinion - something is really wrong with your setup, or hardware. it's not normal that you are the only one with problems all the time.

May be I'm the one wining more than some others. But following this thread I read that I'm not the only one
with problems:

> The problems in the bridge mode RB433AH been fixed?
> I disable snmp and random lockups stop
> Found another nv2 bug I could not fix. When I downgraded to 5.4 all my customers were stable
> some snmp problems.

My setup is quite simple and always the same on some hundred cpes. Find config below.
In short it does DHCP Server on LAN, NAT and gets an IP on wlan1.

AP bridges wlan1 and ether1. CPE gets wlan IP from Routerboard to which the AP is connected
on ether1 (RB450G, RB1100, ...).

When I do lab testing I take an AP, CPE from the shelf, update to the newest version (including FW),
connect my LAP to the CPE the AP to my office LAN, do bandwidth tests and use this connection for
a while for emailing/surfing/.. to see how it behaves. To see interference behavior I start a second
AP in some distance on the same/nearby channel with different power levels and watch what happens
while doing bandwidth tests.

So nothing special here.

I just post my observations ...

Why I am whining: Crashing CPEs would give me a crazy lot of phone calls and a really bad time.
May be it's a hardware fault but it is not likely as I took the same CPE for my last tests
without crashing.

To make it clear: ROS is the best system building a Wisp and I like it very much. I dont want
to talk it down. I am happy if someone on the list warns on things that dont work so he
saves me the time running into the same problems.

So what I wanted to say: I dont think 5.7 is ready for prime time now.

############ CPE Config #######
/ interface wireless security-profiles
add name="security" mode=dynamic-keys authentication-types=wpa2-psk \
unicast-ciphers=aes-ccm group-ciphers=aes-ccm wpa-pre-shared-key="" \
wpa2-pre-shared-key="xxxxxx"\
eap-methods=passthrough tls-mode=no-certificates \
tls-certificate=none static-algo-0=none static-key-0="" static-algo-1=none \
static-key-1="" static-algo-2=none static-key-2="" static-algo-3=none \
static-key-3="" static-transmit-key=key-0 static-sta-private-algo=none \
static-sta-private-key="" radius-mac-authentication=no group-key-update=5m

/interface wireless
set 0 adaptive-noise-immunity=none allow-sharedkey=no \
antenna-gain=18 area="" arp=enabled band=5ghz-a/n basic-rates-a/g=6Mbps \
basic-rates-b=1Mbps comment="" compression=no country=germany \
default-ap-tx-limit=0 default-authentication=yes default-client-tx-limit=\
0 default-forwarding=yes dfs-mode=radar-detect disable-running-check=no disabled=\
no disconnect-timeout=3s frame-lifetime=0 frequency=5180 frequency-mode=\
regulatory-domain hide-ssid=no ht-ampdu-priorities=0 ht-amsdu-limit=8192 \
ht-amsdu-threshold=8192 ht-basic-mcs=\
mcs-0,mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7 ht-extension-channel=\
above-control ht-guard-interval=any ht-rxchains=0 ht-supported-mcs="mcs-0,\
mcs-1,mcs-2,mcs-3,mcs-4,mcs-5,mcs-6,mcs-7,mcs-8,mcs-9,mcs-10,mcs-11,mcs-12\
,mcs-13,mcs-14,mcs-15" ht-txchains=0 hw-fragmentation-threshold=disabled \
hw-protection-mode=none hw-retries=8 \
l2mtu=2290 mode=\
station mtu=1500 name=wlan1 on-fail-retry-time=100ms \
periodic-calibration=default periodic-calibration-interval=60 \
preamble-mode=both proprietary-extensions=post-2.9.25 \
rate-set=default scan-list=default security-profile=security ssid=myssid \
station-bridge-clone-mac=00:00:00:00:00:00 supported-rates-a/g=\
6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps supported-rates-b=\
1Mbps,2Mbps,5.5Mbps,11Mbps tx-power-mode=default update-stats-interval=\
disabled wds-cost-range=50-150 wds-default-bridge=none wds-default-cost=\
100 wds-ignore-ssid=no wds-mode=disabled wmm-support=disabled\
wireless-protocol=any nv2-security=enabled nv2-preshared-key=\
xxxxxxx

/ ip pool
add name="home" ranges=192.168.0.2-192.168.0.254
/ ip upnp
set enabled=yes allow-disable-external-interface=no show-dummy-rule=yes
/ ip upnp interfaces
add interface=ether1 type=internal disabled=no
add interface=wlan1 type=external disabled=no

/ip dns
set allow-remote-requests=yes cache-max-ttl=1w cache-size=2048KiB \
max-udp-packet-size=512 servers=x.x.x.x,y.y.y.y

/ip address print
/ip address remove 0

/ ip address
add address=192.168.0.1/24 network=192.168.0.0 broadcast=192.168.0.255 \
interface=ether1 comment="" disabled=no
/ ip neighbor discovery
set ether1 discover=yes
set wlan1 discover=yes
/ip firewall nat
add action=dst-nat chain=dstnat comment=\
"phone" disabled=yes \
dst-port=5004-5009,5060-5069,7077-7087,10000 in-interface=wlan1 protocol=\
udp to-addresses=192.168.0.254
add action=masquerade chain=srcnat comment="" disabled=no out-interface=wlan1
/ ip firewall filter
add chain=input action=accept src-address=192.168.0.0/16 comment="" \
disabled=no
add chain=input action=accept src-address=213.185.128.0/19 comment="" \
disabled=no
add chain=input action=drop comment="" disabled=no
/ ip firewall service-port
set ftp ports=21 disabled=no
set tftp ports=69 disabled=no
set irc ports=6667 disabled=no
set h323 disabled=yes
set quake3 disabled=no
set gre disabled=yes
set pptp disabled=yes
/ ip firewall connection tracking
set enabled=yes tcp-syn-sent-timeout=5s tcp-syn-received-timeout=5s \
tcp-established-timeout=1d tcp-fin-wait-timeout=10s \
tcp-close-wait-timeout=10s tcp-last-ack-timeout=10s \
tcp-time-wait-timeout=10s tcp-close-timeout=10s udp-timeout=10s \
udp-stream-timeout=3m icmp-timeout=10s generic-timeout=10m \
tcp-syncookie=no
/ ip dhcp-client
add interface=wlan1 add-default-route=yes use-peer-dns=yes use-peer-ntp=yes \
comment="" disabled=no
/ ip dhcp-server
add name="server1" interface=ether1 lease-time=3d address-pool=home \
bootp-support=static authoritative=yes disabled=no
/ ip dhcp-server config
set store-leases-disk=5m
/ ip dhcp-server lease
/ ip dhcp-server network
add address=192.168.0.0/24 comment="" dns-server=192.168.0.1 \
gateway=192.168.0.1 netmask=24

# access for tool
/ip service enable api
/user group add name="apigroup" policy="read,winbox"
/user add name="apiuser" group="apigroup" password="xxxxx"
/ip firewall filter add chain=input protocol=tcp dst-port=8728 \
in-interface=!ether1 action=drop place-before=0

#
# Detect Fritzbox
#
/system scheduler
add comment="" disabled=no interval=0s name=fritzSchedule on-event=fritz \
policy=reboot start-time=startup
/system script
add name=fritz policy=\
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive source="\
{\r\
\n:delay 10s;\r\
\n:local avmMacAdr [:toarray (\"00:04:0E\",\"00:15:0C\",\"00:1A:4F\",\"00:\
1C:4A\",\"00:1F:3F\", \"00:24:FE\",\"BC:05:43\")]; \r\
\n:local isFritz \"false\";\r\
\n\r\
\n#a sagt wieviele dyn. und eventuelle FritzBox Eintraege es gibt\r\
\n#b wieviele stat. FritzBox Eintraege es gibt\r\
\n:local a [/ip dhcp-server lease print count-only where host-name~\"Fritz\
|fritz\" and dynamic=yes];\r\
\n:local b [/ip dhcp-server lease print count-only where dynamic=no and co\
mment~\"FritzBox\"];\r\
\n\r\
\n\r\
\n:log info \"Es gibt \$a dynamische Leases namens Fritz\";\r\
\n:log info \"Es gibt \$b statische Leases namens Fritz\";\r\
\n########################################################################\
###################################################\r\
\nif (\$a>1) do={:log info \"Script wird beendet, da mind. zwei FritzBox G\
eraete angesteckt sind\"} else={\r\
\n########################################################################\
###################################################\r\
\nif (\$a=1 and \$b=1) do={:log info \"1 statisch eingetragene FritzBox vo\
rhanden, sowie ein weiterer Fritz Host-Name -> Eventuell wird FritzBox get\
ausch\";\r\
\n:local mac [/ip dhcp-server lease get [find host-name~\"Fritz|fritz\" an\
d dynamic=yes] mac-address]; :put \$mac;\r\
\n\r\
\n\r\
\n:local submac [:pick \$mac 0 8];\r\
\n\r\
\n#falls die Mac Adresse des Hosts im avmMacAdr Array vorkommt -> setze is\
Fritz auf true\r\
\n\r\
\n:for i from=0 to=([:len \$avmMacAdr]-1) do={ :if (\$submac=[:pick \$avmM\
acAdr \$i]) do={:set isFritz \"true\"}}\r\
\n\r\
\n:if (\$isFritz!=\"true\") do={:put \"Keine Fritzbox, lediglich Username \
Fritz -> exit\"} else={\r\
\n:log info \"Erstelle NAT-Regel fuer FritzBox!\";\r\
\n\r\
\n#loesche nun statischen DHCP-Server Lease und NAT-Rule der vorherigen Fr\
itzBox\r\
\n:local oldMac [/ip dhcp-server lease get [find comment~\"FritzBox\" and \
dynamic=no] mac-address]; \r\
\n\r\
\n#finde den alten NAT sowie DHCP Lease Eintrag anhand der MAC-Adresse des\
\_alten Geraets, welche als Kommentar mit angegeben wurde und loesche dies\
e\r\
\n/ip firewall nat remove [find comment~\"\$oldMac\"];\r\
\n/ip dhcp-server lease remove [find comment~\"\$oldMac\"];\r\
\n\r\
\n\r\
\n#Mache neue FritzBox statisch und setze einen Kommentar versehen mit der\
\_MAC-Adresse\r\
\n/ip dhcp-server lease make-static [/ip dhcp-server lease find host-name~\
\"Fritz|fritz\" and dynamic=yes];\r\
\n/ip dhcp-server lease comment [find host-name~\"Fritz|fritz\"] \"\$mac -\
> statisch FritzBox\";\r\
\n\r\
\n#erstelle NAT Regel \r\
\n:local q [/ip dhcp-server lease get [find host-name~\"Fritz|fritz\" and \
comment~\"\$mac\"] address]; \r\
\n/ip firewall nat add chain=dstnat action=dst-nat to-addresses=\$q to-por\
ts=0 protocol=tcp in-interface=wlan1 dst-port=!8291 comment=\"\$mac NAT-Ru\
le FritzBox\";\r\
\n}\r\
\n}\r\
\n########################################################################\
####################################################\r\
\nif (\$a=1 and \$b=0) do={:log info \"Fritz Host-Name als dynamischer DHC\
P Lease vorhanden -> schaue ob FritzBox\";\r\
\n\r\
\n:local mac [/ip dhcp-server lease get [find host-name~\"Fritz|fritz\" an\
d dynamic=yes] mac-address]; :put \$mac;\r\
\n:local submac [:pick \$mac 0 8];\r\
\n\r\
\n#falls die Mac Adresse des Hosts im avmMacAdr Array vorkommt -> setze is\
Fritz auf true\r\
\n\r\
\n:for i from=0 to=([:len \$avmMacAdr]-1) do={ :if (\$submac=[:pick \$avmM\
acAdr \$i]) do={:set isFritz \"true\"}}\r\
\n\r\
\n:if (\$isFritz!=\"true\") do={:put \"Keine Fritzbox, sondern lediglich U\
sername Fritz -> exit\"} else={\r\
\n:log info \"FritzBox vorhanden -> Erstelle NAT-Regel fuer FritzBox!\";\r\
\n\r\
\n:local natRule [/ip firewall nat print count-only where comment~\"\$mac\
\"];\r\
\n:if (\$natRule>0) do={:log info \"NAT-Regel bereits vorhanden\" } else={\
\r\
\n\r\
\n#mache FritzBox statisch\r\
\n:local d [/ip dhcp-server lease get [find host-name~\"Fritz|fritz\" and \
dynamic=yes] address];\r\
\n/ip dhcp-server lease make-static [/ip dhcp-server lease find address=\$\
d and dynamic=yes];\r\
\n/ip dhcp-server lease comment [find host-name~\"Fritz|fritz\"] \"\$mac -\
> statisch FritzBox\";\r\
\n\r\
\n/ip firewall nat add chain=dstnat action=dst-nat to-addresses=\$d to-por\
ts=0 protocol=tcp in-interface=wlan1 dst-port=!8291 comment=\"\$mac NAT-Ru\
le FritzBox\";\r\
\n/ip firewall nat add chain=dstnat action=dst-nat to-addresses=\$d to-por\
ts=0 protocol=udp in-interface=wlan1 dst-port=!8291 comment=\"\$mac NAT-Ru\
le FritzBox\";\r\
\n\r\
\n########################################################################\
####################################################\r\
\n}\r\
\n}\r\
\n}\r\
\n}\r\
\n}"

# !!!! Change here !!!!
/ interface wireless set wlan1 antenna-gain=18 radio-name="c334"
/ system identity set name="c334"

/interface wireless print
/interface ethernet print
############################

Posted: **Fri Sep 16, 2011 1:06 pm**

I'm getting a 0 byte file downloading the X86 ISO. Tried both Chrome and IE.

Posted: **Fri Sep 16, 2011 2:00 pm**

*) improved ipv4 forwarding performance on all boards with simple configuration
by up to 30%

THANK You THANK You, it rocks )

regards
So if you have a complex config the performance gain is not as good?
Or you need to execute a simple configuration to make everything go faster?

I am not sure this sentence is either technical or makes any sense at all...

Tell us about your experiences Hellweiss. I upgraded a few RBs and by the looks of it i see no difference in performance.

Whats so difficult to understand ?!? I've a performance gain on my RouterBoards with ROS 5.7.

One of them is e.g. a RB750 L2TP VPN Server. Connecting to the Mailserver and syncing my
Mailbox now works a lot faster.

Regards

Posted: **Fri Sep 16, 2011 3:09 pm**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?
I've seen this. Vanished after a while. Please send to support@mikrotik.com
If you can reproduce it.

I tried in factory default setting.
When "switch all port" is set to NO in 5.7, the CPU usage would go to high in dhcp package.
With the same setting in 5.6, CPU is ran around below 3 to 5.

Posted: **Fri Sep 16, 2011 3:11 pm**

of course using "switch" will decrease CPU load, as connections are not going through RouterOS, but switched directly.

Posted: **Fri Sep 16, 2011 3:19 pm**

Hi ...

I upgraded untill now only 3 boards:

* RB411AR (ufl version, no voltage monitor series)
* RB433
* WRAP (Geode X86 266MHz)

The only issue untill now was the X86. It hung up after a couple of hours and was necessary to power cycle it. Now it's up for 18h. Watchdog timer + auto supout was disabled (I even don't know if this feature works on X86 the same way it does on RBs e.g. just HW watchdog)

Still waiting to upgrade the 433UAHs.

Regards;

Posted: **Fri Sep 16, 2011 4:29 pm**

Whats so difficult to understand ?!? I've a performance gain on my RouterBoards with ROS 5.7.

One of them is e.g. a RB750 L2TP VPN Server. Connecting to the Mailserver and syncing my
Mailbox now works a lot faster.

Regards

You are repeating yourself in making no sense statements. "Syncing my Mailbox now works a lot faster"?? Maybe there were less mail to process.

If you want to make a statement that something works much better you have to give some proper example.
Like; before 10Mb of mails took me 75 seconds and now 10Mb of mails take me only 55 seconds.

Posted: **Fri Sep 16, 2011 5:06 pm**

I wasnt on 5.6 and it had snmp issues also. So I moved to a known working routeros 5.4
what snmp issue are you talking about? did you email support?

Yes I did email them about it with the supout. They kept having me try 3 different revisions of the 5.7 and the last one also had an additional problem with NV2. I don't want to bug my customers too much. I will take a break then come back and help you guys later. But it is very clear when I upgrade my 100+ aps to 5.7 with snmp enabled I have many many issues. I disable snmp and lots of problems go away. The routerboards that dont run NV2 never lock up with snmp. Just the aps with NV2 on it. Its almost like they are connected in some way. Anyways I am going to clear my head. Chat you guys later. I did create supouts on this topic.

Posted: **Fri Sep 16, 2011 5:11 pm**

Are you still considering improvements in VLAN management in both the switch and bridge?

Ticket#2011072966000478

I've nearly convinced everyone here that we don't need to spend big money on Cisco switches when MT will do the trick, but not being able to restrict VLAN trunking without creating 2 rules per vlan is going to really slow things down.

Posted: **Fri Sep 16, 2011 7:29 pm**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?

We also have this problem. I already sent supout file to support but they say the cannot find anything ...

Posted: **Fri Sep 16, 2011 7:42 pm**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?
We also have this problem. I already sent supout file to support but they say the cannot find anything ...

I have that problem also

This is on a 450G board:

          cpu-used: 100
  cpu-used-per-cpu: 100%
       free-memory: 242784

Posted: **Fri Sep 16, 2011 7:48 pm**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?
We also have this problem. I already sent supout file to support but they say the cannot find anything ...
I have that problem also This is on a 450G board:
Code: Select all
          cpu-used: 100
  cpu-used-per-cpu: 100%
       free-memory: 242784

I would try this. Make a supout as the cpu is high. There is no way they cant see the issue that way. Is your cpu still high. Want me to look at it?

Posted: **Fri Sep 16, 2011 7:55 pm**

I would try this. Make a supout as the cpu is high. There is no way they cant see the issue that way. Is your cpu still high. Want me to look at it?

Hey, thanks for your response, I have sent that file to support and opened a new ticket.

Downgrading to 5.6 in the meantime fixed it for me, CPU back to almost 0%.

Posted: **Fri Sep 16, 2011 8:06 pm**

I would try this. Make a supout as the cpu is high. There is no way they cant see the issue that way. Is your cpu still high. Want me to look at it?
Hey, thanks for your response, I have sent that file to support and opened a new ticket.

Downgrading to 5.6 in the meantime fixed it for me, CPU back to almost 0%.

Ok cool. 5.2 and 5.4 I have had the best experience with. I have a lot of mikrotiks so I know real quick if its not working.

Posted: **Fri Sep 16, 2011 10:56 pm**

I've also had problems with cpu usage pegging to 100% in 5.6 and 5.7, but mine has always been the routing package. I submitted a trouble ticket #2011091366000468 with a supout, but no word back yet. Keeping my fingers crossed!

Posted: **Fri Sep 16, 2011 10:58 pm**

My lockups could be because the cpu is maxing out. I did supout that also.

Posted: **Sat Sep 17, 2011 1:25 am**

@ste: In your config print I miss the interface \ bridge part.

Posted: **Sat Sep 17, 2011 5:27 am**

I noticed that after the upgrade my l2mtu is now 1520 rather than 1524 as previously documented. Not a serious issue for me, but it seems like it might be for folks who've tuned their MTUs on other gear to match the old values.

Any particular reason for the change?

Posted: **Sat Sep 17, 2011 6:49 am**

I would try this. Make a supout as the cpu is high. There is no way they cant see the issue that way. Is your cpu still high. Want me to look at it?
Hey, thanks for your response, I have sent that file to support and opened a new ticket.

Downgrading to 5.6 in the meantime fixed it for me, CPU back to almost 0%.

I overcome the trouble in 5.7 with turn on "switch all port" and then reboot the 450G.
It calm down near to 0% CPU.

Posted: **Sat Sep 17, 2011 7:01 am**

@ste: In your config print I miss the interface \ bridge part.

This is the CPE config. The CPEs dont bridge.

Posted: **Sat Sep 17, 2011 9:40 am**

Whats so difficult to understand ?!? I've a performance gain on my RouterBoards with ROS 5.7.

One of them is e.g. a RB750 L2TP VPN Server. Connecting to the Mailserver and syncing my
Mailbox now works a lot faster.

Regards
You are repeating yourself in making no sense statements. "Syncing my Mailbox now works a lot faster"?? Maybe there were less mail to process.

If you want to make a statement that something works much better you have to give some proper example.
Like; before 10Mb of mails took me 75 seconds and now 10Mb of mails take me only 55 seconds.

Dont know what your Problem is, works faster for me, over and out.

Posted: **Sat Sep 17, 2011 10:41 am**

Anyone had any issues upgrading the routerboard bootloader firmware? It took a couple of tries on some other units but I have a 450G that's not taking the upgrade. It says it is, but after a reboot it's still the same. I haven't had this issue with previous versions.

Posted: **Sat Sep 17, 2011 11:36 am**

@ste: In your config print I miss the interface \ bridge part.
This is the CPE config. The CPEs dont bridge.

Ok, missed that. But then I would like to see the bridge part of the AP. Give us the config of the AP and tonight I can take a look why your units crash. Your config's are not so much different as mine but I have no crashing units...

Posted: **Sat Sep 17, 2011 12:57 pm**

Anyone had any issues upgrading the routerboard bootloader firmware? It took a couple of tries on some other units but I have a 450G that's not taking the upgrade. It says it is, but after a reboot it's still the same. I haven't had this issue with previous versions.

The same problem i am experiencing with a dozen of RB750. Not a single one of them upgrades the bootloader. This bug is present also in v5.4, v5.5, v5.6.

Posted: **Sat Sep 17, 2011 2:04 pm**

@ste;
You'll be happy to hear I now run in the same problem as you prescibed:

New rb411, basic config.
I all do is bridge the wlan port with ether1 and give the bridge one IP address.
Everything is fine until some traffic start to run over the bridge. Ethernetport becomes unavailable. Just dead.
Power cycle does not bring it back.
I have to resets config with the screwdriver manner, after that rb411 boots up normal and works again in basic config.

Second attempt, setup my wanted config now in 5.6. Works like a charm. After a while update to 5.7 again, router keeps on running. Put some traffic over it, Ethernet port becomes dead.

So their is definitely a bug in 5.7 that has to do with the bridge function.

I use the board now with 5.6 which is proven to be fine, also on bridges (I have some config similar like the one prescribed in my backhauls and they run with heavy traffic already for months.)

I am SOO happy you made an alert on this bug. If not and I would have started to implement 5.7 on my network it would have brought it almost completely down!

R.

Posted: **Sat Sep 17, 2011 2:29 pm**

I am SOO happy you made an alert on this bug. If not and I would have started to implement 5.7 on my network it would have brought it almost completely down!
R.

Well, you're supposed to test this a bit before deploying, it is kind of part of deployment

Posted: **Sat Sep 17, 2011 2:41 pm**

I am SOO happy you made an alert on this bug. If not and I would have started to implement 5.7 on my network it would have brought it almost completely down!
R.
Well, you're supposed to test this a bit before deploying, it is kind of part of deployment

Quit funny!

What do you think I was doing?

It is only that ste reported the issue and was accused of making noise for no reason. I proof he is right.
Apart from that, I have about 40 different configs all over my network. I usually start to upgrade on boards on my desk. Than some boards with easy access and not important and then units further out in the field.
Some bugs usually only come up while rb is taken in real environment.
This is a typical example. I already have several boards upgraded, even in live environment and they have no issues with 5.7.
Even a board on my desk in bridge mode initially worked, even after a reboot and a power cycle.
Only after putting real traffic on it the issue popped up.

So please spare me your ´advice´ and come up with some constructive comments please.

Posted: **Sat Sep 17, 2011 2:46 pm**

So please spare me your ´advice´ and come up with some constructive comments please.

All the seriousness... I am sorry if I offended you, I thought I would lighten up this thread a bit.

I have only one RB 450G for home use, It is affected by the 100% CPU usage bug, reverting to 5.6 fixes it for me, YMMV.

Good day Sir!

Posted: **Sat Sep 17, 2011 2:53 pm**

So please spare me your ´advice´ and come up with some constructive comments please.
All the seriousness... I am sorry if I offended you, I thought I would lighten up this thread a bit.

I have only one RB 450G for home use, It is affected by the 100% CPU usage bug, reverting to 5.6 fixes it for me, YMMV.

Good day Sir!

Ok, taken.
All friends.

Posted: **Sat Sep 17, 2011 6:58 pm**

Anyone had any issues upgrading the routerboard bootloader firmware? It took a couple of tries on some other units but I have a 450G that's not taking the upgrade. It says it is, but after a reboot it's still the same. I haven't had this issue with previous versions.
The same problem i am experiencing with a dozen of RB750. Not a single one of them upgrades the bootloader. This bug is present also in v5.4, v5.5, v5.6.

Seems to be a real issue. Using a different path may help... http://forum.mikrotik.com/viewtopic.php?f=3&t=55044

Posted: **Sat Sep 17, 2011 8:39 pm**

installed it on one of production x86 routers, core 2 duo 2.2, intel 82572EI, uptime about 2 days, runs well, MAx in 300 mbps( cpu 50%), routing+queue tree,simple ospf, no problems so far

Posted: **Sat Sep 17, 2011 9:24 pm**

Anyone had any issues upgrading the routerboard bootloader firmware? It took a couple of tries on some other units but I have a 450G that's not taking the upgrade. It says it is, but after a reboot it's still the same. I haven't had this issue with previous versions.
The same problem i am experiencing with a dozen of RB750. Not a single one of them upgrades the bootloader. This bug is present also in v5.4, v5.5, v5.6.

No problem for me - I have RB750 with firmware version 2.36 - I have downloaded it from routerboard.com, saved to RB750, set "upgrade", restart and works fine.

Posted: **Sat Sep 17, 2011 9:29 pm**

I noticed that after the upgrade my l2mtu is now 1520 rather than 1524 as previously documented. Not a serious issue for me, but it seems like it might be for folks who've tuned their MTUs on other gear to match the old values.

Any particular reason for the change?

Maybe it may have something common with this bug: http://forum.mikrotik.com/viewtopic.php ... 50#p277655 (and previous messages from me) - L2MTU is lowered a little in 5.7 and works fine. I don't understand why bigger values was working in previous versions and not later.

Posted: **Sun Sep 18, 2011 4:57 pm**

ROS v5.7 on Intel "Sandy Bridge" works great!
With Intel network adapters (E1G42ET and E1G44HT), exceptional performance! (shaper & vpn)
Integrated on-board network adapter does not work, as warned.

Posted: **Mon Sep 19, 2011 3:35 am**

Anyone know if the 'sunhme' driver was compiled into mikrotik 5.7? I'm looking to pick up an Atom-based board but need four 100mbit ports and don't feel like spending a lot of cash on an ethernet card (I'll keep the Athlon64 3000+ with two dual-port Compaq/Intel cards I'm using now). Tons of these Sun quad cards in the surplus market, they do work in linux with an open source driver. Performance isn't too shabby from what I've read.

Performance is great with my current setup, but I'm looking to shave off a few watts if possible...

Posted: **Mon Sep 19, 2011 8:05 am**

happy to say I have an RB433 that upgraded with no issues on the day v5.7 came out and has been up since (CPU idling at 3% currently).

Also upgraded 2 x86 test boxes this weekend and both are functioning correctly at this time with no visible performance issues.

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Feel free to use http://bugs.mikrotik-routeros.com/ to post any major issues you have with specific releases and provide as much information as you can about how to replicate these.

Posted: **Mon Sep 19, 2011 12:10 pm**

I upgraded my new RB750GL to v5.7 and it seems less stable now

.
Where can I download the old version? I think it was shipped with RouterOS V.5.2.

Posted: **Mon Sep 19, 2011 3:00 pm**

UPnP 'Forced external IP' is still broken (first IP of external Interface is used instead of the 'forced' one).
Sent supout and screenshots: Ticket#2011091666000168

Posted: **Mon Sep 19, 2011 3:04 pm**

I upgraded my new RB750GL to v5.7 and it seems less stable now .

what does it mean "less stable"? are you serious?

Posted: **Mon Sep 19, 2011 3:06 pm**

I upgraded my new RB750GL to v5.7 and it seems less stable now .
Where can I download the old version? I think it was shipped with RouterOS V.5.2.

What do you mean by "less stable"? Here are links for elder versions:
http://download.mikrotik.com/routeros-mipsbe-5.2.npk
http://download.mikrotik.com/routeros-mipsbe-5.3.npk
http://download.mikrotik.com/routeros-mipsbe-5.4.npk
http://download.mikrotik.com/routeros-mipsbe-5.5.npk
http://download.mikrotik.com/routeros-mipsbe-5.6.npk

Posted: **Mon Sep 19, 2011 3:41 pm**

I upgraded my new RB750GL to v5.7 and it seems less stable now .
Where can I download the old version? I think it was shipped with RouterOS V.5.2.

more details? I've upgraded my RB750GL to 5.7 and it's running fine.

Posted: **Mon Sep 19, 2011 3:48 pm**

I upgraded my new RB750GL to v5.7 and it seems less stable now .
what does it mean "less stable"? are you serious?

After update I have configured interfaces and dhcp client for WAN and dhcp server for LAN, after that my rb750gl was constantly rebooting itself. Boot time has increased as well. Winbox connect only from 2ed, 3d time. I didn't act like that prior to update

Posted: **Mon Sep 19, 2011 6:07 pm**

CPU load?..

Posted: **Mon Sep 19, 2011 8:44 pm**

CPU load?..

I already went back to v5.2.

I have used ftp method to update and probably it does work properly.

As my firmware didn't change.
I will update again but with terminal method.

[admin@MikroTik] > system routerboard print
routerboard: yes
model: 750GL
serial-number: xxxxxxxxx
current-firmware: 2.34
upgrade-firmware: 2.36

Posted: **Mon Sep 19, 2011 9:01 pm**

I upgraded one wireless bridge (RB333) and one router (RB750G) from 5.6 to 5.7 and got only 10MBit/s speed on the ethernet link between these both devices.

Downgraded to 5.6 and it works like it did before the upgrade (100MBit/s).

Posted: **Tue Sep 20, 2011 12:13 am**

I can confirm: as soon as you disable the interface used by dhcp-client, 'dhcp' process eats the whole CPU core until reboot

upd: after disabling dhcp-client, CPU goes down, just not momentarily

Posted: **Tue Sep 20, 2011 2:28 am**

I have a RB who was with the 450G MK 4.17 working perfectly well with an application developed in Delphi and uses the woodssh, then upgraded to 5.7 MK, now the application is running and suddenly stops communicating via ssh, so I have to restart the RB to return to work.

if I access IP Service List and put 0.0.0.0 / 0 in from avaliable and tap OK also back up and running, and when I have to go back to it and remove the 0.0.0.0 / 0 is like liberate something.
I auditioned with Putty and he's as connection refused.

Someone could tell me what could cause this problem, it is only with ssh, if I use the Winbox can access normally.

Posted: **Tue Sep 20, 2011 3:21 pm**

happy to say I have an RB433 that upgraded with no issues on the day v5.7 came out and has been up since (CPU idling at 3% currently).

Also upgraded 2 x86 test boxes this weekend and both are functioning correctly at this time with no visible performance issues.

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?
Feel free to use http://bugs.mikrotik-routeros.com/ to post any major issues you have with specific releases and provide as much information as you can about how to replicate these.

Seeing as that is not an official Mikrotik site, I don't see how it is any better than placing bugs on this forum. Mikrotik is much more likely to see bugs written here than on some external site.

Posted: **Tue Sep 20, 2011 3:55 pm**

I have a RB who was with the 450G MK 4.17 working perfectly well with an application developed in Delphi and uses the woodssh, then upgraded to 5.7 MK, now the application is running and suddenly stops communicating via ssh, so I have to restart the RB to return to work.

if I access IP Service List and put 0.0.0.0 / 0 in from avaliable and tap OK also back up and running, and when I have to go back to it and remove the 0.0.0.0 / 0 is like liberate something.
I auditioned with Putty and he's as connection refused.

Someone could tell me what could cause this problem, it is only with ssh, if I use the Winbox can access normally.

when ssh is not working on the router, create support output file and send it to support. Make sure you are running 5.7

Posted: **Wed Sep 21, 2011 1:32 am**

No DHCPv6

Booooooooooooo

So whats is the plan for DHCPv6 now ?

And what happened to Betas ? Now we just get final releases ?

Posted: **Wed Sep 21, 2011 1:38 am**

No DHCPv6 Booooooooooooo

So whats is the plan for DHCPv6 now ?

And what happened to Betas ? Now we just get final releases ?

IPv6
Starting from v5.8 RouterOS supports IPv6 prefix delegation according to RFC 3633.
DHCPv6 server works in parallel with regular DHCP server when address-pool6 option is set.
DHCPv6 uses following options:
authoritative
lease-time
address-pool6
interface
name

Looks like it might be around the corner...

-tp

Posted: **Wed Sep 21, 2011 2:12 am**

No DHCPv6 Booooooooooooo

So whats is the plan for DHCPv6 now ?

And what happened to Betas ? Now we just get final releases ?

Betas??? You mean the releases WAY BACK before RC1? v5 is no longer in beta.

Or, are you talking about, for example, the pre-release of v5.8 that some of us are using?

Posted: **Wed Sep 21, 2011 4:50 am**

Feel free to use http://bugs.mikrotik-routeros.com/ to post any major issues you have with specific releases and provide as much information as you can about how to replicate these.
Seeing as that is not an official Mikrotik site, I don't see how it is any better than placing bugs on this forum. Mikrotik is much more likely to see bugs written here than on some external site.

It's an ordered list of bugs affecting different versions and if they're known to be resolved or not, if you'd rather have to search the forums to find any confirmed bugs before upgrading you're welcome to do so, however the solution I've offered is something that could potentially become incredibly useful with more input.

It's not intended to be submitted to mikrotik, bugs that are placed there have already been ticketed to support, we're simply keeping track of them so other can benefit knowing what issues are outstanding.

Posted: **Wed Sep 21, 2011 8:48 am**

http://wiki.mikrotik.com/wiki/Manual:IP ... erver#IPv6

Posted: **Wed Sep 21, 2011 8:51 am**

No DHCPv6 Booooooooooooo

So whats is the plan for DHCPv6 now ?

And what happened to Betas ? Now we just get final releases ?

it was cleary stated that dhcpv6-pd will not be here no sooner than 5.8

Posted: **Wed Sep 21, 2011 9:04 am**

I have RB 450G and RB 493AH, only used it for loadbalancing and traffic shaping, no hotspot/wireless/ip6.
Mostly use Queue and /ip route, ROS 5.7 stable and got less cpu load than before version.
But old problem port/ether flapping still happening when i set my RB493AH using PPPoE (Adsl modem Bridge mode), connect and disconnect after 3-4minute, but if i set mikrotik to non PPPoE/NAT only (Adsl Modem TP-Link 8817 at PPPoE mode) work perfect. So i tried test using diffrent modem D-link 526b (broadcom chip) at Bridge mode and work good. I think the problem was TP-Link 8817 (Trend Chip) after 3 same modem tested.

I hope next ROS will fix compatibility issue with some adsl modem chipset.

Posted: **Wed Sep 21, 2011 9:57 am**

Are there any more info about this problem? After upgrade to 5.7 I am experiencing ether1 problems. The link goes up and down randomly, sometimes it registers at only 10mbps half-duplex, then suddenly goes down. Physically nothing has been changed or touched, so there are very little chance it could be network adapter problem or something of coincidence. And that routerboard is mounted on a mast, that I would have to disassemble to bring it down. I really don't want to do that just for the screwdriver trick.

Today first time ever I have downgraded ROS, but unfortunately in 5.6 the problem remains.

Everything is fine until some traffic start to run over the bridge. Ethernetport becomes unavailable. Just dead.
Power cycle does not bring it back.
I have to resets config with the screwdriver manner, after that rb411 boots up normal and works again in basic config.

Second attempt, setup my wanted config now in 5.6. Works like a charm. After a while update to 5.7 again, router keeps on running. Put some traffic over it, Ethernet port becomes dead.

So their is definitely a bug in 5.7 that has to do with the bridge function.

I use the board now with 5.6 which is proven to be fine, also on bridges (I have some config similar like the one prescribed in my backhauls and they run with heavy traffic already for months.)

I am SOO happy you made an alert on this bug. If not and I would have started to implement 5.7 on my network it would have brought it almost completely down!
R.

Posted: **Wed Sep 21, 2011 11:21 am**

Hello!!!
What about GSO/TSO/LRO in ROS?
http://en.wikipedia.org/wiki/Large_segment_offload

Posted: **Wed Sep 21, 2011 12:00 pm**

that is good for data source when sending out data. Router usually received already segmented data and all it has to do is route/filter these packets. Or i have misunderstood your request completely.

Posted: **Wed Sep 21, 2011 12:36 pm**

No DHCPv6 Booooooooooooo

So whats is the plan for DHCPv6 now ?

And what happened to Betas ? Now we just get final releases ?
it was cleary stated that dhcpv6-pd will not be here no sooner than 5.8

Sorry my bad

Im just impatient.. Plus not checking in and keeping up with the forum as much as I should..

Doesnt a "pre-release" count as a Beta ? If there are upcoming versions of the OS it would be cool if they were public beta..

Posted: **Wed Sep 21, 2011 12:40 pm**

RouterOS example life cycle:

v4beta1
v4beta2
v4rc1
v4rc2
v4.0
v4.1
v4.2 (internal build, somtimes given to specific user for testing)
v4.2 (regular build, public)
v4.3
v5beta1

Posted: **Wed Sep 21, 2011 5:44 pm**

Hello, I upgraded the routerboard 433AH to the lastest verison 5.7, but I can´t find the command

/system routerboard print

I gives me an error that shows "routerboard" isnt recognized.

It is weird because there is no problem with updated 411AH to 5.7, it shows this command.

Thanks for any help, maybe a bug?

Andres

Posted: **Wed Sep 21, 2011 7:55 pm**

Are there any more info about this problem? After upgrade to 5.7 I am experiencing ether1 problems. The link goes up and down randomly, sometimes it registers at only 10mbps half-duplex, then suddenly goes down. Physically nothing has been changed or touched, so there are very little chance it could be network adapter problem or something of coincidence. And that routerboard is mounted on a mast, that I would have to disassemble to bring it down. I really don't want to do that just for the screwdriver trick.

Today first time ever I have downgraded ROS, but unfortunately in 5.6 the problem remains.

Sorry, false alarm. Problem was in the cable.

Posted: **Thu Sep 22, 2011 2:36 am**

Not mentioned in changelog however the issue I was having with interface names when doing a configuration reset seem to be fixed.

Posted: **Thu Sep 22, 2011 9:23 am**

Hello, I upgraded the routerboard 433AH to the lastest verison 5.7, but I can´t find the command

/system routerboard print

I gives me an error that shows "routerboard" isnt recognized.

It is weird because there is no problem with updated 411AH to 5.7, it shows this command.

Thanks for any help, maybe a bug?

Andres

under '/system package' check if you have routerboard package installed. Most probably it is not.

Posted: **Thu Sep 22, 2011 11:14 am**

No dhcpv6...

It would be cool if Mikrotik had some kind of bugtracker, wouldn't it?

Normis has said this is planned for 5.8, I'm planning on holding him to that!

The bugtracker, or dhcpv6?

Posted: **Thu Sep 22, 2011 11:18 am**

dhcpv6-PD and that is being tested

Posted: **Thu Sep 22, 2011 11:23 am**

dhcpv6-PD and that is being tested

I would happily help with the testing!

Posted: **Thu Sep 22, 2011 11:24 am**

maybe later on. ATM we can manage.

Posted: **Thu Sep 22, 2011 10:07 pm**

does anyone noticed strange behavior of ethernet interfaces. 3 links with 5.7 routeros and i noticed after couple of hours, days ether port stops to transmit ip transmission. Seems connected but can only access through wireless link or not sure if mac-telnet would work but for sure IP ping from another one directly connected mikrotik doesn't work. Restarting interfaces and enable/disable IP doesn't solve the problem only reboot - routeros 5.7 and firmware 2.36
I have 8 routerboards with this firmware 435G, 433AH and 450G - and on 433AH and 435 transmission on ethernet stops afetr stometime. part of them with ospf part with bridge and vpls tunnel without ospf - .

Pawel

Posted: **Fri Sep 23, 2011 1:49 am**

Should I apply multi-queue-ethernet-default to each simple queue to to advance and Total if I shaping by ip by general rule?
Or its just enough to apply to interface.

Posted: **Fri Sep 23, 2011 2:37 am**

does anyone noticed strange behavior of ethernet interfaces. 3 links with 5.7 routeros and i noticed after couple of hours, days ether port stops to transmit ip transmission. Seems connected but can only access through wireless link or not sure if mac-telnet would work but for sure IP ping from another one directly connected mikrotik doesn't work. Restarting interfaces and enable/disable IP doesn't solve the problem only reboot - routeros 5.7 and firmware 2.36
I have 8 routerboards with this firmware 435G, 433AH and 450G - and on 433AH and 435 transmission on ethernet stops afetr stometime. part of them with ospf part with bridge and vpls tunnel without ospf - .

Pawel

Well, there is definitely something going on with the Ethernet interfaces. Have you tried this: http://forum.mikrotik.com/viewtopic.php ... 41#p282141
Maybe downgrading of the firmware would help you?

Please try and let us know. If it does help, definitely report it to MT support. I start to think more and more in a direction indeed the firmware is part of the many problems we still see randomly around with Ethernet interfaces.

If several users can confirm downgrading is solving the problem MT can figure out where the difference is in-between the different versions and patch the bug.

Posted: **Fri Sep 23, 2011 9:07 am**

Should I apply multi-queue-ethernet-default to each simple queue to to advance and Total if I shaping by ip by general rule?
Or its just enough to apply to interface.

apply it on interface that has several tx/rx queues displayed in '/system resource irq' other way it will not bring you any improvement.

Posted: **Fri Sep 23, 2011 9:46 am**

upgrade from v5.6 to v5.7. More on SXT devices

leds.png

Posted: **Fri Sep 23, 2011 10:55 am**

upgrade from v5.6 to v5.7. More on SXT devices
leds.png

I can confirm that on my SXTs. What was the default state? I don't have any SXT on my eyes, so I can't experiment, but I'd like to have functional indicator of signal strength.

Posted: **Fri Sep 23, 2011 11:09 am**

[Ticket#2011082066000161] memory is full

problem continues on all SXT with active OSPF

weekly.gif

Posted: **Fri Sep 23, 2011 1:59 pm**

[Ticket#2011082066000161] memory is full

problem continues on all SXT with active OSPF

weekly.gif

yesterday 22 sept I had 5mib free RAM

23 Sept 13h59 I have 4mib free
23 Sept 17h24 I have 3.5mib free RAM

Pattern is as time passes more RAM used, less RAM free.

My router is the RB750.

Posted: **Fri Sep 23, 2011 7:48 pm**

Should I apply multi-queue-ethernet-default to each simple queue to to advance and Total if I shaping by ip by general rule?
Or its just enough to apply to interface.
apply it on interface that has several tx/rx queues displayed in '/system resource irq' other way it will not bring you any improvement.

What does it mean ?
2Core Cpu

Posted: **Sat Sep 24, 2011 12:57 pm**

*) userman - show overall totals, show user totals if user has more
than one entry;

Can anyone explain what exactly is meant by that - I've installed the new version at both my radius server with userman package and my hotspot servers, and still no luck - userman does not keep ant statistics - once a profile expires, userman forgets all about it - keeps log of sessions, but is unable to display start time, end time, till time and so on. Instead it just displays "unknown", which bugs me to no end.

I have to account many profiles each month - how many profiles from a given period are activated, when are they expired, so on. Right now the only way to do it is to click each and every one of them separately, look at sessions log and write it down. And they are THOUSANDS. The only relieve I had was for about a month - some of the accounts displayed properly at "till time" column. Once I upgraded from 5.5 to 5.6 though, they stopped doing it and I went back to counting one by one.

I'm waiting for a fix to accounting for almost an year, and still no luck - is it so hard to fix a few MAJOR userman bugs? The only reason to buy a Level 6 license is to use Usermanager package with no limits - well, I bought several of them, and still don't have anything stable and working for my money.

Posted: **Sat Sep 24, 2011 2:34 pm**

I upgraded a RB1200 today and its affected by constant 100% CPU usage as well.

Anything I can do?

Posted: **Sat Sep 24, 2011 5:02 pm**

I upgraded a RB1200 today and its affected by constant 100% CPU usage as well.

Anything I can do?

Make sure you don't have DHCP enabled on any unused interfaces. I read it should be fixed in 5.8

Posted: **Sat Sep 24, 2011 5:53 pm**

I upgraded a RB1200 today and its affected by constant 100% CPU usage as well.

Anything I can do?
Make sure you don't have DHCP enabled on any unused interfaces. I read it should be fixed in 5.8

I have DHCP enabled on about 20 vlan interfaces, and 1 DHCP disabled on a vlan interface.

Define what you mean by "unused interface" pls

Posted: **Sat Sep 24, 2011 6:06 pm**

I upgraded a RB1200 today and its affected by constant 100% CPU usage as well.

Anything I can do?
Make sure you don't have DHCP enabled on any unused interfaces. I read it should be fixed in 5.8
I have DHCP enabled on about 20 vlan interfaces, and 1 DHCP disabled on a vlan interface.

Define what you mean by "unused interface" pls

According to Normis from Mikrotik:
"remember also that in v5.7 there is a DHCP server bug, where it causes high resource usage if it's on a disabled interface. this is fixed in v5.8"

Posted: **Sat Sep 24, 2011 6:07 pm**

multiquote removed, making this post 75% more easier to read
According to Normis of Mikrotik:
"remember also that in v5.7 there is a DHCP server bug, where it causes high resource usage if it's on a disabled interface. this is fixed in v5.8"

Yup, enabling the disabled DHCP on a fully functioning vlan interface fixed it.

Posted: **Sat Sep 24, 2011 7:35 pm**

Should I apply multi-queue-ethernet-default to each simple queue to to advance and Total if I shaping by ip by general rule?
Or its just enough to apply to interface.
apply it on interface that has several tx/rx queues displayed in '/system resource irq' other way it will not bring you any improvement.
What does it mean ?
2Core Cpu

seems like your both NICs use the same IRQ... bad thing =)

anyway, 'several tx/rx queues' means this:

[admin@MikroTik] > /sys resource irq print without-paging 
 # IRQ USERS                                                        CPU ACTIVE-CPU      COUNT
........
13  60 ether2                                                         1          1          1
14  61 eth1-rx-0                                                      1          1      83125
15  62 eth1-rx-1                                                      1          1      89667
16  63 eth1-rx-2                                                      1          1      26846
17  64 eth1-rx-3                                                      2          2      87094
18  65 eth1-tx-0                                                      1          1       9622
19  66 eth1-tx-1                                                      1          1      30122
20  67 eth1-tx-2                                                      1          1      19775
21  68 eth1-tx-3                                                      2          2      19630
22  69 eth2-rx-0                                                      0          0      81398
23  70 eth2-tx-0                                                      3          3      33602
24  71 ether3                                                         0          0        923
25  72 eth3-rx-0                                                      1          1      63808
26  73 eth3-tx-0                                                      3          3        594
27  74 ether4                                                         1          1        839

[admin@MikroTik] >

Posted: **Sat Sep 24, 2011 10:17 pm**

How to do that right

Posted: **Sun Sep 25, 2011 1:09 pm**

your NIC should support it. Intel 82574L has four queues, 82576 has eight queues...

about using the same IRQ by your both NICs - try to look at your BIOS settings...

Posted: **Mon Sep 26, 2011 1:53 pm**

After some time I can't login using winbox, it says connection refused.
Telnet is ok.
After reboot, everything is ok.

why?

Posted: **Mon Sep 26, 2011 2:17 pm**

and what if in Telnet you type

/ip services
disable winbox
enable winbox

?..

Posted: **Mon Sep 26, 2011 7:55 pm**

[Ticket#2011082066000161] memory is full

problem continues on all SXT with active OSPF

weekly.gif

RB SXT - 5.7. OSPF and no memory problem . Uptime 4days

Posted: **Mon Sep 26, 2011 10:33 pm**

how much you have routers in one area? We have about 100 routers and the more changes in, the SXT is more filled with memory.
I do not know what causes it. I assume that OSPF.

next SXT

weekly.gif

Posted: **Tue Sep 27, 2011 4:34 pm**

and what if in Telnet you type
Code: Select all
/ip services
disable winbox
enable winbox
?..

thanks for the tip.
I'll post the result next time it refuses the connection.

Posted: **Wed Sep 28, 2011 12:05 am**

Ok, today again I got connection refused from winbox, but
when I disabled/enabled it through telnet, it's ok again.

workaround is ok, but still this should be fixed. (or I'm the only one with this error ? )

Posted: **Thu Sep 29, 2011 10:55 am**

As a workaround, you might also consider using a scheduler to toggle the winbox service every hour or so.

Posted: **Thu Sep 29, 2011 1:25 pm**

just after WinBox service crashed, make supout.rif and send to support@mikrotik.com

Posted: **Thu Sep 29, 2011 4:03 pm**

after upgrade from 5.6 to 5.7 in /ip service i see
# NAME PORT ADDRESS CERTIFICATE
0 telnet 23
1 ftp 21
2 www 80
3 I 22
4 X www-ssl 443 none
5 X api 8728
6 winbox 8291
security package wasn`t installed in 5.6

Posted: **Thu Sep 29, 2011 4:41 pm**

Thank you for the release of v.5.7

It sure would be great to get help with wireless timeouts when using nv2. I continue to get them with all the firmware versions I have tried. Connections can go for hours and even days with no errors and then I will get a wireless disconnect due to synchronization timeout. Occasionally I will also get media access errors ass well. Will new versions firrnware work to address these issues?

Posted: **Thu Sep 29, 2011 5:23 pm**

Are there any more info about this problem? After upgrade to 5.7 I am experiencing ether1 problems. The link goes up and down randomly, sometimes it registers at only 10mbps half-duplex, then suddenly goes down. Physically nothing has been changed or touched, so there are very little chance it could be network adapter problem or something of coincidence. And that routerboard is mounted on a mast, that I would have to disassemble to bring it down. I really don't want to do that just for the screwdriver trick.

Today first time ever I have downgraded ROS, but unfortunately in 5.6 the problem remains.

Your issue is not related to bridging, but to ethernet port flapping issue being speculated to be related to firmware issues:
http://forum.mikrotik.com/viewtopic.php?f=2&t=54038

Posted: **Thu Sep 29, 2011 9:55 pm**

Finished testing for 5.7 waiting for 5.8:

Just tested one CPE to AP in lab.

- Connections hang in all modes (801.11/nstreme/nv2) when there is interference.
Connection is up but no traffic. After a while connection drops and comes back up.
Interference is generated by an ap 4m distance with 10db lower power without a cpe
connected. I'm not sure this is a wireless problem as the connection stays up for a while
while pings do not pass.
- ping suddenly did not work from CPE to AP. I have to enter source ip. Looking at
packets CPE has chosen the wrong (ethernet IP) to send packets over wlan1
- dhcp sometimes hog cpu
- Winbox crashes on win7
- CPE crashes and needs a power cycle
CPE is RB711-5Hn-MMCX, AP is RB411AH with R52nM chain1+2 enabled.

I've only done ping and bandwidth test between CPE and AP and change protocols
between 802.11,nstreme and nv2. Testing 20MHz Channel, 5GHz-A/N, no rate settings.
security profile wpa2 PSK. AP bridges between wlan1 and ether1.

After the CPE crash I stopped ...

May be someone at MT should do some testing. I dont think I've done extensive tests
to run into a lot of problems.

Dude something is wrong with ur hardware

Posted: **Fri Sep 30, 2011 3:48 am**

and what if in Telnet you type
Code: Select all
/ip services
disable winbox
enable winbox
?..
thanks for the tip.
I'll post the result next time it refuses the connection.

This happens when your device is with low ram available, < 8MB.

Posted: **Sun Oct 02, 2011 3:40 pm**

This happens when your device is with low ram available, < 8MB.

Nope. Happens more often than that. Router has 2GB RAM installed (x86).

I think this is a well-known bug for more then a year.

I think our Latvian friends are overwhelmed with working on new features, new products, a lot of incompatibility issues and strange bugs, that this one is very low priority.

It has always been my opinion that they should expand staff but paying good professionals will lower the owners riches so...

Posted: **Mon Oct 03, 2011 11:18 am**

It has always been my opinion that they should expand staff but paying good professionals will lower the owners riches so...

I have to agree here, after getting a recent email from Mikrotik informing me that due to other priorities HWMP+ was not being actively maintained, and that they would not be able to investigate a repeatable problem that is a major issue for us (stale FDB entries when clients connect via wlan interfaces then roam)

Posted: **Tue Oct 04, 2011 9:34 am**

My RB450G just upgraded from 5.6 to 5.7 .
It works fine, but the CPU usage get high in "dhcp" package.
Anyone has this?
We also have this problem. I already sent supout file to support but they say the cannot find anything ...
I have that problem also This is on a 450G board:
Code: Select all
          cpu-used: 100
  cpu-used-per-cpu: 100%
       free-memory: 242784

Me too. 100% on dhcp. On 450G

Posted: **Tue Oct 04, 2011 9:45 am**

Actually I have a couple of stable routers with 5.7 (450G and x86 P4 one core/thread). I guess its a hit and miss

This is still not good enough though as I have a ton of other routers with tons of issues.

Posted: **Wed Oct 05, 2011 4:58 pm**

Can't paste into a terminal brought up from webfig. Would be useful, used it all the time in winbox. Using OSX and Safari or Firefox, current versions.

tk

Posted: **Thu Oct 06, 2011 8:54 am**

This happens when your device is with low ram available, < 8MB.
Nope. Happens more often than that. Router has 2GB RAM installed (x86).

I think this is a well-known bug for more then a year.
...

Please note that this happens not only when UPnP makes a NAT rule for the WinBox port, getting in the way of us connecting, but in cases when UPnP is not turned on as well.

Posted: **Fri Oct 07, 2011 4:50 am**

I've tested 5.7 on rb750, the problem I found was too heavy cpu performance up to 100%, when I look at the /tool profile turned out to flash takes a lot of resources. And I return to 5.5 everything is running normally again.

Posted: **Fri Oct 07, 2011 6:18 am**

Could it be you stumbled on a scheduled flash check or something else that is scheduled to run as a maintenance task?

MikroTik staff please clarify if such tasks are likely to cause 100% CPU.

Posted: **Sat Oct 08, 2011 2:02 am**

On the cpu at 100%, in my case I use Zenoss to monitor the network. Zenoss re-models each device every 12 hours which uses snmp. At those intervals, I see 100% cpu warnings coming from the 5.7 ROS devices. I didn't see that in 4.17.

Posted: **Sun Oct 09, 2011 5:57 pm**

When will be 5.8 I have ton of problems with RB1200

Posted: **Sun Oct 09, 2011 6:23 pm**

Thank you for recent release and addressing a lot of issues we had with 5.6.

A few months ago I asked if it would be possible to add back the ability to sort by port in the Torch. Back then I thought I was all by myself but now if I search on port sort, I see a lot more people complaining about the loss of this function.

A lot of "strange" activity can't always be detected by a smart script or a config, which is why we also scan our network routers manually, especially when the maps report packet loss or unusual traffic.

THe ability to sort by port (both for src and dst) allows us to reveal viruses, aggressive and encrypted P2P, a stuck process that tries to go to Adobe, etc. etc.

Would it be possible to add this function back to the Winbox GUI?
What was the reasoning in taking it out?

Posted: **Mon Oct 10, 2011 4:02 am**

When will be 5.8 I have ton of problems with RB1200

What kind of problems?

Posted: **Tue Oct 11, 2011 3:09 pm**

I have problems with the dns server. This is the second time this week that my Mikrotik RouterOS 5.7 Core DNS stopped responding.

I try ping google from console and I get IP DNS error or something like that. I reboot the rb1200 and works fine for a few more days.

This never happened to me with OS 5.6. I'm using google's dns (8.8.8.8 & 8.8.4.4).

Does anyone have any idea of what could be the problem?

Thank you.

Posted: **Tue Oct 11, 2011 3:18 pm**

Google's DNS server itself had problems ?

When it happened to me I just put in another DNS server.

Posted: **Tue Oct 11, 2011 4:06 pm**

I'm testing with my ISP DNS now, but if the DNS server is the problem shouldn't be solved by rebooting the rb1200.

Posted: **Wed Oct 12, 2011 1:04 am**

I'm testing with my ISP DNS now, but if the DNS server is the problem shouldn't be solved by rebooting the rb1200.

OH yes it can.
Your server stores dns resolves in a cache. If this was a piece of date coming from the google dns server you cache has the faulty data. When you reboot your router the cache gets flushed and new data needs to be used. If now this new data is ok the router works fine, for as long as it takes to get the wrong data from google again....

Posted: **Wed Oct 12, 2011 2:58 am**

When I had the problem I tried flushing the dns cache in the rb1200. It gets empty and it doesn't take any more request so I continue without browsing...

Posted: **Wed Oct 12, 2011 10:00 am**

From my experience there is a problem with ROS' built-in DNS resolver when cache size is set to value bigger than 8192 kB.
With different versions of ROS there was same problem, no response from DNS cache.
Also max. UDP packet size should be increased to value bigger than default 512 bytes (4096-8192).

HTH,

Posted: **Wed Oct 12, 2011 11:07 am**

Why would the DNS packet be so big?

Posted: **Wed Oct 12, 2011 1:49 pm**

ROS v5.7 doesn't print and export IPv6 addresses of BGP peers:

/routing bgp peer print
Flags: X - disabled, E - established 
 #   INSTANCE        REMOTE-ADDRESS                                 REMOTE-AS  
 0   default         (unknown)                                      12345

There is the same problem with export. IPv6 adresess are always assigned as (unknown). WinBox shows IPv6 addresses correctly without any problems.

Posted: **Wed Oct 12, 2011 3:40 pm**

Why would the DNS packet be so big?

Because to allow support for DNSSEC packet size allowed should be a minimum of 4096

The second issue is related to the packet size. The authors of the DNSSEC standard realized that there might be a potential problem with TCP queries. TCP puts a higher burden on the DNS servers. (TCP is much more expensive to process than UDP.) To avoid too much TCP traffic, the authors made the EDNS0 extension mandatory for DNSSEC. EDNS0 is a standard that among other things allows a client to signal that it is capable of receiving DNS replies over UDP that are larger than the previous limit of 512 bytes. Some firewalls are not aware of the fact that the EDNS0 standard allows for larger packets and they block any DNS packet larger than the previous limit. Other firewalls allow for the large packets by default, whereas a few vendors require the firewall to be manually configured to do so. Any device in the path that does packet inspection in the application layer must be aware of the EDNS0 standard to be able to make a correct decision whether to forward the packet or not.

Source: http://www.circleid.com/posts/operation ... ng_dnssec/

Posted: **Wed Oct 12, 2011 7:19 pm**

I have problems with the dns server. This is the second time this week that my Mikrotik RouterOS 5.7 Core DNS stopped responding.

I try ping google from console and I get IP DNS error or something like that. I reboot the rb1200 and works fine for a few more days.

This happens on 4.x versions for OpenDNS servers 208.67.220.220 and 208.67.222.222 and for Google DNS servers too.
The particular routerboard for DNS resolving runs HotSpot and is a gateway for the network, ROS 4.17.
One thing I noticed is that you CAN ping the IP address, for ex.208.67.220.220 from the DNS resolver routerboard, but you CAN'T ping the same IP address from the inside of the network, for ex. from client who is authenticated on the HotSpot and Skype running, you get an answer from the DNS resolver routerboard: "destination host unreachable".

I've noticed this problem with earlier versions starting from 4.5 (don't sure for earlier versions) and only a reboot fixes it. Hope this will shred more light on this problem.

Posted: **Wed Oct 12, 2011 8:37 pm**

So I should make a script that checks ping to google.com and reboot the router automatically or is there another way?

What is Mikrotik's opinion in this matter?

Posted: **Wed Oct 12, 2011 8:57 pm**

The legend is: while reading ip address: could not get answer from dns server

I'm putting the dns cache back to 1024k, I had it at 10240k for more caching.

I'll let you guys know if it happends again.

Posted: **Thu Oct 13, 2011 9:38 am**

if you where running 5.7 maybe you could send supout.rif, in case we could find out more about the problem you encountered.

Posted: **Sun Oct 16, 2011 7:11 pm**

ROS 5.7, firmware v. 2.36. I Have the problem - RB435G at random times(it may be one hour or one day) freezes ethernet interfaces to pass ip traffic, interface at that time says that "link ok"(i use 1G connection with different devices at different places, ~8 BOARDS with PC and board-to-board connections, most time of all its freezes at 2 RB435g's with bridge functions- wireless interface bridged with ethernet, not matter with which - ether1 or ether2 or ether3), wireless interface at the same time work properly and i can access the board via wireless, after rebooting board its' all right for a random time. A guess i have similar problem with the same topics - http://bugs.mikrotik-routeros.com/view.php?id=15, http://forum.mikrotik.com/viewtopic.php ... 1&start=50, http://forum.mikrotik.com/viewtopic.php ... 5G#p282149, http://forum.mikrotik.com/viewtopic.php?f=3&t=55610 etc.

Only one solution is to turn off or on /interface Ethernet switch set 0 switch_all_ports=yes or no, after that routerboard starts to transmit data. But i don't use hardware switch for boards, no master or slave interfaces, only program switch for bridging Ethernet iface with wireless, Don't know exact what the problem is, power supply is good, cables is good(at first time we think that the cables cat5e was caused the problem for 1G connection, and than replaced them to cat7 cables - have the same issue).
A hope for some assistance, it's not suitable to downgrade software or firmware on boards to avoid similar problems with configuration - a can't to stop transmission through that link cause they are situated on commercial towers and it's not real to get the boards directly.
Anyone suggest?
My opinion - it's a firmware trouble of RB435G at a side of Ethernet sensitivity, may be i'm wrong.
I hope the MTIK team to help.
Thanks

Posted: **Sun Oct 16, 2011 7:17 pm**

MikroTik gigabit ports have trouble from time to time.

RB450G different 5x versions different boards
RB250GS firmware 1.6

Auto-negotiation issues? Some sort of additional instability?

Posted: **Mon Oct 17, 2011 7:58 am**

Hi,

i have some troubles with this version:
on RB450G: high CPU usage (DHCP package) - i`m using vlans, so DHCP server is connected to vlan, not ethernet directly.
on all boards (and all 5x versions, i think):
- DNS package - when i remove static record, this one persist in memory until router is rebooted.
- Graphs: are completly deleted, when RB is rebooted.
so, i`m waiting for next version of RouterOS.

Posted: **Mon Oct 17, 2011 9:59 am**

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

My home RB450G was running 5.7 since it was released and just today it made me a problem (apart from DNS issues I thought were due to 8.8.8.8 being down)

The problem was that in Profile tool I could see sniffing making close to 100% CPU so I took a supout for support, rebooted, put in the latest unreleased 5.8 in the share subfolder and rebooted again.

Now testing with share 5.8 from the 12th.

Cheers.

Posted: **Mon Oct 17, 2011 10:06 am**

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

Esp. saving to a file and then load the dump in wireshark is a great feature which helped a lot already.

Posted: **Mon Oct 17, 2011 5:03 pm**

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.

huh, I love the Forum - you can learn many new things from users when you must learn it from developers =) Normis, please add it to the changelog?

Posted: **Tue Oct 18, 2011 8:37 am**

I love how MikroTik are improving on features like the Sniffer. The new filters are awesome.
huh, I love the Forum - you can learn many new things from users when you must learn it from developers =) Normis, please add it to the changelog?

do you see something that is not in the manual?

Posted: **Tue Oct 18, 2011 11:35 am**

do you see something that is not in the manual?

argh, sorrrrry, overworking is killing my attention %(

Posted: **Tue Oct 18, 2011 12:40 pm**

I am subscribed to WiKi pages but never receive e-mail notifications that hey were edited

Posted: **Tue Oct 18, 2011 1:22 pm**

Hi ...

I was running 5.7 on a RB433 + R52nM(PMP) + XR9(PTP) where the ETH is tied to an EOC1650 working as AP for 5 customers (sort of direct access with their laptops, tablets, etc). All natted, PMP & ETH have different IP ranges.

DHCP on ETH stop leasing from time to time (time seems equal to dhcp lease time, 24h in this case).

Was enough to wake it up back reboot the 1650 or disable / enable 433 eth (e.g. any change on ETH status).

Downgraded to 5.6 => no more problems.

Regards;

Posted: **Wed Oct 19, 2011 12:21 am**

I'm still having DNS problems. The service DNS seems to stop working. In tools > profile, seems right but the DNS cache list gets empty and stop caching and resolving host.

The only way to fix it is rebooting the RB1200.

Posted: **Wed Oct 19, 2011 3:42 am**

tamahome, did you try the latest 5.8 pre-release version ?

Posted: **Wed Oct 19, 2011 4:46 am**

sorry if this has already been discussed, but does anyone know why wireless signal drops almost 10db when upgrading from 4.2? I have a PtP link I upgraded today, was at -61db, using 2x2 Mimo with SR71-15 cards. Signals on BOTH chains -60/-61, after the upgrade all the way to 5.7, AND bios update, the signals are now -74/-76 , I've checked and all the wireless settings are the same, nothing changed other than firmware update. what's the deal??????????? I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?

Posted: **Wed Oct 19, 2011 10:28 am**

tamahome, did you try the latest 5.8 pre-release version ?

Where is possible to download these pre-release versions?

Posted: **Wed Oct 19, 2011 10:30 am**

And what if you raise the tx power, does go back to normal?

pre-release version - tell MT support via e-mail what your issue is and they should give you the link

Posted: **Wed Oct 19, 2011 11:28 am**

I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?

NV2 is TDMA not OFDM and is good for PtMP links where you have a lot of noise, but for PtP links without a lot of noise just use nstreme. It has more throughput and less latency.

Posted: **Wed Oct 19, 2011 4:10 pm**

I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?
NV2 is TDMA not OFDM and is good for PtMP links where you have a lot of noise, but for PtP links without a lot of noise just use nstreme. It has more throughput and less latency.

Please check TDMA and OFDM with wikipedia.
NV2 is TDMA on top of OFDM and nv2 does not perform
better with noise. It performs better than nstreme where
there is no noice as it needs no polling. Instead it uses a
Map like wimax where the AP tells all CPEs at once when
to send. With noise I see 802.11 perform better then nstreme
and better then nv2.

Posted: **Wed Oct 19, 2011 4:29 pm**

I've had this happen on 4 different PtP links now. I'm only upgrading cause I want NV2, but why such the sacrifice in signal?
NV2 is TDMA not OFDM and is good for PtMP links where you have a lot of noise, but for PtP links without a lot of noise just use nstreme. It has more throughput and less latency.

Wrong. NV2 has WAY more throughput than Nstreme, on 3 links already, that were short distance, 2X2, I was only able to get a steady 216x240Mbps. Turning on NV2 now its a rock-solid 300x300Mbps, and I can push almost twice the throughput on bandwidth tests, up to 210Mbps. Your right about latency though...

Posted: **Wed Oct 19, 2011 6:00 pm**

OK, this is my field experience. I use RB711 so single chain only, on a tower with a lot of Radio and TV stations, some of them with Mega Watts of power so I guess its a pretty "noisy" place . The PtP link is with Signal levels around -60dB, Noise level -110 dB ??? as reported from RB711, 13km perfect LOS, ROS 4.17 to 5.5 all the same. Tested on various frequencies range from 5000 to 6000 MHz.
-with Nstreme: Initially link is OK, data rates 150/150Mbps, CCQ 90-100%, Bandwidth test shows around 100Mbits UDP. The problem comes when real traffic is passed, around 20-30Mbits of traffic, CCQ starts to drop below 50%, data rates also drop below 54Mbps, ping goes high and that's about it. No more than 30Mbits throughput.
-with NV2: Initially the same conditions as with Nstreme, data rates 135/135 Mbps. When real traffic is passed, CCQ also drops but stays around 60-70%, data rates 81/108 Mbps and around 60Mbits total throughput.

So NV2 performs better then Nstreme in this kind of "noisy" situation. The question is WHY?

When I applied diplexers on both sides, with 100MHz channel, so say only 5700-5800 MHz range is passed, everything else is heavily attenuated, the same link is now working with Nstreme with 90% CCQ, data rates 121/135Mbits, 80Mbps throughput. I haven't change anything, all the same, Routerboards, pigtails, antennas, cables only difference are applied filters.

I don't know, maybe I'm missing something here but that's the results from real traffic not UDP Bandwidth test.

Posted: **Wed Oct 19, 2011 6:14 pm**

One thing I have noticed, NV2 usually performs better on dual-chains, it seems running 2 chains creates some sort of self-interference with Nstreme, and sometimes I get worse data rates with 2 chains then single. However, activating NV2 makes 2 chains work together much better. My experience, single chain = Nstreme, Dual Chain = NV2.

Posted: **Thu Oct 20, 2011 1:46 pm**

I have not tried 5.8pre, I'm still waiting for the final version to see if it is a bug.

Posted: **Sat Oct 22, 2011 11:54 am**

I can confirm: as soon as you disable the interface used by dhcp-client, 'dhcp' process eats the whole CPU core until reboot

upd: after disabling dhcp-client, CPU goes down, just not momentarily

good morning everyone,

I own a 1100 with RB ros 5.7
The CPU is constantly at 100%, the profile indicates that the DHCP module is consuming 85%.

On the DHCP Client, it is installed but there is no interface added to it.

[xxxxx @ xxxxxx> ip dhcp-client print
Flags: X - disabled, I - invalid
# INTERFACE ADDRESS USE ADD STATUS
[xxxxx @ xxxxxx]>

DHCP logs are common.

Posted: **Sat Oct 22, 2011 12:01 pm**

multiquote removed, making this post 75% more easier to read
According to Normis of Mikrotik:
"remember also that in v5.7 there is a DHCP server bug, where it causes high resource usage if it's on a disabled interface. this is fixed in v5.8"
Yup, enabling the disabled DHCP on a fully functioning vlan interface fixed it.

In my case, I have a RB in 1100 with 2 vlans DHCP and both are active.
Still, my CPU is constantly at 100% and in profile, the DHCP module is usndo 85% to 90% of the processing.

Posted: **Sat Oct 22, 2011 12:08 pm**

Well test the 5.8 pre-release already?

DO NOT USE these unless you are prepared somehow to fix your network quickly as these may even brick your device - neither I nor anyone takes responsibility of what happens if you use these test versions

I have put them on many routers except powerpc and so far all 5.8 test versions worked without major issues but I still can not guarantee that your network will be just fine.

These files change from time to time - I download regularly and compare CRC32. When uploaded to a router you also see the date the package was put together.

http://www.mikrotik.com/download/share/ ... 86-5.8.npk
http://www.mikrotik.com/download/share/ ... pc-5.8.npk
http://www.mikrotik.com/download/share/ ... be-5.8.npk
http://www.mikrotik.com/download/share/ ... le-5.8.npk

If you use User-Manager package DO NOT UPGRADE as you will need that package as well - ask support for 5.8 version of it for the platform(s) you use

If you notice any issues - get supout.rif from router and maybe a screenshot and send to support.

Posted: **Sat Oct 22, 2011 3:05 pm**

Will there be implemented in the new version of the chipset support Intel H61?

MikroTik

RouterOS v5.7 released

RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released

Re: RouterOS v5.7 released