MikroTik

What's new in 6.23 (2014-Dec-04 14:46):

*) pptp - fixed problem where tunnel stopped transmitting packets under heavy load;
*) web proxy - caching in RAM for boards with 32MB or less RAM will not cache any content;
*) leds - removed 'led' command and added support for 'on', 'off' types under 'system leds';
*) files - allow to move files between different disks in winbox;
*) dhcpv4 server - fix adding address lists from radius;
*) dhcpv4 server - make radius classless static route tag as dhcp vendor specific;
*) smb - fixed HDD used/free space reporting
*) made powerpc metarouters work again (were broken in v6.22);
*) disks - fixed fat32 formatting where some bogus files with strange names were created
(to delete existing files reformatting is needed);
*) disks - fixed problem where some of USB disks were not recognized;
*) fetch - allow checking certificate trust without crl checking;
*) userman - fix more web session problems when user uses
customer and administrator interfaces at the same time;
*) snmp - fix external storage info reporting;
*) snmp - fix bulk walk problem introduced in v6.20;
*) fix tunnels - keep keepalive disabled for existing tunnels when upgrading;
*) fix tunnels - mtu for eoip tunnels was not allowed
to be set less than 1280 since 6.20;
*) using routing-marks could lead to tunnel loop detection to turn off tunnels;

It seems like

Code: Select all

/system leds set numbers=[find leds=user-led] type=on

should work, right?

 /system leds add leds=user-led type=off

It seems like

Code: Select all

/system leds set numbers=[find leds=user-led] type=on

should work, right?

I think there is a small bug here - that command is working only if user-led is defined. So I must use

Code: Select all

 /system leds add leds=user-led type=off

first. This is missing in WinBox.

• if there is just one SSTP connection from router, no problem;
• if there is one SSTP and one PPTP connection from router, no problem;
• if I manually connect router to two SSTP connections, no problem;
• if there are two SSTP connections, after reboot there is an error state.

• IP addresses of all SSTP and PPTP connections are marked as invalid;
• I can disable both SSTP connections, but after enabling back, still none is working, neither PPTP, I have to reboot.

There is something strange about SSTP client in this version:

• if there is just one SSTP connection from router, no problem;
• if there is one SSTP and one PPTP connection from router, no problem;
• if I manually connect router to two SSTP connections, no problem;
• if there are two SSTP connections, after reboot there is an error state.

As an error state I mean this:

• IP addresses of all SSTP and PPTP connections are marked as invalid;
• I can disable both SSTP connections, but after enabling back, still none is working, neither PPTP, I have to reboot.

Is somebody experiencing this problem too? It started in 6.21, I think. When I revert to 6.20, no problem...

There is something strange about SSTP client in this version:

• if there is just one SSTP connection from router, no problem;
• if there is one SSTP and one PPTP connection from router, no problem;
• if I manually connect router to two SSTP connections, no problem;
• if there are two SSTP connections, after reboot there is an error state.

As an error state I mean this:

• IP addresses of all SSTP and PPTP connections are marked as invalid;
• I can disable both SSTP connections, but after enabling back, still none is working, neither PPTP, I have to reboot.

Is somebody experiencing this problem too? It started in 6.21, I think. When I revert to 6.20, no problem...

Please run following command on your device "/system logging add topics=sstp,debug,packet". Then reconnect all your sstp tunnels and generate supout file. Send this file to our support e-mail.

6.23 (2014-Dec-03 14:50) one disk
6.23 (2014-Dec-04 14:46) dual disk bonus?

6to4 tunnels working for me again (SixXS), finally able to upgrade from 6.19.

[martin@gw] > /ipv6 address print
Flags: X - disabled, I - invalid, D - dynamic, G - global, L - link-local
 #    ADDRESS                                     FROM-POOL INTERFACE                                                                                                 ADVERTISE
 0  G 2001:xxxx:xxxx:x::2/64                                sixxs-tunnel                                                                                              yes
 1 IG 2001:xxxx:xxyy::/64                                   ether2-master-local                                                                                       yes
 2 DL fe80::4e5e:cff:feb1:76ef/64                           bridge-local                                                                                              no
 3 DL fe80::4e5e:cff:feb1:76ee/64                           ether1-gateway                                                                                            no
 4 DL fe80::4e5e:cff:feb1:76ef/64                           ether2-master-local                                                                                       no
[martin@gw] > /ipv6 route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, o - ospf, b - bgp, U - unreachable
 #      DST-ADDRESS              GATEWAY                  DISTANCE
 0 A S  2000::/3                 2001:xxxx:xxxx:x::1             1
 1 ADC  2001:xxxx:xxxx:x::/64    sixxs-tunnel                    0
 2 A S  2001:xxxx:xxyy::/48      bridge-local                    1
[martin@gw] > /interface 6to4 print
Flags: X - disabled, R - running
 #    NAME                                              MTU ACTUAL-MTU LOCAL-ADDRESS   REMOTE-ADDRESS  KEEPALIVE                                                           DSCP
 0  R sixxs-tunnel                                     1280       1280 xxx.xxx.xx.xxx  yy.yyy.y.yy                                                                         inherit

Its new version I have 1-3% packet lost in my test link

If you experience any crash at 6.23. Please make support output file after the crash and send it to support (support@mikrotik.com).
It will help us very much!

Please test the igmp proxy multicast. I'm currently running the version 6.7. This is the procedure. But why does not work after the 6.7?
to fix this problem

Virtual APs in CAPsMAN v2 re not working, discussed in thread http://forum.mikrotik.com/viewtopic.php?f=1&t=91002. It was also in 6.22.

I emailed a support output file. My 6 built-in Intel 10/100 ethernet ports all stopped working after upgrading from 6.22 to 6.23.

I emailed a support output file. My 6 built-in Intel 10/100 ethernet ports all stopped working after upgrading from 6.22 to 6.23.

exactly the same issue with you, 2 intel 559 cards not working, shows no connections and no irq

ibm do you have any IPSec configuration on your SXT?
Have you tried to disable security package at 6.23?
Next time it would be great to get support output file from 6.23, when your router has problems.

keema,

Please make sure your SD card works (try another disk), try to format disk and then make support output file (send it to support).

Perhaps post was deleted, as it was not related to 6.23 release!

What is the CAPsMAN v2 status in 6.23, is it still an optional package - or is it released in replacement of v1?

I had 4 labs:

1. Linux server ---------------- (CCR1036) -------FTP Cat 6.E (0,3m) -------- (CCR1036) --------- FTP Cat 6.E (0,3m) ----------- Linux server.
Tested with iperf.

2. CCR1006 -------------------- (CCR1036) -------FTP Cat 6.E (0,3m) -------- (CCR1036-2)
--------FTP Cat 6.E (0,3m) --------- Linux server
Tested with BT-TEST from CCR1006 to CCR1036-2.

3. (CCR1036) -------FTP Cat 6.E (0,3m) -------- (CCR1036) --------- FTP Cat 6.E (0,3m) ----------- Linux server
Tested with BT-TEST from CCR1036 to CCR1036-2

4. (CCR1036) -------FTP Cat 6.E (0,3m) -------- (CCR1036) --------- FTP Cat 6.E (0,3m) ----------- Linux server (real traffic about 500 / 500 Mbit/s)
RouterOS v6.12:
--- 10.200.0.1 ping statistics ---
20000 packets transmitted, 20000 received, 0% packet loss, time 64966ms
rtt min/avg/max/mdev = 2.784/2.828/12.616/0.084 ms, pipe 2, ipg/ewma 3.248/2.855 ms

RouterOS v6.22:
--- 10.200.0.1 ping statistics ---
20000 packets transmitted, 19860 received, 0% packet loss, time 67536ms
rtt min/avg/max/mdev = 2.689/2.873/5.706/0.139 ms, ipg/ewma 3.377/2.825 ms




Packet loss occurs equally and according Router OS versions.

We have tested same kind of ping between two CCR devices in our lab and 20000 packets were exchanged without any problems.

In version 6.15 ethernet hardware queue was reduced and this might cause dropped packets while ping is not the only traffic going through device.

When you send icmp packets with size 65000, then 44 fragments are being sent to destination address and if one of them is lost then whole packet is being dropped.

Also when you send ping reply to source address and if there is no place in queue for 44 reply fragments, then packet will be dropped.

Bill, nostradamus.

To solve the issue with Intel cards, please install the version from the link on your router,
http://www.mikrotik.com/download/share/ ... 6.23.1.npk
Let us know about the results.



bax,
Thank you very much for the report!
We will try to fix the cache-hit DSCP issue in the next RouterOS version 6.24!

IPv6 VRRP flapping also fixed and not in changelog

IPv6 VRRP flapping also fixed and not in changelog

maybe because it's actually still NOT working as it should in 6.23 (and 6.23.1). I opened ticket 2014120966000348:

I've configured VRRP IPv6 on 2 routers in my lab on same ipv6 network with a global scope address on VRRP interface and it works in the first place but then after some interface down / up or disable / enable I get both VRRP nodes in MASTER and some log messages like this:

Router1# vrrp,warning vrrp1 received packet from fe80::d6ca:6dff:fe0e:9ae4 misconfigured IP addresses [2a00:f8c0:1000:9::190, fe80::200:5eff:fe00:202, fe80::200:5eff:fe00:202](my) != [2a00:f8c0:1000:9::190, fe80::200:5eff:fe00:202](received)

Router2# vrrp,warning vrrp1 received packet from fe80::4e5e:cff:fe4e:684 misconfigured IP addresses [2a00:f8c0:1000:9::190, fe80::200:5eff:fe00:202](my) != [2a00:f8c0:1000:9::190, fe80::200:5eff:fe00:202, fe80::200:5eff:fe00:202](received)

Also this "misconfigured IP addresses" message is then displayed on the VRRP interface in winbox and there is no way to clear this error, even disable / enable of the interface does not clear it and the interfaces stay in MASTER or sometimes the "backup" router is flapping between BACKUP and MASTER. only deleting the VRRP interface or rebooting both routers clears the error.

Looks like there is something totally wrong with link local address handling in VRRP as the link local is 2 times or even 3 times in the announcement, as far I can tell from that log message. or maybe it's still some keepalive issue and the "misconfigured IP addresses" is only a side effect.

really, they said it's fixed in 6.23 and I mean it's somehow working slightly better, but still totally unusable. I really wonder if they tested this at all after "fixing" it.

Thank you about great explanation.
This issue will be fixed in version 6.24rc2.

Mikrotik why did you mess bandwitch test?

Mikrotik why did you mess bandwitch test?

lemosh,
we are sorry for the incovenience caused by the following problem.

Please install MikroTik RouterOS 6.23.1 on your router,
http://forum.mikrotik.com/viewtopic.php?f=2&t=92007
Let us know about the results!

Hi!

Make static button is missing in IP ->DHCP Leases, only shows Check Status button, is it possible to make static leases for example 100 hosts with one click as it was before?

Hi!

Make static button is missing in IP ->DHCP Leases, only shows Check Status button, is it possible to make static leases for example 100 hosts with one click as it was before?

select these, right click, choose "make static" from menu

I have two RBmAP2n devices where I've loaded 6.23. On both devices the amount of internal HDD space that is reported is incorrect. Both devices have 16 MB of HDD space. The file list in Winbox shows 10.9 MB used. The Resources window reports 5.1 available. This is incorrect there is nothing on the drive other than two empty directories: flash and flash/skins. I'm able to drag and drop the 10 MB 6.23 npk file to the drive successfully and the amount of space used or available does not change. This did not happen on 6.18 or 6.19. I'm reluctant to load this release on my other devices until this is fixed.

savage,
Is it possible to make support output file from your router?
We do not have any active report about Ethernet port problems, neither in 6.23 nor in 6.22

savage,
Is it possible to make support output file from your router?
We do not have any active report about Ethernet port problems, neither in 6.23 nor in 6.22

Ticket#2014121166000049 & 2014121166000021

I was kind of actually hoping for a response to those tickets already. It's quite ironic that you build routers, but you can't even get something as simple as a Ethernet port right. Right now, I have a USD 1K door stop, completely unusable. I'm not impressed Even more so considering that I've upgraded to a CCR on Mikrotik's advise due to driver issues on x86 platforms.

Actually V6.23.1 was released immediately afterwards

Since upgrade to V6.23.1 no current TX power values show in the table. This occurs on RB951G-5HpACd unit. Have tried 802.11, Nstream and NV2 all do the same. The wireless however is working as clients connect as expected.

Any chance that winbox can be enhanced to allow one to see and change the ntp client server-dns-names field?

This field is actually quite useful if you put something like us.pool.ntp.org in it.

There's been a significant decrease in the performance of simple queues on the RB450G since RouterOS v6.20. The performance degradation has been on the orders of about 16 percent when compared to RouterOS v6.19.

I notice that with v6.21, the following is in the changelog:
*) fixed queues - could have huge latencies and smaller throughput than specified;

However, that obviously did not resolve the regression, because every build after v6.19 has lower simple queues throughput. Was the v6.21 fix made only for multicore? Note that the RB450G is single core.

Any chance that winbox can be enhanced to allow one to see and change the ntp client server-dns-names field?

This field is actually quite useful if you put something like us.pool.ntp.org in it.

You can also try to use the Server-DNS-Names setting to specify the dns name of the ntp server:
/system ntp client set server-dns-names=us.pool.ntp.org

Is anybody else noticing a drop in TCP throughput in ptmp nv2+fp especially in noisy environment. I have what appears perfect client connection 98% Ccr TX/Rx 54/54 max throughput 4 - 6 megs 5.26 gives 18-20megs same client.

There's been a significant decrease in the performance of simple queues on the RB450G since RouterOS v6.20. The performance degradation has been on the orders of about 16 percent when compared to RouterOS v6.19.

I notice that with v6.21, the following is in the changelog:
*) fixed queues - could have huge latencies and smaller throughput than specified;

However, that obviously did not resolve the regression, because every build after v6.19 has lower simple queues throughput. Was the v6.21 fix made only for multicore? Note that the RB450G is single core.

Please send us supout.rif file from your device. We will check what is going on there.
http://www.mikrotik.com/support.html

Is anybody else noticing a drop in TCP throuput in ptmp nv2+fp especially in noisy enviroment. I have what appears perfect client connection 98% Ccr TX/Rx 54/54 max throuput 4 - 6 megs 5.26 gives 18-20megs same client.

Is anybody else noticing a drop in TCP throuput in ptmp nv2+fp especially in noisy enviroment. I have what appears perfect client connection 98% Ccr TX/Rx 54/54 max throuput 4 - 6 megs 5.26 gives 18-20megs same client.

jvkassar,
You have Point to Point or Point to Multi Point links using v6.23?
What speed you are getting with v6.20 and v6.23?
Could you provide support output files from both versions and send to support@mikrotik.com

After 6.23 update I have port flapping on SXT lite 5.

After 6.23 update I have port flapping on SXT lite 5.

Please send the supout.rif file to MikroTIk support for inspection.

Any change to L2MTU on any interface of a CCR will result in all interfaces flapping to implement buffer changes.

Hello! I update to this FW, and have a problem!
apple (iphone, macbook) device then pptp disconnects after precisely 2 minutes and 30 seconds. on the previous version , this problem was not.

Hello All!
Does anyone know of any issues related to IPSEC VPN tunneling using this release.
i upgrade my RB2011UiAS from 6.21 to the latest firmware and OS but i cannot connect via IPSEC now . :-\
Everything worked before the upgrade.

Hello All!
Does anyone know of any issues related to IPSEC VPN tunneling using this release.
i upgrade my RB2011UiAS from 6.21 to the latest firmware and OS but i cannot connect via IPSEC now . :-\
Everything worked before the upgrade.

Have you tried looking in the Log? What is the stated reason for disconnection?

Hello All!
Does anyone know of any issues related to IPSEC VPN tunneling using this release.
i upgrade my RB2011UiAS from 6.21 to the latest firmware and OS but i cannot connect via IPSEC now . :-\
Everything worked before the upgrade.

Have you tried looking in the Log? What is the stated reason for disconnection?

Normis in your other post you said "from an iPhone to RouterOS v6.24 PPTP server".
Are you talking about the RC version?
I think that in 6.23 there are some issue with the security package because in one SXT I have CPU always at 100% after upgrade and disabling security it returned to 5-6%.

Have you tried looking in the Log? What is the stated reason for disconnection?

Try the RC, it is on our regular download page

Have you tried looking in the Log? What is the stated reason for disconnection?

Any chance that winbox can be enhanced to allow one to see and change the ntp client server-dns-names field?

This field is actually quite useful if you put something like us.pool.ntp.org in it.

You can also try to use the Server-DNS-Names setting to specify the dns name of the ntp server:
/system ntp client set server-dns-names=us.pool.ntp.org

# Script by RouterOS
# Required: ROS v6.2 or later (catch run-time errors)
# Tested on ROS v6.23 (Tile)
# Last-Update: 2014-12-20 11:20 CET
{
#// Change following according to your 
:local NTP0 "0.it.pool.ntp.org"
:local NTP1 "1.it.pool.ntp.org"
#// get current
:local NTPPrimary [/system ntp client get primary-ntp ]
:local NTPSecondary [/system ntp client get secondary-ntp ]
#// following used to store updated IPs
:local newNTP0
:local newNTP1

 :do {
  :set newNTP0 [:resolve $NTP0 ];
 } on-error={
#// FYK
 :log error message="Primary NTP server hostname resolution failed."
 };
 :if ( $NTP0 != $NTPPrimary ) do={
#  :put ( "Changing  primary NTP server (" . $NTPPrimary . ") to " . $newNTP0 )
  /system ntp client set primary-ntp=$newNTP0
 }
 
 :do {
  :set newNTP1 [:resolve $NTP1 ];
 } on-error={
#// FYK
  :log error message="Secondary NTP server hostname resolution failed."
 };
 :if ( $NTP1 != $NTPSecondary ) do={
#  :put ( "Changing  secondary NTP server (" . $NTPSecondary . ") to " . $newNTP1 )
  /system ntp client set secondary-ntp=$newNTP1
 }
}

Remote CAP upgrade does not work.
In this case, the update manually, is operating normally.

As you can see in the log, security package is missing.

loading kernel from nand partition 0... OK
setting up elf image... OK
jumping to kernel code
Starting...
failed to open /dev/flash: No such file or directory
Generating SSH DSA key...
Starting services...

Demo license expired!
Please reinstall the router.

connect failed (errno=2)
connect failed (errno=2)
connect failed (errno=2)
connect failed (errno=2)
Client requested halt.