MikroTik

What's new in 6.11 (2014-Mar-20 09:16):

*) ipsec - fix aes-cbc hardware acceleration on CCR with key sizes 192 and 256;
*) wireless - add auto frequency feature;
*) ovpn - fixed TLS renegotiation;
*) ovpn - make bridge mode work with big packets (do not leave extraneous padding);
*) ovpn - fixed require-client-certifcate;
*) ppp - revert RADIUS NAS-Port behaviour, report tunnel interface id;
*) ppp - mppe encryption together with mrru locked the router;
*) dhcp - added support for DHCP option 138 - list of CAPWAP IPv4 servers;
*) quickset - added Guest Network setup to Home AP mode;
*) console - no longer required to supply value of '/routing bgp instance vrf'
property 'instance' for 'add' command;
*) ethernet - added option to enable rx/tx flow control
(will be disabled by default);
*) ethernet - added ability to specify advertised modes for copper ports;
*) fixed 100% cpu usage on CCRs;
*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail;
*) lte - support for Huawei ME609 and ME909u-521;

What about following regarding SMB issues....???

Mail a little while ago :

[Mikrotik Support]
Hello,

Thank you very much for the report.
Problem will be fixed in the next RouterOS version.

Regards,
Sergejs

02/28/2014 16:22

This is a beta package, so use only in controlled test networks. The package will replace your default Wireless package upon installation, which means it will also add wireless functionality changes and improvements, not only CAPsMAN.

What about PPP links and MRRU value? V 6.8 and later were affected, router still reboots.

In changelog there is info that the problem should be resolved, but has someone tested it?

RB 1100AHx2

wireless - add auto frequency feature; -

Please send me more information about this feature

Regards.

This is a beta package, so use only in controlled test networks. The package will replace your default Wireless package upon installation, which means it will also add wireless functionality changes and improvements, not only CAPsMAN.

What are the improvements?
Improved also NV2 protocol?

What syntax 1S/2S stand for?

It will do scan, and choose the least occupied frequency automatically. This happens only once, when you apply this setting, reboot, or disable/enable interface. Similar to DFS, but with no radar-detect.

It will do scan, and choose the least occupied frequency automatically. This happens only once, when you apply this setting, reboot, or disable/enable interface. Similar to DFS, but with no radar-detect.

So what is the difference between this and 'dfs-mode=no-radar-detect' ?

-- Nathan

Still no COA in PPP...
Even new ppp package.

hi!

the new CAPMAN feature is nice! everything is working so far.
are there any plans for supporting hotspot-ssid's, without authentification over it ?

the problem is, that the capman wireless ssid's always needs a password when connecting...

or are there other ways to combine mikrotik hotspot-system with the capman functionallity ?

BR

This is a beta package, so use only in controlled test networks. The package will replace your default Wireless package upon installation, which means it will also add wireless functionality changes and improvements, not only CAPsMAN.

What are the improvements?
Improved also NV2 protocol?

Unfortunately I still see high latency when the line is not in use.
And the other problem, that persists, is that a cell with a client who have 25Mbps of bandwidth and another that makes 7Mbps, if launched simultaneously both go to 7Mbps.
The cpe with problems degrade much all other customers

hi!

the new CAPMAN feature is nice! everything is working so far.
are there any plans for supporting hotspot-ssid's, without authentification over it ?

the problem is, that the capman wireless ssid's always needs a password when connecting...

or are there other ways to combine mikrotik hotspot-system with the capman functionallity ?

BR

Hi
Add a slave config then you are going to get a a VAP in the aps. add it to a bridge inside the Capsmanager router with the hotspot on it then you don't need a encrypted network for it.

What about following regarding SMB issues....???

Mail a little while ago :

[Mikrotik Support]
Hello,

Thank you very much for the report.
Problem will be fixed in the next RouterOS version.

Regards,
Sergejs

02/28/2014 16:22

have you checked it?

Log shows events with GMT time, not according to timezone.
Tested on RB433AH and RB951-2n with latest RouterOS and RouterBOOT.

Regards,

Have anyone tried DHCP server on VLAN yet ? Any comments ?

Normis. I have problem after upgrade SXT Lite5 to 6.11.
Previous version was pre-release 6.11 from 13.Mar with wireless-fp package active. After upgrade to final 6.11 (combined package) is SXT in booting loop.
Mac telnet not work. Ping dont work.
Reset works but nothing changed after reset - still booting loop.
Netinstall dont work - write sending offer --> instaling. But no process. No install
How to bring SXT to life? Thanks

Can anyone else please confirm SSTP working or still broken???

/ppp profile
add change-tcp-mss=no incoming-filter=rw-in/fwd name=sstp-rw only-one=yes use-compression=no use-encryption=no use-mpls=no use-vj-compression=no
/interface sstp-server server
set authentication=chap,mschap2 certificate=MDPSKRBx  default-profile=sstp-rw enabled=yes force-aes=yes keepalive-timeout=30

Some problem but no rule some RB working some not, 433AH working, 433GL no, one Groove is ok other not.

Solution:
Winbox
1. Open clock
2. Select time zone manual click apply
3. Select back your time zone click apply
4. Click OK (must click ok )

Log time is now ok.

Log shows events with GMT time, not according to timezone.
Tested on RB433AH and RB951-2n with latest RouterOS and RouterBOOT.

Regards,

/tool user-manager profile limitation add name=test2

owner=notadmin

[admin@MikroTik] > /tool user-manager profile limitation
[admin@MikroTik] /tool user-manager profile limitation> print
# NAME OWNER
[admin@MikroTik] /tool user-manager profile limitation> add name=test
[admin@MikroTik] /tool user-manager profile limitation> print
# NAME OWNER
0 test admin
[admin@MikroTik] /tool user-manager profile limitation> /tool user-manager customer
[admin@MikroTik] /tool user-manager customer> print
Flags: X - disabled
0 login="admin" password="" backup-allowed=yes time-zone=-00:00 permissions=owner signup-allowed=no paypal-allowed=no paypal-secure-response=no paypal-accept-pending=no
[admin@MikroTik] /tool user-manager customer> set 0 login=notadmin
[admin@MikroTik] /tool user-manager customer> print
Flags: X - disabled
0 login="notadmin" password="" backup-allowed=yes time-zone=-00:00 permissions=owner signup-allowed=no paypal-allowed=no paypal-secure-response=no paypal-accept-pending=no
[admin@MikroTik] /tool user-manager customer> /tool user-manager profile limitation
[admin@MikroTik] /tool user-manager profile limitation> print
# NAME OWNER
0 test notadmin
[admin@MikroTik] /tool user-manager profile limitation> add name=test2
failure: customer does not exist
[admin@MikroTik] /tool user-manager profile limitation>
[admin@MikroTik] /tool user-manager profile limitation>add name=test2 (!!!TAB key pressed!!!)
address-list comment copy-from download-limit group-name ip-pool rate-limit-... transfer-limit upload-limit uptime-limit
[admin@MikroTik] /tool user-manager profile limitation> add name=test2 owner=notadmin
expected end of command (line 1 column 16)
[admin@MikroTik] /tool user-manager profile limitation>

Actually are another bug, also present on 6.8, 6.9 and 6.10
and go worst on 6.11:

Winbox connection from pc directly connected on the gateway/pppoe server [really not matter where pc are connected]
to one CPE on IP obtained from pppoe with MRRU set,
is continually broken after receiving some data from CPE.

The problem regard exclusively Winbox service on RouterOS, bandwidth and other parameters working perfectly with very low latency.

On 6.7 is perfectly stable.

The problem is not present if one ip for wlan1 are used.

wireless - add auto frequency feature; -

It will do scan, and choose the least occupied frequency automatically. This happens only once, when you apply this setting, reboot, or disable/enable interface. Similar to DFS, but with no radar-detect.

NTP don't work on RouterOs 6.11.
Several ntp servers tried to no avail.
After a few hours, after reboot
see attachement

Where is the setting for the auto frequency selection? can't seem to find it anywhere

NTP Client works for me on x86 (synchronizes in a few seconds), but it just says 'stopped' in WinBox (although enabled) and 'status: reached' in Terminal

Where is the setting for the auto frequency selection? can't seem to find it anywhere

Changed the design of the panels in Winbox, and not for the better. Became scary and very uncomfortable. Return back, please, as it was in versions for 6.10 inclusive.

Does CAPsMAN only load on hardware that has a wireless card? I am able to see it on my upgraded RB951-2n but not on my RB750GL. I was hoping to test it by controlling the 951-2n with the 750GL.

What's new in 6.11 (2014-Mar-20 09:16):

*) ipsec - fix aes-cbc hardware acceleration on CCR with key sizes 192 and 256;
*) wireless - add auto frequency feature;
*) ovpn - fixed TLS renegotiation;
*) ovpn - make bridge mode work with big packets (do not leave extraneous padding);
*) ovpn - fixed require-client-certifcate;
*) ppp - revert RADIUS NAS-Port behaviour, report tunnel interface id;
*) ppp - mppe encryption together with mrru locked the router;
*) dhcp - added support for DHCP option 138 - list of CAPWAP IPv4 servers;
*) quickset - added Guest Network setup to Home AP mode;
*) console - no longer required to supply value of '/routing bgp instance vrf'
property 'instance' for 'add' command;
*) ethernet - added option to enable rx/tx flow control
(will be disabled by default);
*) ethernet - added ability to specify advertised modes for copper ports;
*) fixed 100% cpu usage on CCRs;
*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail;
*) lte - support for Huawei ME609 and ME909u-521;

My openvpn connections broke again like 2 releases ago. RB951's

Hi,

Do you know if the IP route cache filling bug (Ticket#2014031066000031) was resolved in this release?

Cheers

Bug on this new interface.
Bridge filters with in/out interface simply "disappear" from winbox but still appears on console.

Routing Mark problem returns on my RB2011L. Downgrade to 6.7 solved the problem.

A SSTP tunnel that I have between two Mikrotik routers broke after the upgrade to 6.11.
It is configured so that the client verifies the server certificate and the server verifies the client certificate.

The certificate and server certificate derive from the same root. The root is one that I generated.

I suspect that it is this that has caused the issue somehow:

*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail.

If there is no CRL defined on a certificate in the trust chain, does this still cause connections to fail? If so, I assume this would be a new bug.

(Having disabled certificate validation at both ends, the tunnel is established successfully.)

Careful while upgrading there are ton of bugs - possible u have to do master reset

What Ive want to ask is, there are new futures on ether Auto Negotiation TAB
Tx/Rx Row Control
and Advertise
since I cant find nothing on wiki what exactly those options do?

Careful while upgrading there are ton of bugs - possible u have to do master reset

It is not so bad - I've upgrade all of my 16 various routers and everything works so far.

What Ive want to ask is, there are new futures on ether Auto Negotiation TAB
Tx/Rx Row Control
and Advertise
since I cant find nothing on wiki what exactly those options do?

It is on wiki (Flow Control, not Row), see http://wiki.mikrotik.com/wiki/Manual:In ... Properties

Routing Mark problem returns on my RB2011L. Downgrade to 6.7 solved the problem.

Routing Mark problem returns on my RB2011L. Downgrade to 6.7 solved the problem.

+1
any route mark unreachable

Upgraded CCR1036 which is used solely for QoS and reverted to 6.10 this morning.

Routerboard locked up several times, had to MAC telnet onto device to issue reboot command.

Bug on this new interface.
Bridge filters with in/out interface simply "disappear" from winbox but still appears on console.

In my RB1100AHx2 with 500 pppoe connections, i´ve seen 2 times a big drop in the troughput in clients interface, after i reboot, everything back to normal.. some hours after when i changed a ARP entry, the same occours, reboot again.. back to normal.. i will downgrade to 6.7..

Can you please revert width of text fields in WinBox????

+1

Bug on this new interface.
Bridge filters with in/out interface simply "disappear" from winbox but still appears on console.

+1

Why 99% of users just simple complain without simpliest help to developers?

1) make all config backup
2) update
3) if have some problems
- make supout.rif
- reset router
- restore config
- if (fail restore/or same problem) -> make second supout.rif
4) revert for working 5.xx 6.xx and restore config
5) Send supout.rif's to support@mikrotik.com and wait .......

This is more efficient then don't like/worse/disappointed/+1

Bug on this new interface.
Bridge filters with in/out interface simply "disappear" from winbox but still appears on console.

+1

+1

Normis, supout.rif is necessary to know this?

In my RB1100AHx2 with 500 pppoe connections, i´ve seen 2 times a big drop in the troughput in clients interface, after i reboot, everything back to normal.. some hours after when i changed a ARP entry, the same occours, reboot again.. back to normal.. i will downgrade to 6.7..

Why 99% of users just simple complain without simpliest help to developers?

1) make all config backup
2) update
3) if have some problems
- make supout.rif
- reset router
- restore config
- if (fail restore/or same problem) -> make second supout.rif
4) revert for working 5.xx 6.xx and restore config
5) Send supout.rif's to support@mikrotik.com and wait .......

This is more efficient then don't like/worse/disappointed/+1

I upgraded a rb2011uas-2HnD from 6.9 to 6.11 and now I can't connect my windows OVPN client to the ROS OVPN server anymore.

The log show: disconnected <TLS failed>

I've checked that the CA and intermediate CA have both a LT status, while the rb2011 cert has a KT status.

If I uncheck the 'require client certificate' in the OVPN server parameters the connection works, but that would defeat the purpose of having a cert authentication in the first place.

Same problem here!

Ticket#2014031766000331
6.10 BUG: user-manager profile limitation can not add profile limitation on command line when default admin customer are renamed, because missing "owner=" parameter.

This bug is still present on last official 6.11.

the error are replicable:
install with netinstall 6.11 whit NO keep old configuration
routeros-mipsbe-6.11.npk
user-manager-6.11-mipsbe.npk
on a RB750UP with bios 3.13 [hardware no matter...]

on

Code: Select all

/tool user-manager profile limitation add name=test2

missing the possibility to set

Code: Select all

owner=notadmin

parameter
it suppose everytime the owner are "admin" only.

I paste the terminal output:

[admin@MikroTik] > /tool user-manager profile limitation
[admin@MikroTik] /tool user-manager profile limitation> print
# NAME OWNER
[admin@MikroTik] /tool user-manager profile limitation> add name=test
[admin@MikroTik] /tool user-manager profile limitation> print
# NAME OWNER
0 test admin
[admin@MikroTik] /tool user-manager profile limitation> /tool user-manager customer
[admin@MikroTik] /tool user-manager customer> print
Flags: X - disabled
0 login="admin" password="" backup-allowed=yes time-zone=-00:00 permissions=owner signup-allowed=no paypal-allowed=no paypal-secure-response=no paypal-accept-pending=no
[admin@MikroTik] /tool user-manager customer> set 0 login=notadmin
[admin@MikroTik] /tool user-manager customer> print
Flags: X - disabled
0 login="notadmin" password="" backup-allowed=yes time-zone=-00:00 permissions=owner signup-allowed=no paypal-allowed=no paypal-secure-response=no paypal-accept-pending=no
[admin@MikroTik] /tool user-manager customer> /tool user-manager profile limitation
[admin@MikroTik] /tool user-manager profile limitation> print
# NAME OWNER
0 test notadmin
[admin@MikroTik] /tool user-manager profile limitation> add name=test2
failure: customer does not exist
[admin@MikroTik] /tool user-manager profile limitation>
[admin@MikroTik] /tool user-manager profile limitation>add name=test2 (!!!TAB key pressed!!!)
address-list comment copy-from download-limit group-name ip-pool rate-limit-... transfer-limit upload-limit uptime-limit
[admin@MikroTik] /tool user-manager profile limitation> add name=test2 owner=notadmin
expected end of command (line 1 column 16)
[admin@MikroTik] /tool user-manager profile limitation>

Good morning, after upgrade I see this - the select box is not full width in WinBox. It's normal or bug? I didn't see this in earlier versions.

screenshot-ros.png

OpenVPN server doesn't work. TLS failed appears in the log. Downgrade to 6.10

Why 99% of users just simple complain without simpliest help to developers?

1) make all config backup
2) update
3) if have some problems
- make supout.rif
- reset router
- restore config
- if (fail restore/or same problem) -> make second supout.rif
4) revert for working 5.xx 6.xx and restore config
5) Send supout.rif's to support@mikrotik.com and wait .......

This is more efficient then don't like/worse/disappointed/+1

I must admit it is difficult to know which Comments are actual Bugs confirmed by Mikrotik and which are not. Assuming users are reporting these things to Mikrotik in the proper way and not just posting here. Mikrotik have never posted an official Bug list. This feature would not only help us but stop a lot of negative posting which must be really be gut wrenching for the developers who work extremely hard and deserve a bit more credit for producing the worlds greatest routing OS. I will post a feature request for this. the more users that do the same the more chance Mikrotik will consider the idea

I must admit it is difficult to know which Comments are actual Bugs confirmed by Mikrotik and which are not. Assuming users are reporting these things to Mikrotik in the proper way and not just posting here. Mikrotik have never posted an official Bug list. This feature would not only help us but stop a lot of negative posting which must be really be gut wrenching for the developers who work extremely hard and deserve a bit more credit for producing the worlds greatest routing OS. I will post a feature request for this. the more users that do the same the more chance Mikrotik will consider the idea

Unfortunately 90% of issues posted here, are never reported to support, even if we ask for more info. Many issues are config problems and some issues are very specific to the config user has made in their device.

6.11 another version to skip?

Seem to yes. And i think it will be good - skip all versions with a new PPP package and new features up to 6.18 at least. If You do not want be beta tester of Muikrotik, of course. We will have stable version in about a year with this style of development

E-mail with tickets is rather... old solution. Other users can't see my problem(s) and if they have it also, they could leave their observations on bug track. Atlassian Jira or something different and many problems could be gone.

What about the bug in SSTP (Mikrotik server, connecting from windows 7/8 client)? It simply stopped working in 6.8 and higher. I am still using 6.7.
http://forum.mikrotik.com/viewtopic.php?f=1&t=81644
Is the issue still there, or can somebody claim, it works again?
Thx

Seem to yes. And i think it will be good - skip all versions with a new PPP package and new features up to 6.18 at least. If You do not want be beta tester of Muikrotik, of course. We will have stable version in about a year with this style of development

What problems do you have in v6.11?

• NTP package has not been changed (zero commits) for the last year at least. Please check if your NTP server is responding, or try a different NTP server.
• Winbox field width is a bug, and is confirmed, don't worry, it will not remain like this.

E-mail with tickets is rather... old solution. Other users can't see my problem(s) and if they have it also, they could leave their observations on bug track. Atlassian Jira or something different and many problems could be gone.

This has been discussed. Most of the reports are not bugs. Bug tracker would quickly fill up with false reports and config problems, and cause panic among other users.

... cause panic among other users ...

MikroTik do not do any QA whatsoever and rely on the

... NTP package has not been changed (zero commits) for the last year at least. Please check if your NTP server is responding, or try a different NTP server. ...

MikroTik do not do any QA whatsoever and rely on the

This version was running on several hundred volunteer networks for more than a week, before we released it. The bugs that are found here only are apparent in very specific situations, and don't apply to everybody.

This version was running on several hundred volunteer networks for more than a week, before we released it. The bugs that are found here only are apparent in very specific situations, and don't apply to everybody.

This version was running on several hundred volunteer networks for more than a week, before we released it. The bugs that are found here only are apparent in very specific situations, and don't apply to everybody.

There is a difference between running a software and testing the software. Testing implies focus on finding bugs and regressions in ALL subsystems. Running only slightly touches some of the subsystems. Your answer proves the point that MT is lacking in the QA dep. I hope this does not get deleted as well

Best regards

This version was running on several hundred volunteer networks for more than a week, before we released it. The bugs that are found here only are apparent in very specific situations, and don't apply to everybody.

There is a difference between running a software and testing the software. Testing implies focus on finding bugs and regressions in ALL subsystems. Running only slightly touches some of the subsystems. Your answer proves the point that MT is lacking in the QA dep. I hope this does not get deleted as well

Best regards

Drank, do you have any issues in v6.11? Have you already emailed MikroTik support?

the problem is still present on 6.12 "alpha"
winbox on pc directly connected on ethernet on gateway
inside the gateway are a pppoe-server mppe encrypted with mrru 1614
remote cpe (over various other machine) are taking ip address from pppoe-client

the winbox link from pc to cpe freeze after some kb of traffic inbound from cpe to pc.

Must revert to 6.7 to disappear this bug.

the problem is still present on 6.12 "alpha"
winbox on pc directly connected on ethernet on gateway
inside the gateway are a pppoe-server mppe encrypted with mrru 1614
remote cpe (over various other machine) are taking ip address from pppoe-client

the winbox link from pc to cpe freeze after some kb of traffic inbound from cpe to pc.

Must revert to 6.7 to disappear this bug.

Tell me your Support ticket number, I will check if there is any progress with your report

Unfortunately 90% of issues posted here, are never reported to support, even if we ask for more info. Many issues are config problems and some issues are very specific to the config user has made in their device.

Unfortunately 90% of issues posted here, are never reported to support, even if we ask for more info. Many issues are config problems and some issues are very specific to the config user has made in their device.

Normis, how can you do a supout of a router but omitting private information like password and keys? Not that I don't trust you, but it will go against our security policy. And I can't afford to have a spare unit of each single router to create a second config without sensitive info just to do a test for you and send a supout.

the problem is still present on 6.12 "alpha"
winbox on pc directly connected on ethernet on gateway
inside the gateway are a pppoe-server mppe encrypted with mrru 1614
remote cpe (over various other machine) are taking ip address from pppoe-client

the winbox link from pc to cpe freeze after some kb of traffic inbound from cpe to pc.

Must revert to 6.7 for make disappear this bug.

"Winbox connection freeze after some kb received over mppe encrypted connection"
RouterOS version affected: all from 6.8, 6.9, 6.10, 6.11, 6.12 (2014/03/24)
From 6.10 the problem go worst.

ros code

/interface eoip
add keepalive=10 local-address=192.168.3.1 mac-address=02:AE:6D:55:61:E2 name=eoip-tunnel1 remote-address=192.168.3.2 tunnel-id=666
/interface bridge settings
set use-ip-firewall=yes
/interface pppoe-server server
add authentication=mschap2 default-profile=default-encryption disabled=no interface=eoip-tunnel1 mrru=1614 service-name=service1
/ip address
add address=192.168.2.1/24 interface=ether13 network=192.168.2.0
add address=192.168.3.1/24 interface=ether2 network=192.168.3.0
/ip firewall connection tracking
set enabled=yes
/ppp secret
add local-address=10.0.0.1 name=test password=test profile=default-encryption remote-address=10.0.0.2
/system identity
set name="Test Gateway"

ros code

/interface eoip
add keepalive=10 local-address=192.168.3.2 mac-address=02:08:2C:28:55:D6 name=eoip-tunnel1 remote-address=192.168.3.1 tunnel-id=666
/interface pppoe-client
add ac-name="" add-default-route=yes allow=mschap2 default-route-distance=1 dial-on-demand=no disabled=no interface=eoip-tunnel1 keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru=1614 name=pppoe-out1 password=test profile=default-encryption \
    service-name="" use-peer-dns=yes user=test
/interface bridge settings
set use-ip-firewall=yes
/ip address
add address=192.168.3.2/24 interface=ether2 network=192.168.3.0
/ip firewall connection tracking
set enabled=yes
/system identity
set name="Test CPE"

[admin@Test Gateway] /file> Oops: Exception in kernel mode, sig: 5 [#1]
SMP NR_CPUS=2 RB1120
NIP: 8021a730 LR: 8021a46c CTR: 00000000
REGS: dffefd30 TRAP: 0700   Not tainted  (3.3.5-smp)
MSR: 00029000 <CE,EE,ME>  CR: 42000028  XER: 20000000
TASK = 8036d3c0[0] 'swapper/0' THREAD: 80380000 CPU: 0
GPR00: 8021a46c dffefde0 8036d3c0 fffffff2 de6f58aa 00000001 de6f4e50 dc870cd2
GPR08: 120ff29a 0000001d 00000000 8021a400 42000022 00000001 dd9fc300 00000012
GPR16: 00000003 00000000 e1811a40 000005e2 de6dd414 e1811a2c e18119c8 e18119ec
GPR24: 00000012 e1811828 de6dd484 0000003b 000000fd dd9fc300 dd9fc300 de6dd3c0
NIP [8021a730] __pskb_pull_tail+0x330/0x340
LR [8021a46c] __pskb_pull_tail+0x6c/0x340
Call Trace:
[dffefde0] [8021a46c] __pskb_pull_tail+0x6c/0x340 (unreliable)
[dffefe00] [e180df30] ppp_register_channel+0xb20/0x1b4c [ppp_generic@0xe180c000]
[dffefe30] [e180f8d4] ppp_output_wakeup+0x978/0xa20 [ppp_generic@0xe180c000]
[dffefe90] [e180fb30] ppp_input+0xf0/0x12a4 [ppp_generic@0xe180c000]
[dffefeb0] [e18494d0] 0xe18494d0 [pppoe@0xe1849000]
[dffefed0] [80221f9c] __netif_receive_skb+0x220/0x400
[dffeff30] [802224a0] process_backlog+0xac/0x178
[dffeff60] [80223870] net_rx_action+0xc0/0x170
[dffeffa0] [80031a14] __do_softirq+0xf4/0x178
[dffefff0] [8000c054] call_do_softirq+0x14/0x24
[80381e80] [80003f5c] do_softirq+0x98/0xc4
[80381ea0] [80031d84] irq_exit+0xa0/0xd4
[80381eb0] [80003c44] do_IRQ+0x94/0x190
[80381ee0] [8000d71c] ret_from_except+0x0/0x18
--- Exception: 501 at cpu_idle+0x8c/0xe0
    LR = cpu_idle+0x8c/0xe0
[80381fc0] [8034076c] start_kernel+0x2d4/0x2e8
[80381ff0] [800003f8] skpinv+0x2e4/0x320
Instruction dump:
7fdcf378 3b400000 4bffffa0 7fc3f378 7c84f850 4bfffced 2f830000 409eff9c
7f43d378 4bffe9c9 38600000 4bffff00 <0fe00000> 38c00001 7cc903a6 4bfffd90
---[ end trace 72421d3cf3d534d4 ]---

Kernel panic - not syncing: Fatal exception in interrupt

panicSaver: dumping panic to flash
flash: erase 10
flash: prg 10
flash: prg err 0
Rebooting in 1 seconds..
------------[ cut here ]------------
Kernel BUG at 800a3a70 [verbose debug info unavailable]
Oops: Exception in kernel mode, sig: 5 [#2]
SMP NR_CPUS=2 RB1120
NIP: 800a3a70 LR: 800113ec CTR: 00000000
REGS: dffefa60 TRAP: 0700   Tainted: G      D       (3.3.5-smp)
MSR: 00021000 <CE,ME>  CR: 22000024  XER: 20000000
TASK = 8036d3c0[0] 'swapper/0' THREAD: 80380000 CPU: 0
GPR00: 800113ec dffefb10 8036d3c0 00001000 00000001 00000001 e1000000 edffc000
GPR08: 000000d0 80017554 00000300 fffffffd 22000024 00000001 dd9fc300 00000012
GPR16: 00000003 00000000 e1811a40 000005e2 de6dd414 e1811a2c e18119c8 e18119ec
GPR24: 80017554 80380000 e1000000 edffc000 000000d0 00000001 00000001 80017554
NIP [800a3a70] __get_vm_area_node.isra.31+0x34/0x180
LR [800113ec] __ioremap_caller+0x170/0x1a4
Call Trace:
[dffefb10] [e137c43c] flash_fixed_cmd+0x140/0x204 [flash@0xe137b000] (unreliable
)
[dffefb40] [800113ec] __ioremap_caller+0x170/0x1a4
[dffefb70] [80017554] rb1120_restart+0x68/0xa4
[dffefb90] [8000b35c] machine_restart+0x48/0x60
[dffefbb0] [802ad3b0] panic+0x198/0x1e8
[dffefc00] [800096b4] die+0x244/0x284
[dffefc30] [8000984c] _exception+0x100/0x114
[dffefd20] [8000d6d0] ret_from_except_full+0x0/0x4c
--- Exception: 700 at __pskb_pull_tail+0x330/0x340
    LR = __pskb_pull_tail+0x6c/0x340
[dffefe00] [e180df30] ppp_register_channel+0xb20/0x1b4c [ppp_generic@0xe180c000]
[dffefe30] [e180f8d4] ppp_output_wakeup+0x978/0xa20 [ppp_generic@0xe180c000]
[dffefe90] [e180fb30] ppp_input+0xf0/0x12a4 [ppp_generic@0xe180c000]
[dffefeb0] [e18494d0] 0xe18494d0 [pppoe@0xe1849000]
[dffefed0] [80221f9c] __netif_receive_skb+0x220/0x400
[dffeff30] [802224a0] process_backlog+0xac/0x178
[dffeff60] [80223870] net_rx_action+0xc0/0x170
[dffeffa0] [80031a14] __do_softirq+0xf4/0x178
[dffefff0] [8000c054] call_do_softirq+0x14/0x24
[80381e80] [80003f5c] do_softirq+0x98/0xc4
[80381ea0] [80031d84] irq_exit+0xa0/0xd4
[80381eb0] [80003c44] do_IRQ+0x94/0x190
[80381ee0] [8000d71c] ret_from_except+0x0/0x18
--- Exception: 501 at cpu_idle+0x8c/0xe0
    LR = cpu_idle+0x8c/0xe0
[80381fc0] [8034076c] start_kernel+0x2d4/0x2e8
[80381ff0] [800003f8] skpinv+0x2e4/0x320
Instruction dump:
9421ffd0 bf010010 542a0024 90010034 7c9d2378 7cbe2b78 7cda3378 814a000c
7cfb3b78 7d1c4378 7d384b78 554a016e <0f0a0000> 70a90001 41820018 7c690034
---[ end trace 72421d3cf3d534d5 ]---

http://forum.mikrotik.com/posting.php?mode=smilies&f=1#

Normis, Your upgrade version 6.11 Truly BIG PROBLEM with Hotspot Features

nOw back to 6.10

Please check it my support it
Tq

http://forum.mikrotik.com/posting.php?mode=smilies&f=1#

Normis, Your upgrade version 6.11 Truly BIG PROBLEM with Hotspot Features

nOw back to 6.10

Please check it my support it
Tq

YOU MUST WRITE AND SEND AUTOSUPOUT TO support@mikrotik.com

Seem to yes. And i think it will be good - skip all versions with a new PPP package and new features up to 6.18 at least. If You do not want be beta tester of Muikrotik, of course. We will have stable version in about a year with this style of development

What problems do you have in v6.11?

SSTP problems were fixed in v6.9, it works fine in v6.11 also.

Please take a look to this http://forum.mikrotik.com/viewtopic.php ... 50#p417350

To get support for the card, you have to write e-mail to support, where you should send supout.rif file, where 6.11 version is installed and card is plugged in. Support e-mail is support@mikrotik.com

I upgraded my RB2011UAS-2HnD from 6.0 to 6.11. All works ok, though I also see the Winbox formatting problem that everyone else reports.

I do observe one strange thing: I have some Ethernet switch ports that are slaves to other masters. In all cases after upgrading traffic is being shown on the slave ports rather than the master ports (unless there is active Ethernet activity on the master port). Is this a change? I thought that previously no traffic was reported on the slave ports. Can I be sure that even though traffic is being reported on the slave ports that LAN traffic between two switch ports is not going through the router's CPU?

*) ethernet interface stats that are behind switch chip
show real hw stats instead of just the traffic that goes through cpu;

E-mail with tickets is rather... old solution. Other users can't see my problem(s) and if they have it also, they could leave their observations on bug track. Atlassian Jira or something different and many problems could be gone.

This has been discussed. Most of the reports are not bugs. Bug tracker would quickly fill up with false reports and config problems, and cause panic among other users.

Normis other tech companies I have dealt with professionally have bug tracking systems that are open to anyone (Cisco to name one). The bugs are not submitted by end users but by the development teams or other authorized individuals at the company. They are then referenced by tech support when looking for issues. Not all bugs are immediately publicly viewable. Once a bug has been fully confirmed and understood by the dev team the bug is opened up to the public. The bug record contains workaround instructions if available, version numbers affected, and versions that the bug is fixed in. I don't know that anyone is expecting user submitted bugs in a bug tracker like say an opensource project does. Typically those systems are also doubling as a issue tracker.

Folks just want straight forward answers about bugs that do exist so they can be worked around in their environment. When the limitations of the device or the software version that is being deployed are known it gives a lot more confidence in deploying it. If there are a lot of unknown issues or stigma attached to a version its hard to want to deploy it. A publicly viewable bug tracker is as much about managing expectations and rumors as it is about reducing support calls. It also builds trust in the company and their products.

Normis other tech companies I have dealt with professionally have bug tracking systems that are open to anyone (Cisco to name one). The bugs are not submitted by end users but by the development teams or other authorized individuals at the company. They are then referenced by tech support when looking for issues. Not all bugs are immediately publicly viewable. Once a bug has been fully confirmed and understood by the dev team the bug is opened up to the public. The bug record contains workaround instructions if available, version numbers affected, and versions that the bug is fixed in. I don't know that anyone is expecting user submitted bugs in a bug tracker like say an opensource project does. Typically those systems are also doubling as a issue tracker.

Folks just want straight forward answers about bugs that do exist so they can be worked around in their environment. When the limitations of the device or the software version that is being deployed are known it gives a lot more confidence in deploying it. If there are a lot of unknown issues or stigma attached to a version its hard to want to deploy it. A publicly viewable bug tracker is as much about managing expectations and rumors as it is about reducing support calls. It also builds trust in the company and their products.

+1

Still no COA in PPP...
Even new ppp package.

Yes.

Anyone can confirm this bug:
1. Not very important, upgrade to 6.11 Groove, SxLite, RB711, lost default LED indication for wireless signal strength. On RB411 try to add new LED, LED appears as unknown closing, open again new led windows in WinBox help to back to normal.

2. Before last couple version have problem with OpenVPN in bridge configuration, no problem with connection. Network is bridged connect to OpenVPN also bridge configuration have access to all device in bridge network but can't access device where is OpenVPN server, other device in network is accessible. But connect to other device in network can connect to MT where is OpenVPN server check bridge and OpenVPN client is in the bridge. This is on x86 tested again on RB433GL also 6.11 some thing happens.

Any one see this problem.

Of course send supout to support waiting answer.

Anyone can confirm this bug:
2. Before last couple version have problem with OpenVPN in bridge configuration, no problem with connection. Network is bridged connect to OpenVPN also bridge configuration have access to all device in bridge network but can't access device where is OpenVPN server, other device in network is accessible. But connect to other device in network can connect to MT where is OpenVPN server check bridge and OpenVPN client is in the bridge. This is on x86 tested again on RB433GL also 6.11 some thing happens.

Any one see this problem.

Of course send supout to support waiting answer.

What's new in 6.11 (2014-Mar-20 09:16):

*) ipsec - fix aes-cbc hardware acceleration on CCR with key sizes 192 and 256;
*) wireless - add auto frequency feature;
*) ovpn - fixed TLS renegotiation;
*) ovpn - make bridge mode work with big packets (do not leave extraneous padding);
*) ovpn - fixed require-client-certifcate;
*) ppp - revert RADIUS NAS-Port behaviour, report tunnel interface id;
*) ppp - mppe encryption together with mrru locked the router;
*) dhcp - added support for DHCP option 138 - list of CAPWAP IPv4 servers;
*) quickset - added Guest Network setup to Home AP mode;
*) console - no longer required to supply value of '/routing bgp instance vrf'
property 'instance' for 'add' command;
*) ethernet - added option to enable rx/tx flow control
(will be disabled by default);
*) ethernet - added ability to specify advertised modes for copper ports;
*) fixed 100% cpu usage on CCRs;
*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail;
*) lte - support for Huawei ME609 and ME909u-521;

E-mail with tickets is rather... old solution. Other users can't see my problem(s) and if they have it also, they could leave their observations on bug track. Atlassian Jira or something different and many problems could be gone.

This has been discussed. Most of the reports are not bugs. Bug tracker would quickly fill up with false reports and config problems, and cause panic among other users.

Normis other tech companies I have dealt with professionally have bug tracking systems that are open to anyone (Cisco to name one). The bugs are not submitted by end users but by the development teams or other authorized individuals at the company. They are then referenced by tech support when looking for issues. Not all bugs are immediately publicly viewable. Once a bug has been fully confirmed and understood by the dev team the bug is opened up to the public. The bug record contains workaround instructions if available, version numbers affected, and versions that the bug is fixed in. I don't know that anyone is expecting user submitted bugs in a bug tracker like say an opensource project does. Typically those systems are also doubling as a issue tracker.

Folks just want straight forward answers about bugs that do exist so they can be worked around in their environment. When the limitations of the device or the software version that is being deployed are known it gives a lot more confidence in deploying it. If there are a lot of unknown issues or stigma attached to a version its hard to want to deploy it. A publicly viewable bug tracker is as much about managing expectations and rumors as it is about reducing support calls. It also builds trust in the company and their products.

Good morning, after upgrade I see this - the select box is not full width in WinBox. It's normal or bug? I didn't see this in earlier versions.

screenshot-ros.png

If you are already running a RouterOS 6 install, Simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu.

What's new in 6.11 (2014-Mar-20 09:16):

*) ipsec - fix aes-cbc hardware acceleration on CCR with key sizes 192 and 256;
*) wireless - add auto frequency feature;
*) ovpn - fixed TLS renegotiation;
*) ovpn - make bridge mode work with big packets (do not leave extraneous padding);
*) ovpn - fixed require-client-certifcate;
*) ppp - revert RADIUS NAS-Port behaviour, report tunnel interface id;
*) ppp - mppe encryption together with mrru locked the router;
*) dhcp - added support for DHCP option 138 - list of CAPWAP IPv4 servers;
*) quickset - added Guest Network setup to Home AP mode;
*) console - no longer required to supply value of '/routing bgp instance vrf'
property 'instance' for 'add' command;
*) ethernet - added option to enable rx/tx flow control
(will be disabled by default);
*) ethernet - added ability to specify advertised modes for copper ports;
*) fixed 100% cpu usage on CCRs;
*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail;
*) lte - support for Huawei ME609 and ME909u-521;

Available separately, is a new Wireless-FP package, which includes the new CAPsMAN feature. This is a beta package, so use only in controlled test networks. The package will replace your default Wireless package upon installation, which means it will also add wireless functionality changes and improvements, not only CAPsMAN. More information about the Wireless Controller (CAPsMAN) is here: http://wiki.mikrotik.com/wiki/Manual:CAPsMAN

I have never seen MT release such bad firmware in the past. There are a LOT of unacceptable bugs in 6

Can you please name a few ?

A SSTP tunnel that I have between two Mikrotik routers broke after the upgrade to 6.11.
It is configured so that the client verifies the server certificate and the server verifies the client certificate.

The certificate and server certificate derive from the same root. The root is one that I generated.

I suspect that it is this that has caused the issue somehow:

*) ssl - not finding CRL in local store for any certificate in trust chain will cause connection to fail.

If there is no CRL defined on a certificate in the trust chain, does this still cause connections to fail? If so, I assume this would be a new bug.

(Having disabled certificate validation at both ends, the tunnel is established successfully.)

Simple message - You guys need to improve your bug ticket handling, and spend more time testing before allowing firmware to be released. Perhaps a "pre-release" and "stable" branch with proper known issues being listed? This was different when you were "a small company" building small boards. Now you call yourselves "enterprise" and "carrier"... It's time to behave like it!

Simple message - You guys need to improve your bug ticket handling, and spend more time testing before allowing firmware to be released. Perhaps a "pre-release" and "stable" branch with proper known issues being listed? This was different when you were "a small company" building small boards. Now you call yourselves "enterprise" and "carrier"... It's time to behave like it!

Can you please name a few ?

Can you please name a few ?

Normis, if this is a bickering then this does not do you any good. If not then again, why ask? You must know all your bugs and not ask you customers to provide the list.

It is obvious that you try to deny the existence of some bugs. It is also obvious that your customers are sure that there are bugs. Deploying a bug tracking system, with access to customers, will clear all this confusion. Continuing to deny that there are indeed bugs will not convince anybody here.

Think about it in this way - even if you're right and these are not bugs then MT failed to pass the message to the customers (obviously). This calls for some corrective actions from MT to fix the things. How do you intend to fix all this growing confusion and dissatisfaction with the quality of the releases and the QA process? Nobody says you're doing everything wrong. But that does not mean you're guaranteed you're doing it right. Sometimes it is better to admit, correct and continue.

Wish you all the best and thank you for trying to improve.

Upgraded RB951-2n from 6.10 to 6.11
Bridge network and wlan1 interface disappears.
reboot and it works normal. after a few minutes it disappears.

Upgraded RB951-2n from 6.10 to 6.11
Bridge network and wlan1 interface disappears.
reboot and it works normal. after a few minutes it disappears.

I think I have similar problem! After half or few days router became not accessible from network and only hard reboot can help. How to view LOG at that moment I don't know... but after reboot I see string like "unexpected reboot" in the LOG.

Somebody tell me where to download v6.10 for downgrading?

http://download2.mikrotik.com/routeros/6.11/routeros-mipsbe-6.11.npk

I am writing a lot of software to automate various tasks, and I am getting crazy with lots of regexps to parse the "print terse" outputs.

Is it possible to implement a "print json" ?

Does anyone able to use the routing mark + the "Content" field working correctly ?

As soon as I add anything inside the field "Content", the connection will timeout . For example, if I type in "facebook" in the Content field, it supposed to mark the route if I go to http://www.facebook.com . And then eventually route to a VPN connection. However, the connection would time out as soon as I go to http://www.facebook.com.

However, if I take out the "Content" field and make it to mark the route unconditionally, when I go to http://www.facebook.com, it will route to the VPN correctly.

Therefore, it seems adding a condition will break the routing mark.

Does anyone able to use the routing mark + the "Content" field working correctly ?

As soon as I add anything inside the field "Content", the connection will timeout . For example, if I type in "facebook" in the Content field, it supposed to mark the route if I go to http://www.facebook.com . And then eventually route to a VPN connection. However, the connection would time out as soon as I go to http://www.facebook.com.

However, if I take out the "Content" field and make it to mark the route unconditionally, when I go to http://www.facebook.com, it will route to the VPN correctly.

Therefore, it seems adding a condition will break the routing mark.

Going to HTTP facebook will automatically redirect you to HTTPS facebook.

Since its HTTPS, the router cant read the packet content (its encrypted), and therefore will NOT find "facebook" in the content, and not route the connection over the VPN.

Added support for API over TLS (SSL) from 6.1:
see on IP / Services / api-ssl

For those had issues with routing marks,
i ve seen the issue after upgrading from 6.7 to 6.9,i guess the same happened with 6.10 and 6.11

I was not able to reproduce and show to mikrotik,
Although a possible fix(not 100% if that fixed the issue) is to downgrade to 5.26 and upgrade back to latest version

Regarding eoip and bridge interfaces disappearing as somebody said above, it happened on 6.10,
i was able to fix it with same solution(downgrade to 5.26 and upgrade to latest)

hope it helps...

Posting here, so that others can know about it.

I just read through the entire thread, and I'm not certain if others are having the same problem I am. I have an RB800, and it's started crashing and rebooting for me at random times. Once while I was in the webUI, wondering why the CPU graph was spiking. The WebUI crawled to a halt, and I heard the watchdog beep as it rebooted the thing.

Does anyone able to use the routing mark + the "Content" field working correctly ?

As soon as I add anything inside the field "Content", the connection will timeout . For example, if I type in "facebook" in the Content field, it supposed to mark the route if I go to http://www.facebook.com . And then eventually route to a VPN connection. However, the connection would time out as soon as I go to http://www.facebook.com.

However, if I take out the "Content" field and make it to mark the route unconditionally, when I go to http://www.facebook.com, it will route to the VPN correctly.

Therefore, it seems adding a condition will break the routing mark.

Going to HTTP facebook will automatically redirect you to HTTPS facebook.

Since its HTTPS, the router cant read the packet content (its encrypted), and therefore will NOT find "facebook" in the content, and not route the connection over the VPN.

        0x0340:  3058 820e 2a2e 7879 2e66 6263 646e 2e6e  0X..*.xy.fbcdn.n
        0x0350:  6574 820e 2a2e 7878 2e66 6263 646e 2e6e  et..*.xx.fbcdn.n
        0x0360:  6574 820b 2a2e 6662 7362 782e 636f 6d82  et..*.fbsbx.com.
        0x0370:  0c66 6163 6562 6f6f 6b2e 636f 6d82 0b2a  .facebook.com..*
        0x0380:  2e66 6263 646e 2e6e 6574 820e 2a2e 6661  .fbcdn.net..*.fa
        0x0390:  6365 626f 6f6b 2e63 6f6d 3009 0603 551d  cebook.com0...U.

Suddenly my cpu was up to 100%, latest actions used was 'ip-arp make static' and 'torch'. Also my logging usb flash was reseted do not know if this was before or after that high cpu usage.Profile was showing 'management' as eating the hole cpu, i was not able to generate any supout file due to this high cpu usage.. latest ros 6.11 mipsbe

What's the latest stable version for CCR? I need to move from 6.3 (pretty stable). It looks like 6.7 is the next stop?

Code: Select all

/interface wireless set 0 frequency=auto channel-width=20/40mhz-ht-below

interface wireless monitor 0                 
                 status: running-ap
                   band: 2ghz-n
              frequency: 2412MHz
      wireless-protocol: 802.11

This puts the ht below and computers have issues connecting.

Can we get channel-width=20/40mhz-ht-auto?

Ticket#2014031766000331
6.10 BUG: user-manager profile limitation can not add profile limitation on command line when default admin customer are renamed, because missing "owner=" parameter.

This bug is still present on last official 6.11.

Has anyone tried the CAPsMan over wireless link. The CAP is connecting to the CAPsManager via NV2 radio using layer 3. The CAP get registered to the CAPsManager and 802.11b/g client are registered on the CAPsManager. The forwarding mode is enabled and datapath is a bridge with no physical interface on the bridge port and has a DHCP server. The 802.11b/g client is able to obtain an IP address after associating but cannot ping the IP on the bridge interface (Datapath).
However if the CAP is connected via wire to the CAPsManager it works flawlessly.

server4 offering lease x.x.x.x for AA:BB:CC:DD:EE:FF without success

server4 offering lease x.x.x.x for AA:BB:CC:DD:EE:FF without success

Has anyone tried the CAPsMan over wireless link. The CAP is connecting to the CAPsManager via NV2 radio using layer 3. The CAP get registered to the CAPsManager and 802.11b/g client are registered on the CAPsManager. The forwarding mode is enabled and datapath is a bridge with no physical interface on the bridge port and has a DHCP server. The 802.11b/g client is able to obtain an IP address after associating but cannot ping the IP on the bridge interface (Datapath).
However if the CAP is connected via wire to the CAPsManager it works flawlessly.

Am not sure if the problem was NV2. After changing the wireless protocol to 802.11, it started working

What's the latest stable version for CCR? I need to move from 6.3 (pretty stable). It looks like 6.7 is the next stop?

Hi!
I have a problems after upgrade on v6.11 on my RB751U-2HnD (firmware: v3.13):

Device just freeze every 3-4 hours - it`s very bad for my work. I do power of and on. Later i set IP adress in "watchdog" tab, and device reboot automaticaly and works fine 3-4 hours and history repeat.
I aways updgrade new version in this device when new release at soon, and i never not have problem. Whats wrong?

...But another my device RB751U-2HnD, and more different models works fine, but hes is works with a most simple configuration

Of cause? I don`t imagine my work without MikroTik! Perfectly product line!

Sorry for my Eng..

Thanks!

Ticket#2014031766000331
6.10 BUG: user-manager profile limitation can not add profile limitation on command line when default admin customer are renamed, because missing "owner=" parameter.

This bug is still present on last official 6.11.

http://forum.mikrotik.com/viewtopic.php ... 88#p416454

Still exist on 6.12rc1 2014-04-02
I try the other 2 bug I have discovered later

no buffer space is related to L2TP. If you have L2TP configured then this problem will be fixed in v6.12.

docmarius, I confirm.
On my RB1100AHx2 after upgrade to 6.11:

Both Sector Writes Since Reboot and Total Sector Writes: 0

no buffer space is related to L2TP. If you have L2TP configured then this problem will be fixed in v6.12.

im have troubles with bridges - bridge become unknown, reboot fix problem....

where download link 6.12 is already fixed????

im have troubles with bridges - bridge become unknown, reboot fix problem....

where download link 6.12 is already fixed????

Same. So disgusted with MK right now! It's not like we can easily drive to our customer sites.

im have troubles with bridges - bridge become unknown, reboot fix problem....

where download link 6.12 is already fixed????

Same. So disgusted with MK right now! It's not like we can easily drive to our customer sites.

try this pre-release issue (not final, some issues with tunnels not completely fixed):

CCR http://www.mikrotik.com/download/share/ ... e-6.12.npk
PPC: http://www.mikrotik.com/download/share/ ... c-6.12.npk
MIPS BE: http://www.mikrotik.com/download/share/ ... e-6.12.npk

After reading this lengthily tread several times I'll guess we can consider 6.10 to be the last stable version for now....

Glad I didn't use the auto upgrade function. My whole network (with almost every type of rb's, vlan's, dhcp servers (over vlan), bridged and static routes) runs .10 now, some since it came out. No issues so far.
I have one cpe running 6.11. I'll guess that's as far as I'll have it penetrate my network...

See what .12 might bring us....


For the impatience among us, don't bother if MT is not answering your support request or any answers on this tread. The amount of reported bugs/problems is at such a scale they are obviously working hard to find out what went where and why and how wrong to correct them asap in a new release... be patient and keep the good spirit!

The entirety of V6 seems to be botched with no end in sight.

Ticket#2014031766000331
6.10 BUG: user-manager profile limitation can not add profile limitation on command line when default admin customer are renamed, because missing "owner=" parameter.

This bug is still present on last official 6.11.

Still exist on 6.12rc1 2014-04-02
I try the other 2 bug I have discovered later

Still exist on 6.12rc1 (2014-Apr-07 09:04):

no buffer space is related to L2TP. If you have L2TP configured then this problem will be fixed in v6.12.

[Ticket#2014032566001217]
BUG 6.12: Replicable kernel crash when try to discover why winbox not working well from 6.8 over IP obtained from pppoe-client

Hi,

when I try to replicate this problem:

"Winbox connection freeze after some kb received over mppe encrypted connection"
RouterOS version affected: all from 6.8, 6.9, 6.10, 6.11, 6.12 (2014/03/24)
From 6.10 the problem go worst.

I get continuosly kernel failure and routerboard reboot with this configuration:

For this example I use one RB1100AHx2 and one RB951G-2HnD,
netinstalled with ***NO*** Keep old configuration and routeros-powerpc-6.12.npk / routeros-mipsbe-6.12.npk
both have last 3.10 / 3.12 bios.

The connection maded with ethernet cable are:

PC -> PoE - > ether13 RB1100AHx2
RB1100AHx2 ether2 -> RB951G-2HnD ether2
power jack -> RB951G-2HnD

The PoE and the ethernet cable do not matter, also tried to change.

RB1100AHx2 and RB951G-2HnD:
after netinstall
disable all packages except for:
routeros-powerpc / routeros-mipsbe
ppp
system
and reboot

paste this on RB1100AHx2 terminal

ros code

/interface eoip
add keepalive=10 local-address=192.168.3.1 mac-address=02:AE:6D:55:61:E2 name=eoip-tunnel1 remote-address=192.168.3.2 tunnel-id=666
/interface bridge settings
set use-ip-firewall=yes
/interface pppoe-server server
add authentication=mschap2 default-profile=default-encryption disabled=no interface=eoip-tunnel1 mrru=1614 service-name=service1
/ip address
add address=192.168.2.1/24 interface=ether13 network=192.168.2.0
add address=192.168.3.1/24 interface=ether2 network=192.168.3.0
/ip firewall connection tracking
set enabled=yes
/ppp secret
add local-address=10.0.0.1 name=test password=test profile=default-encryption remote-address=10.0.0.2
/system identity
set name="Test Gateway"

paste this on RB951G-2HnD terminal

ros code

/interface eoip
add keepalive=10 local-address=192.168.3.2 mac-address=02:08:2C:28:55:D6 name=eoip-tunnel1 remote-address=192.168.3.1 tunnel-id=666
/interface pppoe-client
add ac-name="" add-default-route=yes allow=mschap2 default-route-distance=1 dial-on-demand=no disabled=no interface=eoip-tunnel1 keepalive-timeout=60 max-mru=1480 max-mtu=1480 mrru=1614 name=pppoe-out1 password=test profile=default-encryption \
    service-name="" use-peer-dns=yes user=test
/interface bridge settings
set use-ip-firewall=yes
/ip address
add address=192.168.3.2/24 interface=ether2 network=192.168.3.0
/ip firewall connection tracking
set enabled=yes
/system identity
set name="Test CPE"

When you open with winbox 10.0.0.2 [after 1 hour, or 1 minutes are equal]
the RB1100AHx2 continuosly reboot / freeze without creating any autosupout.rif,
but with kernel failure on log and on terminal on serial port:

Code: Select all

[admin@Test Gateway] /file> Oops: Exception in kernel mode, sig: 5 [#1]
SMP NR_CPUS=2 RB1120
NIP: 8021a730 LR: 8021a46c CTR: 00000000
REGS: dffefd30 TRAP: 0700   Not tainted  (3.3.5-smp)
MSR: 00029000 <CE,EE,ME>  CR: 42000028  XER: 20000000
TASK = 8036d3c0[0] 'swapper/0' THREAD: 80380000 CPU: 0
GPR00: 8021a46c dffefde0 8036d3c0 fffffff2 de6f58aa 00000001 de6f4e50 dc870cd2
GPR08: 120ff29a 0000001d 00000000 8021a400 42000022 00000001 dd9fc300 00000012
GPR16: 00000003 00000000 e1811a40 000005e2 de6dd414 e1811a2c e18119c8 e18119ec
GPR24: 00000012 e1811828 de6dd484 0000003b 000000fd dd9fc300 dd9fc300 de6dd3c0
NIP [8021a730] __pskb_pull_tail+0x330/0x340
LR [8021a46c] __pskb_pull_tail+0x6c/0x340
Call Trace:
[dffefde0] [8021a46c] __pskb_pull_tail+0x6c/0x340 (unreliable)
[dffefe00] [e180df30] ppp_register_channel+0xb20/0x1b4c [ppp_generic@0xe180c000]
[dffefe30] [e180f8d4] ppp_output_wakeup+0x978/0xa20 [ppp_generic@0xe180c000]
[dffefe90] [e180fb30] ppp_input+0xf0/0x12a4 [ppp_generic@0xe180c000]
[dffefeb0] [e18494d0] 0xe18494d0 [pppoe@0xe1849000]
[dffefed0] [80221f9c] __netif_receive_skb+0x220/0x400
[dffeff30] [802224a0] process_backlog+0xac/0x178
[dffeff60] [80223870] net_rx_action+0xc0/0x170
[dffeffa0] [80031a14] __do_softirq+0xf4/0x178
[dffefff0] [8000c054] call_do_softirq+0x14/0x24
[80381e80] [80003f5c] do_softirq+0x98/0xc4
[80381ea0] [80031d84] irq_exit+0xa0/0xd4
[80381eb0] [80003c44] do_IRQ+0x94/0x190
[80381ee0] [8000d71c] ret_from_except+0x0/0x18
--- Exception: 501 at cpu_idle+0x8c/0xe0
    LR = cpu_idle+0x8c/0xe0
[80381fc0] [8034076c] start_kernel+0x2d4/0x2e8
[80381ff0] [800003f8] skpinv+0x2e4/0x320
Instruction dump:
7fdcf378 3b400000 4bffffa0 7fc3f378 7c84f850 4bfffced 2f830000 409eff9c
7f43d378 4bffe9c9 38600000 4bffff00 <0fe00000> 38c00001 7cc903a6 4bfffd90
---[ end trace 72421d3cf3d534d4 ]---

Kernel panic - not syncing: Fatal exception in interrupt

panicSaver: dumping panic to flash
flash: erase 10
flash: prg 10
flash: prg err 0
Rebooting in 1 seconds..
------------[ cut here ]------------
Kernel BUG at 800a3a70 [verbose debug info unavailable]
Oops: Exception in kernel mode, sig: 5 [#2]
SMP NR_CPUS=2 RB1120
NIP: 800a3a70 LR: 800113ec CTR: 00000000
REGS: dffefa60 TRAP: 0700   Tainted: G      D       (3.3.5-smp)
MSR: 00021000 <CE,ME>  CR: 22000024  XER: 20000000
TASK = 8036d3c0[0] 'swapper/0' THREAD: 80380000 CPU: 0
GPR00: 800113ec dffefb10 8036d3c0 00001000 00000001 00000001 e1000000 edffc000
GPR08: 000000d0 80017554 00000300 fffffffd 22000024 00000001 dd9fc300 00000012
GPR16: 00000003 00000000 e1811a40 000005e2 de6dd414 e1811a2c e18119c8 e18119ec
GPR24: 80017554 80380000 e1000000 edffc000 000000d0 00000001 00000001 80017554
NIP [800a3a70] __get_vm_area_node.isra.31+0x34/0x180
LR [800113ec] __ioremap_caller+0x170/0x1a4
Call Trace:
[dffefb10] [e137c43c] flash_fixed_cmd+0x140/0x204 [flash@0xe137b000] (unreliable
)
[dffefb40] [800113ec] __ioremap_caller+0x170/0x1a4
[dffefb70] [80017554] rb1120_restart+0x68/0xa4
[dffefb90] [8000b35c] machine_restart+0x48/0x60
[dffefbb0] [802ad3b0] panic+0x198/0x1e8
[dffefc00] [800096b4] die+0x244/0x284
[dffefc30] [8000984c] _exception+0x100/0x114
[dffefd20] [8000d6d0] ret_from_except_full+0x0/0x4c
--- Exception: 700 at __pskb_pull_tail+0x330/0x340
    LR = __pskb_pull_tail+0x6c/0x340
[dffefe00] [e180df30] ppp_register_channel+0xb20/0x1b4c [ppp_generic@0xe180c000]
[dffefe30] [e180f8d4] ppp_output_wakeup+0x978/0xa20 [ppp_generic@0xe180c000]
[dffefe90] [e180fb30] ppp_input+0xf0/0x12a4 [ppp_generic@0xe180c000]
[dffefeb0] [e18494d0] 0xe18494d0 [pppoe@0xe1849000]
[dffefed0] [80221f9c] __netif_receive_skb+0x220/0x400
[dffeff30] [802224a0] process_backlog+0xac/0x178
[dffeff60] [80223870] net_rx_action+0xc0/0x170
[dffeffa0] [80031a14] __do_softirq+0xf4/0x178
[dffefff0] [8000c054] call_do_softirq+0x14/0x24
[80381e80] [80003f5c] do_softirq+0x98/0xc4
[80381ea0] [80031d84] irq_exit+0xa0/0xd4
[80381eb0] [80003c44] do_IRQ+0x94/0x190
[80381ee0] [8000d71c] ret_from_except+0x0/0x18
--- Exception: 501 at cpu_idle+0x8c/0xe0
    LR = cpu_idle+0x8c/0xe0
[80381fc0] [8034076c] start_kernel+0x2d4/0x2e8
[80381ff0] [800003f8] skpinv+0x2e4/0x320
Instruction dump:
9421ffd0 bf010010 542a0024 90010034 7c9d2378 7cbe2b78 7cda3378 814a000c
7cfb3b78 7d1c4378 7d384b78 554a016e <0f0a0000> 70a90001 41820018 7c690034
---[ end trace 72421d3cf3d534d5 ]---

I hope that I've explained everything well and sufficently detailed all.

Thanks to all.

Do you power RB1100 over POE ?

I had a similiar problem when my main RB2011 (powered over classing DC adapter) got POE on ether2. One of my collegues attached test SXT wrong (POE went to RB2011 and LAN to SXT . In this setup my RB2011 rebooted sporadicly (15 min, then 1h, then 3 min then again 4h etc..). I tried to change ROS from 6.5 to 6.11.
Everytime it was kernel panic, and reboot. However router made autosupp.out which I sent to support@mikrotik. By the time they answered me I found the POE culprit (he called me saying my SXT is not working.. ) After correctly attached SXT no more reboots..

I answered the support team of my solution but you can try if it is the same problem..