v6.30.2 bugfix release

Mon Aug 03, 2015 11:26 am

How about traceroute? You sure this from the hAP?

infused · Mon Aug 03, 2015 12:06 pm

Any reason why when upgrading it does not update the firmware automatically?

mysz0n · Mon Aug 03, 2015 12:44 pm

How can i disable 60+ firewall rules from terminal?
With "fasttrack dummy rule" I can't perform disable [find] because i can't disable dynamic rule.

ufm · Mon Aug 03, 2015 1:43 pm

traffic flow - not fixed in 6.30.2. Our company uses billing that takes into account the traffic protocol NetFlow. After the upgrade to 6.27 to 6.30.2 missing incoming traffic . Please fix it.

In 6.30 (or 6.29) added additional info into netflow packet. If your billing use "poor" netflow packet parsing - you get error.

apathy · Mon Aug 03, 2015 1:54 pm

traffic flow - not fixed in 6.30.2. Our company uses billing that takes into account the traffic protocol NetFlow. After the upgrade to 6.27 to 6.30.2 missing incoming traffic . Please fix it.
In 6.30 (or 6.29) added additional info into netflow packet. If your billing use "poor" netflow packet parsing - you get error.

Then, from where the outbound traffic and pirng that are considered normal?

igorvukotic · Mon Aug 03, 2015 2:02 pm

PPtP is broken in 6.30.2 ( 6.29.1 ) works fine

Ansy · Mon Aug 03, 2015 3:44 pm

New device from spare parts, fresh 6.30.2 with 3.24 firmware, old config.

Bridge - Settings - Use IP Firewall still broken:

NewRB750UPoldIssue.png

Frozen interface to configure or just monitor something.
Empty fields/lisits (console too), can't control anything.
Periodically reboots by watchdog, weird log messages.

Well... Trying supout.rif... got crash:

NewRB750UPafterReboot.png

Now continue using RB750UP as dumb PoE bridge again -- no NAT, Firewall, Queues.
Waiting for fix... [Ticket#2015080366000534]

paoloaga · Mon Aug 03, 2015 5:16 pm

Another bug:
Selecting multiple routing filters and trying to move them up or down, will only move one random rule of those selected instead of all of them.

Confirmed, it happens to me too, tested on 6.24 through 6.30.2.

ufm · Mon Aug 03, 2015 5:35 pm

traffic flow - not fixed in 6.30.2. Our company uses billing that takes into account the traffic protocol NetFlow. After the upgrade to 6.27 to 6.30.2 missing incoming traffic . Please fix it.
In 6.30 (or 6.29) added additional info into netflow packet. If your billing use "poor" netflow packet parsing - you get error.
Then, from where the outbound traffic and pirng that are considered normal?

At least 6.30 and 6.30.1 ROS have bug in netflow - wrong interface number.
In 6.30.2 _this_ bug it has been fixed (at least in my configuration).
I think you need sniff netflow traffic and start dialog with support.

kitit · Mon Aug 03, 2015 7:59 pm

How about traceroute? You sure this from the hAP?

I'm sure, then i update to 6.31 RC12 , ping stay normal and then i'm downgrade to 6.27 ping cool.

Cha0s · Mon Aug 03, 2015 11:31 pm

Just upgraded 2 RB2011 from 6.29 to 6.30.2.

Both RBs have identical configuration (active/standby setup).

The standby RB2011 got upgraded ok, no issues so far.
The active RB2011 never came back online after the upgrade.

I just got the same problem today with two CCRs.

It turns out that something has changed with the RouterBOOT in the latest versions causing it to halt on boot.

Let me explain my situation a little bit better.

I have 2 RB2011 and 2 Cisco 3750E (stacked).
Both Cisco are connected with serial to both RB2011 so in case of an emergency I would still be able to manage both switches (if one is down and stack is down).

This setup has worked for well over a year without any problems whatsoever when rebooting the RBs.

In the latest versions of RouterBOOT it seems that when the serial port is connected to the Cisco switch it will get stuck there (I don't know where or why exactly).

Today I installed 2 CCRs with another 2 3750's the same way (cisco's console port to ccr's console port) and after a reboot both CCRs would not boot.
The LCD would show the boot screen and nothing else. Also I noticed that the ports were flapping after a minute or two when it was 'stuck' at boot (I guess it would auto reboot and then get stuck over and over? )

I don't recall anything related to this on any changelog (I may be wrong - please correct me).

How can we revert the behavior to how it worked pre-v6.30?

myke1124 · Tue Aug 04, 2015 1:21 am

Is this a new feature in 6.30.2?

/ip firewall connection remove [find]
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)

pcunite · Tue Aug 04, 2015 2:33 am

Connection-Rate does not work in 6.30.2

add action=mark-connection chain=prerouting  
connection-bytes=500000-0 connection-rate=200k-100M new-connection-mark=HTTP_BIG protocol=tcp

paltherr · Tue Aug 04, 2015 10:50 am

i tried turning to operate a friends rb450g which came with routeros 3.25. a direct upgrade to 6.30.2 did not work out. next step was upgrading to 4.17 and then the router accepted the 6.30.2 upgrade. there is one strange thing i was not able to resolve so far. it seems that the configuration can be done using winbox.exe but the webinterface gives me an "error 501: not implemented" as soon as i try to login with username: admin and no password set. this is not browser dependent as i tried chrome and firefox.

in the files menu i noticed an empty folder "skins". maybe it has something to do with the problem but i don't know.

any suggestions are welcome.

pcunite · Tue Aug 04, 2015 4:37 pm

any suggestions are welcome.

You might try the "netinstall" approach.

jheward · Tue Aug 04, 2015 4:39 pm

With /ip cloud disabled, the router still attempts to resolve cloud.mikrotik.com and sends UDP traffic to 81.198.87.240:15252.

StubArea51 · Tue Aug 04, 2015 6:18 pm

Comments and info on the new MikroTik release cycle with bugfix

http://www.stubarea51.net/2015/08/04/mi ... ent-cycle/

steen · Wed Aug 05, 2015 12:13 am

Hello Folks!

We just upgraded whole our environment to this level, no visible problem at any place.

We got one suppout from one RB411 which disappeared from network after that incident and has not been visible since, don't know if it was the upgrade or something else as simple as customer switched off the device.

Another RB333 used as core router

started to log relatively many RX errors on it's vlan trunked and none vlan trunked ports, both connected to Cisco 2960 switches. We suspect the device to have some problems so it will be replaced later this week.

Muzaki · Wed Aug 05, 2015 1:53 am

I upgrade my PPPOE-servers to ver 6.30.2 (Using RB 1100x2)

I had to downgrade because my PowerBeams P2P just stopped working for some reason. I did have the time to do any research. I did see a lot of traffic going to the PowerBeams even when the client wasnt connected.

Downgraded to 6.27 and everything went back to normal.

paltherr · Wed Aug 05, 2015 11:40 am

any suggestions are welcome.
You might try the "netinstall" approach.

thanks a lot! that did the trick. during upgrade process i noticed some repartitioning/reformating of the internal memory which all the other upgrade methods did not do.

Rapesco · Wed Aug 05, 2015 12:38 pm

Dear MikroTik Support,

ip route pref-src is not working correctly since version 6.30 and later (6.29 and previous version is working fine )

Downgrade to Version 6.29. everything is working correctly.

support.rif and details was submitted by Ticket#2015071966000051 a week ago, but only auto reply from system.

Please follow up, i believe it is small bug and easy to be fixed.

Thank you !

Same problem here, upgraded from 6.27 on two CCR's 1036 ... pref source on route 0.0.0.0/0 doesn't work
Active packages: advanced-tools, mpls, routing, security, system
Firmware: 3.27

Tried to delete/recreate the route ... no effect.

mercury13 · Thu Aug 06, 2015 10:23 am

After upgrade from 6.29.1 to 6.30.2 ROS x86 broken EoIP. Interface is on, state Running (if choose option keep alive, state not running) , but traffic is broken. On all another devices is OK.

Kraken2k · Thu Aug 06, 2015 11:20 am

I had problems since upgrade from 6.25 to newest version (at last incident it was 6.30.2) on RB1100AHx2 - after few days, the router stopped to respond - still running, reacts to cable connect/disconnect but no response on ethernet ports.

Yesterday I was able to connect to connect using serial port and found everything running as expected, but just no response to network traffic. When attempted to ping local addresses or even 127.0.0.1 I got the error message "No buffer space available" - later I found that an issue with the same symptoms existed in the past and was already fixed (route cache overflow).

Interesting thing is, that we have two RB1100AHx2 routers with the same config (just few different IP addresses), but the second one is just backup with a little traffic and deactivated IPsec tunnels - that one works without any issue so far.

I downgraded from 6.30.2 back to 6.25 which (according to the old thread about this issue) was claimed to fix this issue. We'll see in about 4 days.

keema · Thu Aug 06, 2015 12:15 pm

+1

Scheduller does not always work. i have a startup script which is sometimes run and sometimes not. it does nothing but get the routerboard data and send it to email. I can see that the script doesn't even start, not that there was a problem with sending an email. But like I said, randomly, sometimes it starts. No clue.

HWTest · Thu Aug 06, 2015 1:06 pm

Today I tried to switch the SSTP VPN client to "Dial On Demand" but that acts strange and connects and disconnects in cca 1 second pace.
When I disable Dial On Demand the connection works normally.
No session timeout set, idle timeout set to 1 minute.
Tested on RB532 and RB2011UiAS.

Thu Aug 06, 2015 1:08 pm

I downgraded from 6.30.2 back to 6.25

I wonder if you managed to make a supout.rif before downgrading. There are so many of us complaining about bug here, and so little actually supplying Mikrotik engineers with enough information to reproduce and fix those bugs...

avenn · Thu Aug 06, 2015 3:10 pm

I downgraded from 6.30.2 back to 6.25
I wonder if you managed to make a supout.rif before downgrading. There are so many of us complaining about bug here, and so little actually supplying Mikrotik engineers with enough information to reproduce and fix those bugs...

+1

This is a very important point. IF you can do a BEFORE and AFTER support file where possible. This can greatly aid engineers at Mikrotik and hopefully get to fix quicker.

Kraken2k · Thu Aug 06, 2015 4:28 pm

I downgraded from 6.30.2 back to 6.25
I wonder if you managed to make a supout.rif before downgrading. There are so many of us complaining about bug here, and so little actually supplying Mikrotik engineers with enough information to reproduce and fix those bugs...
+1

This is a very important point. IF you can do a BEFORE and AFTER support file where possible. This can greatly aid engineers at Mikrotik and hopefully get to fix quicker.

Not by my own hands - I have just two "autosupout.rif" files (one about 8 hours before the issue and one after downgrade - about 14 hour after the issue), not sure if those will be any good to MikroTik support. If yes, no problem to provide them (everything is for the first time).

Okay, I will be smarter next time - it's hard to think about generating the support file when you sit in front of the console in server room, trying to figure out the issue, knowing that the whole company is in stopped state and everybody is waiting for you to repair the issue as soon as possible (not mentioning people still asking and demand immediate report about the situation, solution and "when it will be operational again, I'm just missing <something important>" talks). When it's the best time to generate the supout file anyway? During the issue (if possible) or after it, in order to provide the best possible information for support (I checked the wiki but found nothing about this)

buckthis · Thu Aug 06, 2015 6:09 pm

I upgraded from v6.31rc12 to v6.31rc14 on a 2011UiAS-2HnD.

Not sure if it's noise....
Logs are showing "tx loop on interface ", wasn't seen on any other version.

Time: Aug/06/2015 10:02:54
Buffer: memory
Topics: interface warning
Message: (unknown): tx loop on interface (1)

----
Maybe this has something to do with my wireless.

I have two cAP 2n devices, controlled via CAPsMAN and with the same SID. The tx loop messages appears right after my phone shifts between CAPs.

See attached.

--- Update ---
Disconnected one of the CAPs and still seeing the warnings. It appears after a wireless device disconnects.

Example of a disconnect: [xxx:94:5E@HomeNet-CAP2 disconnected, received disassoc: sending station leaving (8]

Fri Aug 07, 2015 12:21 pm

When it's the best time to generate the supout file anyway?

If you see a problem and still have any kind of management access to your router- try making supout.rif immediately before reboot/downgrade/configuration reset/whatever. It may become an invaluable source of information, and you can always just delete it later if it proves to be unnecessary in the end.

Chupaka · Fri Aug 07, 2015 7:19 pm

How can i disable 60+ firewall rules from terminal?
With "fasttrack dummy rule" I can't perform disable [find] because i can't disable dynamic rule.

disable [find dynamic=no]

spacemind · Sun Aug 09, 2015 11:33 pm

6.30.1 and 6.30.2
L2TP client vpn freeze every day and after a restar it works again.

on 6.24 and 6.28 works good.

adyb76 · Mon Aug 10, 2015 12:56 pm

Has something changed within OSPF - we've had major issues upgrading and all OSPF related. The upgraded router did not communicate with the lower version router, all our interfaces are nbma.

Had to dive back to 6.7 which is the version I find most stable

zizobaddy · Tue Aug 11, 2015 2:50 am

What's new in 6.30.2 (2015-Jul-22 11:17):

*) pptp & l2tp - fixed problem where android client could not connect if
both dns names were not provided (was broken since v6.30);
*) lcd - fix crash (and 100% cpu usage) when interface gets removed from "stats-all" screen
*) tool fetch - fix incomplete ftp download
*) ipsec - fixed crash in when gcm encryption was used
*) certificate manager - fixed memory leak
*) traffic flow - fixed dynamic input/output interface reporting
*) user-manager - fixed username was not shown in /tool user-manager user
*) user-manager - fixed zoom for user-manager homepage when mobile devices used
*) winbox - restrict reversed ranges in dst-port under firewall
*) snmp - fix system scripts table

known issue:
*) Dynamic DNS servers can disappear when "allow-remote-requests" are not enabled

Hi Normis

I keep getting broken package when trying to install 6.30.2 mipsbe additional packages

The system has been upgraded to 6.30.2 already?

zizobaddy

johnsilver · Tue Aug 11, 2015 9:45 am

What's new in 6.30.2 (2015-Jul-22 11:17):

*) pptp & l2tp - fixed problem where android client could not connect if
both dns names were not provided (was broken since v6.30);

nah cool, found this bug too

http://forum.mikrotik.com/viewtopic.php ... 20#p494520

HWTest · Tue Aug 11, 2015 10:03 am

I just upgraded our company's CCR1036-8G from 6.3 to 6.30.2 and then upgraded the Firmware from 3.10 to 3.27.

Since upgrading our PPTP VPN connections are dropping randomly with an error "CCP lost compression got our of sync: disabling compression" then the next message is "terminating... - Encryption got out of sync"

Is there anything I can do to resolve this?

I see this was resolved in v6.30 release notes but we never had this error when we were on v6.3.
Disable all compression in the ppp profile.

The compression is useless, and actually hurts performance. (feel free to read up on it to verify)

Yesterday I got the same error on a L2TP/IPsec client.

VPN.jpg

The compression is disabled in ppp profile.

/ppp profile
set *FFFFFFFE idle-timeout=55s use-compression=no use-encryption=required

amandler · Wed Aug 12, 2015 12:10 am

Tools - Traffic Monitor isn't working.
did it work in previous version?

Traffic Flow worked until 6.29. It has been broken since. We are very anxious to see this remedied -- it's an important billing tool for us. Thanks.

marrold · Wed Aug 12, 2015 1:03 am

Is this a new feature in 6.30.2?

/ip firewall connection remove [find]
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)

I have the exact same issue on 6.30.2 running on x86.

Any comment Mikrotik? Shall I send a supout?

yuanmayi · Wed Aug 12, 2015 9:30 am

Connection-Rate does not work in 6.30.2,on 6.24 and 6.28 works good.

 chain=prerouting action=mark-connection new-connection-mark=web-video passthrough=yes protocol=tcp dst-port=80,443,8000,8080 connection-bytes=500000-0 connection-rate=60k-12M log=no log-prefix=""

steen · Wed Aug 12, 2015 11:46 pm

Hello Follks!

All our system is updated to v6.30.2 plus the new wireless cm2 package, without any visible problems, all systems normal.
We have almost all flavors, RB411, RB333, RB433, CRS125, CCR, SXT, SEXTANT RB2011 RB750..

Genkun · Thu Aug 13, 2015 9:00 am

Thanks for the wonderful update. Have had a few snags which we fixed internally but there is one error that is quite prevalent.

/interface wireless channels
add band=5ghz-a/n frequency=5180 list=superchannel2 name=5180 width=20
add band=5ghz-a/n frequency=5190 list=superchannel2 name=5190 width=20
add band=5ghz-a/n frequency=5200 list=superchannel2 name=5200 width=20
add band=5ghz-a/n frequency=5210 list=superchannel2 name=5210 width=20
add band=5ghz-a/n frequency=5220 list=superchannel2 name=5220 width=20
add band=5ghz-a/n frequency=5230 list=superchannel2 name=5230 width=20
add band=5ghz-a/n frequency=5240 list=superchannel2 name=5240 width=20
add band=5ghz-a/n frequency=5250 list=superchannel2 name=5250 width=20
add band=5ghz-a/n frequency=5260 list=superchannel2 name=5260 width=20
add band=5ghz-a/n frequency=5270 list=superchannel2 name=5270 width=20
add band=5ghz-a/n frequency=5280 list=superchannel2 name=5280 width=20
add band=5ghz-a/n frequency=5290 list=superchannel2 name=5290 width=20
add band=5ghz-a/n frequency=5300 list=superchannel2 name=5300 width=20
add band=5ghz-a/n frequency=5310 list=superchannel2 name=5310 width=20
add band=5ghz-a/n frequency=5320 list=superchannel2 name=5320 width=20
add band=5ghz-a/n frequency=5330 list=superchannel2 name=5330 width=20
add band=5ghz-a/n frequency=5340 list=superchannel2 name=5340 width=20
add band=5ghz-a/n frequency=5350 list=superchannel2 name=5350 width=20
add band=5ghz-a/n frequency=5360 list=superchannel2 name=5360 width=20
add band=5ghz-a/n frequency=5370 list=superchannel2 name=5370 width=20
add band=5ghz-a/n frequency=5530 list=superchannel2 name=5530 width=20
add band=5ghz-a/n frequency=5540 list=superchannel2 name=5540 width=20
add band=5ghz-a/n frequency=5550 list=superchannel2 name=5550 width=20
add band=5ghz-a/n frequency=5560 list=superchannel2 name=5560 width=20
add band=5ghz-a/n frequency=5570 list=superchannel2 name=5570 width=20
add band=5ghz-a/n frequency=5580 list=superchannel2 name=5580 width=20
add band=5ghz-a/n frequency=5590 list=superchannel2 name=5590 width=20
add band=5ghz-a/n frequency=5600 list=superchannel2 name=5600 width=20
add band=5ghz-a/n frequency=5610 list=superchannel2 name=5610 width=20
add band=5ghz-a/n frequency=5620 list=superchannel2 name=5620 width=20
add band=5ghz-a/n frequency=5630 list=superchannel2 name=5630 width=20
add band=5ghz-a/n frequency=5640 list=superchannel2 name=5640 width=20
add band=5ghz-a/n frequency=5650 list=superchannel2 name=5650 width=20
add band=5ghz-a/n frequency=5660 list=superchannel2 name=5660 width=20
add band=5ghz-a/n frequency=5670 list=superchannel2 name=5670 width=20
add band=5ghz-a/n frequency=5680 list=superchannel2 name=5680 width=20
add band=5ghz-a/n frequency=5690 list=superchannel2 name=5690 width=20
add band=5ghz-a/n frequency=5700 list=superchannel2 name=5700 width=20
add band=5ghz-a/n frequency=5710 list=superchannel2 name=5710 width=20
add band=5ghz-a/n frequency=5720 list=superchannel2 name=5720 width=20
add band=5ghz-a/n frequency=5730 list=superchannel2 name=5730 width=20
add band=5ghz-a/n frequency=5740 list=superchannel2 name=5740 width=20
add band=5ghz-a/n frequency=5750 list=superchannel2 name=5750 width=20
add band=5ghz-a/n frequency=5760 list=superchannel2 name=5760 width=20
add band=5ghz-a/n frequency=5770 list=superchannel2 name=5770 width=20
add band=5ghz-a/n frequency=5780 list=superchannel2 name=5780 width=20
add band=5ghz-a/n frequency=5790 list=superchannel2 name=5790 width=20
add band=5ghz-a/n frequency=5800 list=superchannel2 name=5800 width=20
add band=5ghz-a/n frequency=5810 list=superchannel2 name=5810 width=20
add band=5ghz-a/n frequency=5820 list=superchannel2 name=5820 width=20
add band=5ghz-a/n frequency=5830 list=superchannel2 name=5830 width=20
add band=5ghz-a/n frequency=5840 list=superchannel2 name=5840 width=20
add band=5ghz-a/n frequency=5850 list=superchannel2 name=5850 width=20
add band=5ghz-a/n frequency=5860 list=superchannel2 name=5860 width=20
add band=5ghz-a/n frequency=5870 list=superchannel2 name=5870 width=20

y

We have the following channels loaded onto some of our units and and specifically we are having an issue with the a/n band on 433 dual interface boards. When upgrading from 6.29.1 to 6.30.2 the channels kick out of the wlan interface and I get an error that states channels not supported which appears on the wlan interface display.

hailnora · Thu Aug 13, 2015 11:50 am

Hey guys,

just updated my RB-800 from 6.27 to 6.30.2 and firmware from 3.22 to latest. Device works as access point with sector antenna.
Looks like everything works well for me.
Cheers

Kraken2k · Fri Aug 14, 2015 3:18 pm

I had problems since upgrade from 6.25 to newest version (at last incident it was 6.30.2) on RB1100AHx2 - after few days, the router stopped to respond - still running, reacts to cable connect/disconnect but no response on ethernet ports.

Yesterday I was able to connect to connect using serial port and found everything running as expected, but just no response to network traffic. When attempted to ping local addresses or even 127.0.0.1 I got the error message "No buffer space available" - later I found that an issue with the same symptoms existed in the past and was already fixed (route cache overflow).

Interesting thing is, that we have two RB1100AHx2 routers with the same config (just few different IP addresses), but the second one is just backup with a little traffic and deactivated IPsec tunnels - that one works without any issue so far.

I downgraded from 6.30.2 back to 6.25 which (according to the old thread about this issue) was claimed to fix this issue. We'll see in about 4 days.

So downgrade did not help - it happened again. When the cache size exceeded the maximum sice, router stopped to respond. We are now running on the 6.30.2 and the cache is growing again: 83% and still growing

so I bet there will be another crash soon (we have a lot of traffic through IPsec tunnels nowdays).

I have supout.rif from the last incident before reboot (the one from 6.25 version) - sent it via https://www.mikrotik.com/client/?ecom=support together with report, but got no response so far. Is that actually correct way how to report?

Fri Aug 14, 2015 3:21 pm

Kraken2k did you get a ticket number as a response? Normally you would just email support@mikrotik.com, the form is just a shortcut to the same. Sent it from your email and see if you get a ticket number.

_saik0 · Sun Aug 16, 2015 8:56 pm

I'm still having constant router reboots, whenever my PPPoE connection is reset.

A week or so ago (ROS x86 6.28) i had almost daily reboots, ALWAYS
exactly when my ISP PPPoE connection gets reset (24hrs mandatory
reconnect). I'm suspecting this has to do either with PPPoE or more
likely IPsec as the SAs towards my VPN endpoints have to be renewed
and i know for a fact this hasn't been very reliable in the past.

Then i upgraded to 6.30.2 and was pleasantly surprised as my uptime
went beyond 7 days. Sadly today after 10 days the same issue happened.

Wrote a ticket, hoping for the best..

This is happening only on my main x86 ROS.
rb2011 on remote locations don't suffer from this (more or less similar config, ipsec/l2tp vpn p2p links with ospf).

Mon Aug 17, 2015 7:31 am

firewall rule CONNECTION RATE option not working

http://wiki.mikrotik.com/wiki/Manual:Connection_Rate

Kraken2k · Tue Aug 25, 2015 12:23 pm

Kraken2k did you get a ticket number as a response? Normally you would just email support@mikrotik.com, the form is just a shortcut to the same. Sent it from your email and see if you get a ticket number.

Hi, yes - I sent an e-mail with and got the ticket number #2015081766000633

As advised, I disabled the route-cache in /ip settings but it did not help. We had another cache overflow yesterday (with this setting already active) and since then the cache is constantly growing again.

Wed Aug 26, 2015 10:55 am

http://forum.mikrotik.com/viewtopic.php?f=21&t=99881

Who is online