MikroTik

*) pptp, l2tp, sstp - allow to specify server via dns name;

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region - lets say goodbye to some significant scripting

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region - lets say goodbye to some significant scripting

do I simply need to put a host name in the 'Connect to:' field or how can we use it?

*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space

*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space

It sounds like it is not solving the main problem - disk space constantly filling sometimes (see Ticket#2013090266001555 and graph in screenshot here - from ROS 6.2), but just avoiding the symptom. Yes, it is better to stop User Manager than complete crash of router (netinstall was needed, see Ticket#2013053066000493), but please, fix User Manager completely.

http://packetstormsecurity.com/files/12 ... ption.html

Is it fixed in 6.3? This is critical problem. SSH login can be bypassed remotely.

*) user manager - will warn on 1MB and stop before reaching minimum of 500KB disk space

It sounds like it is not solving the main problem ...

That image was taken before we released v6.3, it shows September 2. Did you upgrade to the version we released on the web Today ?

I can't test it in short term, because the problem was appearing very occasionally - once per (few?) month(s) - and it is unpredictable. Well, I will hope it is fixed now!

How many users do you have? Check "/tool user-manager database print", which database is the one taking up space?

> /tool user-manager database print
        size: 704 kB
      in-use: 44 %
    log-size: 141 kB
  log-in-use: 100 %
   last-save: sep/01/2013 00:00:20

After update to 6.3 does not work manual setting of speed interface ethernet

Broken multiple Paste comands in v6.3 CCR (in v6.2 all works fine)

I copy commands below(for example)

Code: Select all

/interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000 
/ip address add address=10.250.255.1/24 interface=TEST
/ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254
/ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST

Paste in terminal and get the error.

Code: Select all

[admin@Mikrotik] > /interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000 
[admin@Mikrotik] > /ip address add address=10.250.255.1/24 interface=TEST
[admin@Mikrotik] > /ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254
[admin@Mikrotik] > /ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST
input does not match any value of interface

Enter one-by-one and all ok:

Code: Select all

[admin@Mikrotik] > 
[admin@Mikrotik] > /interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000                                           
[admin@Mikrotik] > 
[admin@Mikrotik] > /ip address add address=10.250.255.1/24 interface=TEST                                                               
[admin@Mikrotik] > 
[admin@Mikrotik] > /ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254                                                       
[admin@Mikrotik] > 
[admin@Mikrotik] > /ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST       
[admin@Mikrotik] > 

Why?

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region - lets say goodbye to some significant scripting

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region - lets say goodbye to some significant scripting

And OpenVpn?????

Still a problem:
/ip firewall nat> pr
0 chain=srcnat action=masquerade to-addresses=0.0.0.0 out-interface=PUBLIC

It cause problems in some cases (and flood network with bogon IPs), we have to fix like below but with many CPEs in the field, all different IPs...
/ip firewall nat> pr
0 chain=srcnat action=src-nat to-addresses=10.1.2.3 out-interface=PUBLIC

After update to 6.3 does not work manual setting of speed interface ethernet

Works for me on RB433, why you dont write on which RB or x86 platform...? More info plz

It seem missed nic drivers in v6.3 for x86. After upgrade any nic not work and I must to downgrade MT to v6.2 . Is it possible?

MD5 hash for all_packages-mipsbe-6.3.zip indicated on the download site differs from hash of the actual file.

On site:

all_packages-mipsbe-6.3.zip 54dcacfa0f027be8f21071ab21a46793

Actual archive file:

b673849ec8b4ed16c038cda275e68f4d *all_packages-mipsbe-6.3.zip

The archive file itself looks fine, extraction does not trigger any errors.

In draws only 50 bars and then stops updating the histogram.

graphing reset for interface data transfer speeds will be fixed in next release.

Verbose export still a problem.
/ip firewall mangle> export verbose

#
/ip firewall mangle
add action=set-priority chain=forward !connection-bytes !connection-limit \
!connection-mark !connection-rate !connection-state !connection-type \
!content disabled=no !dscp !dst-address !dst-address-list !dst-address-type \
!dst-limit !dst-port !fragment !hotspot !icmp-options !in-bridge-port \
!in-interface !ingress-priority !ipv4-options !layer7-protocol !limit \
new-priority=from-dscp-high-3-bits !nth !out-bridge-port out-interface=\
all-wireless !p2p !packet-mark !packet-size passthrough=yes \
!per-connection-classifier !port !priority !protocol !psd !random \
!routing-mark !routing-table !src-address !src-address-list \
!src-address-type !src-mac-address !src-port !tcp-flags !tcp-mss !time !ttl

graphing reset for interface data transfer speeds will be fixed in next release.

If there are "known issues", please state them in your change_log or at least make a known issues thread !

l2tp - hard to configure by user.

sstp - supported only in windows.

4) Easy to configure. Not IPSec/L2TP, because installing strong/openswan and writing all configs... doh.

If you so strong against OpenVPN, please provide me with protocol that will be:

Yes, but IPSEC was not working well in 6.1 and 6.2. Were all issues with it fixed in 6.3?
Is it working?

Thanks,

T.P.

Yes, but IPSEC was not working well in 6.1 and 6.2. Were all issues with it fixed in 6.3?
Is it working?

The problem with both WinBox and WebFig misreporting the IPsec SA expiration time is not fixed yet in 6.3. The reported value is a) incorrect and b) counts up (but should count down). Everything is fine on console, the "/ip ipsec installed-sa print" command reports correct value.

Original report is here: http://forum.mikrotik.com/viewtopic.php ... 50#p381561

*) pptp, l2tp, sstp - allow to specify server via dns name;
Please add OpenVPN to that list. Seriously, that's just unfair for users.
pptp - insecure.
sstp - supported only in windows.
l2tp - requires ipsec+l2tp combo, hard to configure by user.

*) pptp, l2tp, sstp - allow to specify server via dns name;
Please add OpenVPN to that list. Seriously, that's just unfair for users.
pptp - insecure.
sstp - supported only in windows.
l2tp - requires ipsec+l2tp combo, hard to configure by user.

+1

> Ubuntu/Mint
NM in ubuntu lacks L2TP/IPsec support.

manager: command /tool user-manager user create-and-activate-profile not work with argument "user",and work only with argument "numbers". For example in script:

Code: Select all

 
   $addRequest = new Request('/tool user-manager user create-and-activate-profile');
    $addRequest->setArgument('customer','gsm');
//-->    $addRequest->setArgument('user',$from);
    $addRequest->setArgument('numbers',$userId);
    $addRequest->setArgument('profile',$profile);
    $client->sendSync($addRequest);

l2tp - hard to configure by user.

You mean OpenVPN is easier to configure by user? Personally, I strongly disagree.

*) ppp, hotspot - added ability to specify where to insert rate limiting queue,
it's parent and type;

IPsec is working in v6.1 and v6.2, what did you mean by this?

After upgrading from 6.0 to 6.2 all my INPUT firewall rules disappeared. Is this fixed in 6.3?

Mikrotik: Is there a layout of what services/features use what cpus?

Mikrotik: Is there a layout of what services/features use what cpus?

Tools / Profile

IPsec is working in v6.1 and v6.2, what did you mean by this?

In v6.1 the following IPSEC problem existed:
Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 stopped working.
L2TP was passing OK but when reached IPSEC portion it compains in logs about payload and triming.

Was this fixed?

Thanks,
the_prism

IPsec is working in v6.1 and v6.2, what did you mean by this?

In v6.1 the following IPSEC problem existed:
Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 stopped working.
L2TP was passing OK but when reached IPSEC portion it compains in logs about payload and triming.

Was this fixed?

Thanks,
the_prism

Normis, can you confirm that this was fixed and Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 works fine?

Thanks,

T.P.

I found a problem with the new traceroute tool. My backbone provider uses an MPLS network with private addresses and this means I can't 'see' the network from another router other than the border router. The new 'mtr' behaviour is stopping the tracing after 3 lost hops.

Thanks in advance!

Carlos Strauch

Normis, can you confirm that this was fixed and Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 works fine?

Thanks,

T.P.

Please tell me your Mikrotik Support ticket number, and I will check status.

Normis, can you confirm that this was fixed and Windows 7 <- L2TP/IPSEC -> Mikrotik 6.1 works fine?

Thanks,

T.P.

Please tell me your Mikrotik Support ticket number, and I will check status.

I don't have any ticket number.
I mentioned about this here http://forum.mikrotik.com/viewtopic.php ... 50#p373740 and here http://forum.mikrotik.com/viewtopic.php ... 50#p373772

Broken multiple Paste comands in v6.3 CCR (in v6.2 all works fine)
...
Paste in terminal and get the error.

Code: Select all

[admin@Mikrotik] > /interface vlan add arp=reply-only interface=ether3 name=TEST vlan-id=3000 
[admin@Mikrotik] > /ip address add address=10.250.255.1/24 interface=TEST
[admin@Mikrotik] > /ip pool add name=pool_TEST ranges=10.250.255.2-10.250.255.254
[admin@Mikrotik] > /ip dhcp-server add add-arp=yes address-pool=pool_TEST disabled=no interface=TEST lease-time=1h name=DHCP_TEST
input does not match any value of interface

...

Hi.
I upgrade 951G-2HnD to 6.3.
Function "Reset Configuration" is broken.
Default configuration not apply after reboot.

In 6.2 it work.

      /interface {
              set ether6 name=ether6-master-local;
              set ether7 name=ether7-slave-local;
              set ether8 name=ether8-slave-local;
              set ether9 name=ether9-slave-local;
              set ether10 name=ether10-slave-local;
      }
      /interface ethernet {
              set ether7-slave-local master-port=ether6-master-local;
              set ether8-slave-local master-port=ether6-master-local;
              set ether9-slave-local master-port=ether6-master-local;
              set ether10-slave-local master-port=ether6-master-local;
      }
input does not match any value of master-port

Finally upgraded my core CCR from RC13 to 6.3. Runs much smoother. Cpu seems to be better too.

I don't run BGP or IPSec, but use most other features.

Mikrotik: Is there a layout of what services/features use what cpus?

I don't have any ticket number.
I mentioned about this here http://forum.mikrotik.com/viewtopic.php ... 50#p373740 and here http://forum.mikrotik.com/viewtopic.php ... 50#p373772

This is a community forum. Community members can't and don't fix bugs. If you wish a problem to be addressed, you Must contact support. Posting here doesn't guarantee that a member of MikroTik support will read the post.

None of my scripts work anymore, it's almost as if MikroTik invented asynchronous command execution where the second command is executed before the result from the first one is commited.

None of my scripts work anymore, it's almost as if MikroTik invented asynchronous command execution where the second command is executed before the result from the first one is commited.

I've noticed something similar in API. (not sure if issue was on 5.25 as I never used so many commands on ROS5)
If I send to many API commands directly after the other, over same API connection, some commands are just dropped. E.g. making groups of 8 simple queues, with a parent, if I pump them to fast, then sometimes up to 3 of some of the group's 8 would be 'lost'/not there. If I put in a 40ms delay between commands, it runs reliably, but painfully slow for a few thousand entries.

Regards
Ekkas

Then again, this may make the app slower due to the multiple remote calls... so I guess if you simply "fragment" your receives - make it send,send,send,receive, then again send,send,send,receive, etc. you might get best results.

*) pptp, l2tp, sstp - allow to specify server via dns name;

This is very very important small feature for my region - lets say goodbye to some significant scripting