Community discussions

MikroTik App

Search found 126 matches

by osc86
Sat Feb 13, 2021 8:08 pm
Forum: Announcements
Topic: v6.47.9 [long-term] is released!
Replies: 65
Views: 12395

Re: v6.47.9 [long-term] is released!

hap ac2, exact same dns configuration. There must be something different on those devices showing this problem. Maybe it's a service or setting interacting with the dns, which is disabled on my devices.. just a guess. (Graph)
by osc86
Sat Feb 13, 2021 6:07 pm
Forum: Announcements
Topic: v6.47.9 [long-term] is released!
Replies: 65
Views: 12395

Re: v6.47.9 [long-term] is released!

strange, I still see no increase in memory usage. The screenshot I posted is from a 750G r3 (hEX). Does this only occur on arm devices?
We use this device at work to provide internet access to guests, not too much traffic, around 100GB/month.
by osc86
Fri Feb 12, 2021 3:09 pm
Forum: Announcements
Topic: v6.47.9 [long-term] is released!
Replies: 65
Views: 12395

Re: v6.47.9 [long-term] is released!

With 6.47.9, there is currently no indication of memory leaking when DoH is used. /ip dns set allow-remote-requests=yes use-doh-server=https://dns.adguard.com/dns-query verify-doh-cert=yes /ip dns static add address=94.140.14.14 name=dns.adguard.com add address=94.140.15.15 name=dns.adguard.com /cer...
by osc86
Tue Feb 09, 2021 7:59 pm
Forum: Announcements
Topic: v6.47.9 [long-term] is released!
Replies: 65
Views: 12395

Re: v6.47.9 [long-term] is released!

I updated to this version and enabled DoH. So far everything seems to work as expected. Will keep an eye on the memory usage.
by osc86
Fri Feb 05, 2021 10:13 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta4 [development] is released!
Replies: 183
Views: 23331

Re: v7.1beta4 [development] is released!

I can't get more than one peer per wireguard instance working at the time.
After a reboot the first client connecting "wins", all other don't receive traffic.
Multiple instances with just one peer each seem to work simultaneously.
by osc86
Fri Jan 29, 2021 12:35 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

Got it, thanks 👍
by osc86
Fri Jan 29, 2021 12:26 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

@peichl Thanks for the explanation. I assumed everything you enter there is treated as a string, because Data doesn't necessarily need to be an IP Address, it could also be a domain name, in case it's a CNAME or PTR record.
by osc86
Thu Jan 28, 2021 7:28 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

Maybe I'm doing something wrong, but the "contains" filter option doesn't work with "Data" in IP -> DNS -> Cache. If you don't put in the full string you won't get any results. But I guess this is what the "is" option is for. I only discovered this, because a few minute...
by osc86
Wed Jan 27, 2021 6:38 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

If you need anything MORE stable - go to Zyxel with their zyfwp.
but keep in mind that you share your admin account with anyone on the internet
by osc86
Fri Jan 08, 2021 6:23 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

I hope we'll get an official statement from a Mikrotik representative. As a workaround I'm currently forwarding all DNS requests to an OpenBSD machine running unbound, which handels DoH and CF just fine. Would be great if this could be done on the router itself.
by osc86
Fri Jan 08, 2021 5:51 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

It seems static DNS records of type FWD are ignored once a DoH server is added.
Is this a design decision or a bug? If this is not going to change, we'll never be able to use it, because we need conditional forwarding.
by osc86
Wed Dec 23, 2020 1:40 pm
Forum: Announcements
Topic: v6.48 [stable] is released!
Replies: 324
Views: 62020

Re: v6.48 [stable] is released!

Trusted checkbox appears twice in Bridge -> Ports -> <interface> -> General
by osc86
Tue Dec 22, 2020 9:46 pm
Forum: Announcements
Topic: v6.48rc [testing] is released!
Replies: 18
Views: 5093

Re: v6.48rc [testing] is released!

oh, now I see. But it is confusing, needs to be fixed. Didn't notice this in earlier versions.
by osc86
Tue Dec 22, 2020 6:19 pm
Forum: Announcements
Topic: v6.48rc [testing] is released!
Replies: 18
Views: 5093

Re: v6.48rc [testing] is released!

The Trusted checkbox at the top doesn't do anything? The bottom one is for DHCP Trust.
Image
by osc86
Fri Dec 04, 2020 12:21 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42937

Re: v7.1beta3 [development] is released!

Which features are missing in your opinion?
avahi / mdns-reflection; I have to do this on a raspberry pi now. It's a necessary feature, if you separate your iot stuff from production networks.
by osc86
Fri Dec 04, 2020 10:51 am
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42937

Re: v7.1beta3 [development] is released!

Is this a bug or some kinda of new feature, my bridge gets new MAC every time i reboot router (Hex), just installed beta3, so DHCP reservation is messed up as it gets new ip every reboot. No, this has always been the case - really annoying. The bridge uses the mac-address of one of the slaved inter...
by osc86
Thu Dec 03, 2020 3:17 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta3 [development] is released!
Replies: 262
Views: 42937

Re: v7.1beta3 [development] is released!

Updated my HAP AC2 from beta2 to beta3 and the device is constantly rebooting at about 1 minute of uptime.
There was only one critical log entry, the device restarted because of a kernel failure. Downgraded back to beta2.
by osc86
Wed Dec 02, 2020 4:40 pm
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 185
Views: 65295

Re: v6.48beta [testing] is released!

what's in the disk log?
/log pr where buffer=disk topics~"critical"
by osc86
Wed Nov 25, 2020 6:31 pm
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 185
Views: 65295

Re: v6.48beta [testing] is released!

6.48beta58: The default value for "LLDP MED Network Policy VLAN" is invalid. (IP > Neighbors > Discovery Settings)
by osc86
Wed Oct 28, 2020 6:23 pm
Forum: Announcements
Topic: v6.47.6 [stable] is released!
Replies: 39
Views: 7934

Re: v6.47.6 [stable] is released!

you only allow 6Mbit/s basic rate, I use 6,9,12,24. This works fine with all of my devices.
by osc86
Fri Oct 16, 2020 2:04 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta2 [development] is released!
Replies: 387
Views: 97138

Re: v7.1beta2 [development] is released!

We know that DHCP doesn't work in the current beta (for wireless clients), but for me the wireless interfaces are not passing any kind of traffic. Even if I use a static ip address / DNS / Gateway on a wireless device, it can't connect to any host on the network or the internet. The traffic is bridg...
by osc86
Fri Oct 09, 2020 4:48 pm
Forum: Announcements
Topic: v6.47.4 [stable] is released!
Replies: 68
Views: 16634

Re: v6.47.4 [stable] is released!

Another DHCP feature I request is when a static lease is added, a static ARP entry for this IP Address should also be created. On Interfaces with arp=reply-only this is very useful. When a device later uses the static address instead of dhcp, communication breaks if the ARP entry is not added manual...
by osc86
Wed Oct 07, 2020 7:37 pm
Forum: Announcements
Topic: v6.47.4 [stable] is released!
Replies: 68
Views: 16634

Re: v6.47.4 [stable] is released!

After updating to 6.47.4, my IPTV stopped working. Does anyone know how to fix it? Thank you in advance for your help. I also encountered problems with IPTV or multicast in general. I opened up a ticket with MT support, and currently there seems to be a bug where the "multicast-router=pemanent...
by osc86
Fri Sep 25, 2020 5:17 pm
Forum: General
Topic: Feature Request: ip ospf mtu ignore
Replies: 1
Views: 328

Feature Request: ip ospf mtu ignore

Can we please get an option to ignore different MTU sizes between routers that run ospf? This should be easy to implement.
I don't even know why ospf cares about this. It's job is to exchange routes, nothing more.
by osc86
Mon Sep 21, 2020 8:11 pm
Forum: Announcements
Topic: WinBox v3.27 released!
Replies: 96
Views: 17850

Re: WinBox v3.27 released!

Bridge -> VLANs -> +
Default Value for VLAN IDs is invalid. Happens with latest ROS stable and beta, so this might be a winbox issue.
Screenshot_20200921_190339.png
by osc86
Tue Sep 15, 2020 6:35 pm
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 185
Views: 65295

Re: v6.48beta [testing] is released!

- IGMP-Snooping feature on CCR breaks igmp-proxy. IGMP Join Requests generated by the router on the upstream interface are filtered out by the igmp snooping feature.
When disabled, it works fine, but overloads my eoip tunnels because the traffic is flooded to all ports (as expected).
by osc86
Thu Sep 10, 2020 1:22 pm
Forum: Announcements
Topic: WinBox v3.27 released!
Replies: 96
Views: 17850

Re: WinBox v3.27 released!

pe1chl, you are right. I downloaded an earlier Version of Winbox and it behaves the same.
I really thought this would open a new Winbox window, like when you start winbox.exe.
Sorry for that.
by osc86
Thu Sep 10, 2020 12:28 pm
Forum: Announcements
Topic: WinBox v3.27 released!
Replies: 96
Views: 17850

Re: WinBox v3.27 released!

Session > new, opens up a new session, and will not save upon exit if it's not done manually.
It may worked like this in previous versions, but with 3.27 it opens up nothing.
Tested on Windows 10 x64 and wine64.
It should open a new winbox window where you can select a new session.
by osc86
Wed Sep 09, 2020 2:37 pm
Forum: Announcements
Topic: WinBox v3.27 released!
Replies: 96
Views: 17850

Re: WinBox v3.27 released!

Menu: Session -> New doesn't do anything
by osc86
Thu Sep 03, 2020 9:43 pm
Forum: Announcements
Topic: v6.47.3 [stable] is released!
Replies: 50
Views: 11390

Re: v6.47.3 [stable] is released!

So far, one HAP AC2 didn't survive the update from 6.47.2 -> 6.47.3. No response via IP / RoMON. Have to check tomorrow what is going on. Another 951Ui-2HnD took ages to come back online again, and didn't reply to pings anymore, I had to reboot the router a second time (RouterBOARD FW Update) and ev...
by osc86
Wed Sep 02, 2020 6:15 pm
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 185
Views: 65295

Re: v6.48beta [testing] is released!

*) discovery - allow choosing which discovery protocol is used (CLI only);
EDIT: just found out, you can choose multiple protocols, comma separated. Thanks for this welcome change, I can finally disable cdp.
by osc86
Fri Aug 21, 2020 12:08 pm
Forum: RouterOS v7 BETA
Topic: v7.1beta1 [development] is released!
Replies: 103
Views: 43485

Re: v7.1beta1 [development] is released!

It has been a long time since I saw a client that by default preferred 2.4 over 5 GHz connection.
Amazon Echo devices do this all the time.. At least 1.Gen ones that I have.
by osc86
Mon Jul 27, 2020 9:14 pm
Forum: Useful user articles
Topic: Using RouterOS to QoS your network - 2020 Edition
Replies: 216
Views: 277451

Re: Using RouterOS to QoS your network - 2020 Edition

Any idea how a mangle setup with policy routing (mark routing) and connection / packet marking for qos could look like? Both need "stop processing" in prerouting chain. I experimented a bit with my existing rules, but I didn't get both working at the same time. Maybe I have to use a new ch...
by osc86
Fri Jul 10, 2020 12:56 am
Forum: Announcements
Topic: v6.48beta [testing] is released!
Replies: 185
Views: 65295

Re: v6.48beta [testing] is released!

Still no fix mentioned for discarded IPv6 Neighbor solicitations entering the bridge when igmp-snooping is enabled.
It's really annoying not being able to use IPv6 and igmp-snooping together on the same bridge.
by osc86
Fri Jun 05, 2020 1:38 am
Forum: RouterOS v7 BETA
Topic: v7.0beta8 [development] is released!
Replies: 180
Views: 69088

Re: v7.0beta8 [development] is released!

Did someone already check if enabling igmp-snooping still breaks IPv6 connectivity like in V6?
by osc86
Thu Jun 04, 2020 8:42 pm
Forum: Announcements
Topic: v6.47 [stable] is released!
Replies: 349
Views: 107586

Re: v6.47 [stable] is released!

Install an older smaller image, then upgrade to latest. Can't really recommend this. The past has shown that constantly downgrading and upgrading between different versions can lead to a corrupted configuration or an unstable system. The scripts used for converting the configuration are not perfect...
by osc86
Wed Jun 03, 2020 8:25 pm
Forum: Announcements
Topic: v6.47 [stable] is released!
Replies: 349
Views: 107586

Re: v6.47 [stable] is released!

almost 25000000 Sector writes.. what are you doing to your flash memory?
by osc86
Tue Jun 02, 2020 5:09 pm
Forum: Announcements
Topic: v6.47 [stable] is released!
Replies: 349
Views: 107586

Re: v6.47 [stable] is released!

jun/02/2020 16:05:59 system,error,critical error while running customized default configuration script: no such item jun/02/2020 16:05:59 system,error,critical Got this on a HAPac², boot time was increased too (about 2 minutes) EDIT: IMO it's a bit confusing that wifi, vlan and tunnel interfaces sh...
by osc86
Mon Jun 01, 2020 12:21 am
Forum: General
Topic: Clients lose IPv6-Connectivity after a few minutes [SOLVED]
Replies: 3
Views: 1157

Re: Clients lose IPv6-Connectivity after a few minutes [SOLVED]

Thank you for your reply.
I have disabled igmp-snooping and now it works.
I hope Mikrotik support is aware of this problem and already working on a fix.
by osc86
Sun May 31, 2020 6:00 pm
Forum: General
Topic: Clients lose IPv6-Connectivity after a few minutes [SOLVED]
Replies: 3
Views: 1157

Clients lose IPv6-Connectivity after a few minutes [SOLVED]

I have a few clients in a dmz (vlan 22) that use IPv6 for internet connectivity. After a machine boots, it gets the prefix and gateway via SLAAC, connectivity works without issues. Once the Neighbor entry for this client times out, and the client tries to establish a connection using IPv6, it fails....
by osc86
Wed May 27, 2020 10:08 pm
Forum: Announcements
Topic: v6.47rc [testing] is released!
Replies: 63
Views: 17258

Re: v6.47rc [testing] is released!

When ipv6 changes, win10 can get the new address normally, but it cannot be used. It is necessary to disconnect the network port and restart. When can it be fixed, this problem has been for many years. So, is this a bug in ROS or Windows? This is so annoying, my workaround currently is to disable i...
by osc86
Tue May 26, 2020 12:42 pm
Forum: Announcements
Topic: v6.47rc [testing] is released!
Replies: 63
Views: 17258

Re: v6.47rc [testing] is released!

*) winbox - fixed dates and times in interface link up/down properties (WinBox v3.24 required);
finally, thanks
by osc86
Fri May 22, 2020 9:32 am
Forum: Announcements
Topic: v6.46.6 [stable] is released!
Replies: 68
Views: 35376

Re: v6.46.6 [stable] is released!

@TheChad did you check the status of sip helper? (IP->Firewall->Service Ports->sip). Some people recommend to turn this off.
by osc86
Tue May 19, 2020 12:09 am
Forum: General
Topic: CCR 1009 - IPSEC throughput
Replies: 16
Views: 3390

Re: CCR 1009 - IPSEC throughput

I spent days in testing different configurations, the best I could achieve was ~140Mb/s using IPSec over GREv6/EoIPv6 using an MTU of 1390, ~25ms rtt between the routers. The other device was a CHR with 1 Gb/s WAN connection and plenty of resources. Neither of the devices cpu cores were fully utiliz...
by osc86
Mon May 18, 2020 6:00 pm
Forum: Announcements
Topic: v6.45.9 [long-term] is released!
Replies: 83
Views: 66367

Re: v6.45.9 [long-term] is released!

@nmt1900 seems this device is still running 6.45.8
by osc86
Mon May 18, 2020 5:20 pm
Forum: Announcements
Topic: v6.46.6 [stable] is released!
Replies: 68
Views: 35376

Re: v6.46.6 [stable] is released!

There is a bridge configured on CCR1036-12G-4S MikroTik Router. There are 9 ethernet interfaces in that bridge and one root port (that leads to Internet). The bridge is in 255.255.255.0 network. It is possible to sent WOL Magic packet from router using tool wol mac=... command and the computer wake...
by osc86
Fri May 15, 2020 10:34 am
Forum: Announcements
Topic: v6.45.9 [long-term] is released!
Replies: 83
Views: 66367

Re: v6.45.9 [long-term] is released!

rb4011igs. after update, bridge mac address changes non stop
my log filled with
"bridge" mac address changed to xx:xx:xx:xx:xx:xx
version 6.44.6 don't have this problem
Always set an admin mac address for bridges, or it will cause trouble sooner or later. Just my experience..
by osc86
Wed May 06, 2020 11:05 pm
Forum: Announcements
Topic: v6.46.6 [stable] is released!
Replies: 68
Views: 35376

Re: v6.46.6 [stable] is released!

It appears that the "interface slideshow" (configured in the interfaces screen under the LCD menu) on devices like the CCR1009 has stopped working in this release...
Anyone else who can confirm that?
For me it's working fine. Tested with 2 interfaces, timeout 10 seconds.
by osc86
Wed Apr 29, 2020 1:18 pm
Forum: Announcements
Topic: MikroTik newsletter May 2020 (#95)
Replies: 50
Views: 28807

Re: MikroTik newsletter May 2020 (#95)

The CCR2004-1G-12S+2XS looks promising. I would like to see some speed test results of GRE and EoIP over IPSec. With the current generation of CCRs (TILE) the results of using plain ipsec and tunnel over ipsec differ by a mile.
by osc86
Mon Apr 27, 2020 7:58 pm
Forum: Announcements
Topic: v6.46.5 [stable] is released!
Replies: 72
Views: 30418

Re: v6.46.5 [stable] is released!

got this 2 days ago on a hEX, never seen this before with any version of ROS installed. apr/25 23:34:52 system,error,critical router rebooted because some critical program crashed. On my CCR the snmpd is crashing every other day, every time a reboot is required to fix it. This happens since 6.46.1 o...
by osc86
Mon Apr 20, 2020 6:43 pm
Forum: Announcements
Topic: Winbox v3.23 released!
Replies: 60
Views: 30954

Re: Winbox v3.23 released!

Mikrotik really could've fixed this.. it has been reported long ago
winbox - Copy.jpg
by osc86
Sun Apr 19, 2020 1:48 pm
Forum: Announcements
Topic: v6.46.5 [stable] is released!
Replies: 72
Views: 30418

Re: v6.46.5 [stable] is released!

HAP AC2
After loading the router, 75 MB of memory is free, and after 4 days uptime, 55 MB of memory is free, I’ve cleaned the memory logs. Where did the memory leak?
No memory leak here with a HAP AC2
by osc86
Thu Apr 09, 2020 12:54 pm
Forum: Announcements
Topic: v6.46.5 [stable] is released!
Replies: 72
Views: 30418

Re: v6.46.5 [stable] is released!

Upgraded my CloudCore, CCR10009-7g-1c-1s+ and it has been everything but stable. Keep loosing WAN and Lan interface connection, so does not matter if I'm inside lan or outside, still lost connection. After a few min, or seconds in best case, it comes online again. Pingdom reported it as network err...
by osc86
Wed Apr 01, 2020 4:09 pm
Forum: Announcements
Topic: v6.46.4 [stable] is released!
Replies: 107
Views: 52523

Re: v6.46.4 [stable] is released!

smb on a security device is just crazy. It should be entirely removed from RouterOS. That's what nas devices are made for, firewalled behind the router.
by osc86
Sat Mar 14, 2020 1:49 pm
Forum: Announcements
Topic: v6.46.4 [stable] is released!
Replies: 107
Views: 52523

Re: v6.46.4 [stable] is released!

I had tried several times but the firmware was not get updated, it always stuck on v4.64.3. And what was the reason? It's in Log. Do not know what the reason is. After system reboot all logs were gone, no way to trace what happen. I had tried Winbox 3.21 and through script, the result was the same,...
by osc86
Mon Mar 02, 2020 9:23 am
Forum: Announcements
Topic: v6.46.4 [stable] is released!
Replies: 107
Views: 52523

Re: v6.46.4 [stable] is released!

SNMP stoped workin...
Did you get an autosupout file? I already created a ticket for this issue.
by osc86
Thu Feb 27, 2020 7:56 pm
Forum: Announcements
Topic: v6.46.4 [stable] is released!
Replies: 107
Views: 52523

Re: v6.46.4 [stable] is released!

I stand corrected (somehow)! It looks like Dude server cannot make RouterOS connections to other devices and ends up with STD failure, when RouterOS connection is made in context of limited user account. Previously it was possible with only "read" + "dude" permissions. Now it ha...
by osc86
Thu Feb 27, 2020 3:42 pm
Forum: Announcements
Topic: v6.46.4 [stable] is released!
Replies: 107
Views: 52523

Re: v6.46.4 [stable] is released!

Image

6.46.4 != 6.46.4 ok
by osc86
Tue Feb 25, 2020 7:38 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 130810

Re: v6.47beta [testing] is released!

yeah.. if everyone could stop posting images that are way to big, that'd be great.

I didn't complain about the post itself, but why do all the images have to be in 1000x1000+ px?
by osc86
Mon Feb 24, 2020 6:27 pm
Forum: RouterOS v7 BETA
Topic: VRF IPv6 support with RouterOS v7
Replies: 4
Views: 4057

Re: VRF IPv6 support with RouterOS v7

I hope this also includes routing marks for ipv6.
by osc86
Thu Feb 20, 2020 6:19 pm
Forum: General
Topic: GRE over IPSEC stopped working
Replies: 5
Views: 2145

Re: GRE over IPSEC stopped working

I will set this to unsolved again, because I just had an equal case where the ip route for my ipsec gre link network is not routing properly... And this time that trick is not working :/ I got the same error, even with a loopback interface. When you use 10. 24.1.112/29 instead, routing doesn't work...
by osc86
Thu Feb 13, 2020 6:22 pm
Forum: Announcements
Topic: v6.47beta [testing] is released!
Replies: 269
Views: 130810

Re: v6.47beta [testing] is released!

Please give us the option, to not use any dynamic servers at all, no matter what the source is.
I don't want to use any kind of dynamic dns servers, for obvious reasons.
Who is using the dns servers the vpn/isp provides anyway..
by osc86
Wed Jan 29, 2020 6:12 pm
Forum: RouterOS v7 BETA
Topic: Feature Request - Wireguard Protocol
Replies: 165
Views: 55357

Re: Feature Request - Wireguard Protocol

I really would like to have Wireguard Support in V7.
by osc86
Tue Dec 24, 2019 6:19 pm
Forum: Announcements
Topic: v6.46.1 [stable] is released!
Replies: 72
Views: 39344

Re: v6.46.1 [stable] is released!

Hello, something really weird with 6.46.1 I have all my IPv6 advertisements off, DHCPv6 off, yet my machines are getting IPv6 addresses. This behavior started after the upgrade. Make sure your "bridge" Interface is also turned off in IPv6/ND. Clients receive their address configuration th...
by osc86
Wed Dec 18, 2019 1:50 pm
Forum: Announcements
Topic: v6.46.1 [stable] is released!
Replies: 72
Views: 39344

Re: v6.46.1 [stable] is released!

osc86 - Do you see this error on multiple devices or on a single router? What happens when you try to create a supout file? I get this error quiet often but only on CHR. A simple reboot solves the problem. It seems to me that the filesystem at some point switches to read-only mode. I'll do more tes...
by osc86
Tue Dec 17, 2019 6:58 pm
Forum: Announcements
Topic: v6.46.1 [stable] is released!
Replies: 72
Views: 39344

Re: v6.46.1 [stable] is released!

these random 'could not save package' errors need to stop.
/sys sup-output
failed to create supout.rif file

Image
by osc86
Mon Dec 16, 2019 11:23 pm
Forum: The Dude
Topic: Agent reconnection problems on CCR
Replies: 1
Views: 3080

Agent reconnection problems on CCR

Using CCR as dude agent (not server) is impossible with latest firmware versions; with 6.46 it's even worse. Selecting the CCR as Agent for the HeX, HAP-AC2 and RB951 causes all monitored devices behind the CCR to toggle between on- and offline all the time. The Connection between the devices is abs...
by osc86
Wed Dec 04, 2019 6:48 pm
Forum: Announcements
Topic: v6.46 [stable] is released!
Replies: 113
Views: 42469

Re: v6.46 [stable] is released!

Quick Fix for the Dude: - stop dude server - copy entire /dude/files folder from 6.45.7 installation to your computer - rename files folder in 6.46 to something else - copy the files folder from your computer back to your 6.46 installation (/dude/) - start dude server I used Filezilla for this, ever...
by osc86
Wed Dec 04, 2019 5:55 pm
Forum: Announcements
Topic: v6.46 [stable] is released!
Replies: 113
Views: 42469

Re: v6.46 [stable] is released!

i have a lot of RB450/RB450G (very old ones, i know), RB2011, RB3011 and some few RB750 Gr3. Update was smooth on all of them, and the only problem i noted is that skin completly stopped working on the RB750 Gr3 devices. I can't even save a new skin, for example, is gets back to auth page and never...
by osc86
Tue Dec 03, 2019 6:11 pm
Forum: Announcements
Topic: v6.46 [stable] is released!
Replies: 113
Views: 42469

Re: v6.46 [stable] is released!

Background Images in the Dude won't load.
And what happened to the font, the "1" at the end isn't readable.
Image
by osc86
Mon Dec 02, 2019 11:10 am
Forum: Announcements
Topic: v6.46rc [testing] is released!
Replies: 16
Views: 10945

Re: v6.46rc [testing] is released!

No, sorry emils. I didn't realize the changelog in the first post isn't the full changelog.
Couldn't find anything DHCPv6 related, my bad.
When 6.46 has been officially released, I'll try it again and report back. Thanks!
by osc86
Mon Dec 02, 2019 10:44 am
Forum: Announcements
Topic: v6.46rc [testing] is released!
Replies: 16
Views: 10945

Re: v6.46rc [testing] is released!

When will this error be fixed where DHCPv6 Client stays forever on "rebinding" without getting actual dhcp information? You always have to manually hit release / renew to restart the dhcp client process, then it immediately gets the dhcp information and switches status to bound. Really ann...
by osc86
Fri Nov 29, 2019 2:15 am
Forum: Announcements
Topic: v6.45.7 [stable] is released!
Replies: 104
Views: 45444

Re: v6.45.7 [stable] is released!

Don't know if this is directly related to 6.45.7 or just another bug in The DUDE. Never seen this before. Agent and the device to monitor do run the same Version of RouterOS. Agent is hEX (mmips), the other device is hAP ac^2 (arm). I only get this error for one device. https://i.imgur.com/2EvDH6a.p...
by osc86
Mon Nov 25, 2019 12:47 am
Forum: Announcements
Topic: v6.45.7 [stable] is released!
Replies: 104
Views: 45444

Re: v6.45.7 [stable] is released!

Today morning my CCR1009 suddenly stopped responding to snmp requests. Seems that all snmp related settings are gone. No changes were made recently. An export of /snmp never finishes. https://i.imgur.com/Y9XovSv.png EDIT: After a reboot it works again, with all my snmp settings restored. I created a...
by osc86
Sat Oct 26, 2019 11:36 am
Forum: Announcements
Topic: Winbox v3.20 released!
Replies: 42
Views: 29862

Re: Winbox v3.20 released!

when will this finally be fixed?
by osc86
Tue Oct 15, 2019 12:34 am
Forum: Announcements
Topic: v6.45.6 [stable] is released!
Replies: 59
Views: 45221

Re: v6.45.6 [stable] is released!

DUDE Server looses connection to some Agents running 6.45.6 like every 2-10 minutes, but reconnects succesfully after one or two seconds.
I don't think it's a network issue, there is a packet loss of 0.1% out of 1000 packets sent.
by osc86
Wed Sep 11, 2019 8:57 am
Forum: Announcements
Topic: v6.45.5 [stable] is released!
Replies: 54
Views: 27566

Re: v6.45.5 [stable] is released!

IP Cloud not working in 6.45.5 or 6.46beta38. keeps updating and does not work. [X] /ip cloud> print ddns-enabled: yes ddns-update-interval: none update-time: yes status: updating... [CORE] > ip cloud pr ddns-enabled: yes ddns-update-interval: none update-time: yes public-address: X.X:X.X public-ad...
by osc86
Fri Sep 06, 2019 6:32 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 78870

Re: RouterOS v7.0beta1 (ARM)

I hope IPv6 VRF + policy routing will be added in a later beta release......
by osc86
Fri Sep 06, 2019 4:32 pm
Forum: General
Topic: RouterOS v7.0beta1 (ARM)
Replies: 203
Views: 78870

Re: RouterOS v7.0beta1 (ARM)

no luck with my hap ac2. Tried upgrading from 6.44 and using netinstall. Not a single frame is coming out of this thing on any ethernet port.
Edit: working now. Had to netinstall 6.45.5 only with system + dhcp package, than uploaded 7.0b1 npk and rebooted twice
by osc86
Wed Jul 24, 2019 12:00 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 55885

Re: v6.45.2 [stable] is released!

Why do you not just unbundle all those packages on these basic spec. devices? It's the only way they are going to work for the vast majority. Sticking your collective heads in the sand isn't going to help. People repeatedly tell you on here that it's broken, but you don't seem to be listening. Inde...
by osc86
Fri Jul 19, 2019 5:03 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 55885

Re: v6.45.2 [stable] is released!

Just bricked one of our CRS switches, connected via SFP to CCR. It was a testing one, but we still need to visit the site. How could SFP support get broken, if there are no SFP related changes? I expect fix to be released asap, not just in a mysterious stable release sometimes in the future? seems ...
by osc86
Fri Jul 19, 2019 2:09 pm
Forum: Announcements
Topic: v6.45.2 [stable] is released!
Replies: 206
Views: 55885

Re: v6.45.2 [stable] is released!

SNMPv3 still broken in The DUDE....
by osc86
Thu Jul 11, 2019 6:00 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 133952

Re: v6.45.1 [stable] is released!

Unlike TCP, GRE is completely stateless, there's no way the router knows if an incoming GRE packet is new, related, established or something else. On both endpoints of the tunnel you need to have these firewall rules set up. Output chain's default action is accept, so you only have to do it for inpu...
by osc86
Thu Jul 11, 2019 3:49 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 133952

Re: v6.45.1 [stable] is released!

@baks this is why the drop invalid rule is placed AFTER the accept established,related,untracked rule. 1 ;;; defconf: accept established,related,untracked chain=input action=accept connection-state=established,related,untracked log=no log-prefix="" 2 ;;; defconf: drop invalid chain=input a...
by osc86
Tue Jul 09, 2019 8:20 pm
Forum: Announcements
Topic: v6.44.5 [long-term] is released!
Replies: 100
Views: 55071

Re: v6.44.5 [long-term] is released!

File from 159.148.147.204 is corrupted.
https://159.148.172.226/routeros/6.44.5 ... 6.44.5.zip seems ok.
by osc86
Fri Jul 05, 2019 5:39 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 133952

Re: v6.45.1 [stable] is released!

Any updates regarding the SNMPv3 PrivAuth <-> Dude Issue?
For sure there's something wrong, I set up a new dude server and this "bad packet" error happens on all my devices running 6.45.1, LibreNMS works fine, though.
by osc86
Mon Jul 01, 2019 7:03 pm
Forum: Announcements
Topic: v6.45.1 [stable] is released!
Replies: 416
Views: 133952

Re: v6.45.1 [stable] is released!

My configurations use all types of tunnels.

GRE, IPIP, EoIP. All of them, over IPsec without any problems on my end.
same here, no issues.
by osc86
Fri Jun 14, 2019 2:42 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

Will it ever be possible to filter ipsec logs by peer? Debugging is pretty much impossible if you have a ton of tunnels active.
by osc86
Sat May 25, 2019 12:25 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

I can also confirm snmpv3 does not work in 6.45rc50 with Observium or snmpwalk.
@slackR Did you already open a ticket at Mikrotik Support?
by osc86
Wed May 22, 2019 1:42 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

for some reason, my device isn't responding to SNMPv3 queries anymore, since I upgraded to beta50. I'm using LibreNMS for monitoring my devices, also tried manually with snmpwalk -> no response. EDIT: [admin@CORE] /snmp community> pr d Flags: * - default 0 * name="librenms" addresses=::/0 ...
by osc86
Fri May 10, 2019 5:58 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

osc86, I can not reproduce the issue. Can you please send a supout.rif file to support@mikrotik.com?
Done. [Ticket#2019051022005463]
by osc86
Thu May 09, 2019 5:54 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

After upgrading from beta31 to beta34-42, all IKEv2 PSK ipsec tunnels don't come up, getting Authentication failed in the logs (yes, psk is the same on both sides, hasn't been changed). Downgrading to beta31 again resolves the issue. 16:50:20 ipsec notify: AUTHENTICATION_FAILED 16:50:20 ipsec,error ...
by osc86
Fri Apr 19, 2019 3:56 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

After ugrading from beta31 to beta34, none of the ipsec tunnels work. Reverted back to b31.
by osc86
Wed Apr 17, 2019 12:52 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

After I had big problems with ipsec in 6.44.1/hAP ac I remained using 44.1 for a while. Thinking that beta31 had already those issues fixed, I tried to upgrade with the following IPsec configuration: /ip ipsec peer add exchange-mode=ike2 name=router passive=yes /ip ipsec policy group add name=RoadW...
by osc86
Tue Apr 16, 2019 11:08 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

So this means wired 802.1x is now supported I guess. Any idea how we can configure this through CLI ? Also is there a planned GUI support version of it coming soon ? Before anyone asks. Configuration options for dot1x are not yet enabled in this release. Coming in next beta, most likely next week.
by osc86
Sat Apr 13, 2019 6:34 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

I have an CHR install which capsman is running. On 6.45beta27 I noticed that when I try to see on winbox the "Configurations" tab under Capsman settings or "CAP Interface", winbox close/crash without any error on Log window. I also updated to latest beta (6.45beta31) and sitll i...
by osc86
Sat Apr 13, 2019 10:47 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

I hope they'll add an option to remove single SAs in the future.
by osc86
Fri Apr 12, 2019 2:39 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

----------------------
!) dot1x - added support for IEEE 802.1X Port-Based Network Access Control (CLI only);
----------------------
Amazing news! Thanks!
by osc86
Fri Apr 05, 2019 12:27 am
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

igmp-snooping is killing ipv6 connectivity, by not forwarding neighbor solicitation messages.
FF02:1:XXXX:XXXX isn't listed in MDB table, so no NS messages are exchanged between hosts.
This happens at least since beta22.
by osc86
Sun Mar 31, 2019 12:37 am
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 29861

Re: v6.44.1 [stable] is released!

so why are we sitting with &^%%$& 16MB of NANDs
I agree, this is ridiculous
by osc86
Sun Mar 31, 2019 12:10 am
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 29861

Re: v6.44.1 [stable] is released!

uninstall tr069 package, remove everything from /files, upgrade only routeros, after suiccessful upgrade install tr069 again
by osc86
Fri Mar 15, 2019 4:05 pm
Forum: Announcements
Topic: v6.44.1 [stable] is released!
Replies: 86
Views: 29861

Re: v6.44.1 [stable] is released!

Tested Version on CCR1036-12G-4S - ROMON is not showing up in a discovery - ROMON appears to have been broken or some part of it. - CCR1036 is not showing up in ROMON list anymore after 44.1 installed. Anybody else seeing this.... or not! ? Updated a CCR1009, 2xCHR, 951Ui-2HnD, 750G r3, 2x 941-2nD ...
by osc86
Wed Mar 06, 2019 7:22 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 57531

Re: v6.44 [stable] is released!

BUG – v.6.44 on ARM boxes RB3011 is losing IPSEC configuration After upgrade of ARM boxes (RB3011) to latest stable version 6.44, IPSEC is not working. Winbox GUI /ip ipsec section in is empty and no new config parameters can be added; In console /ip ipsec export gives just info that all subsection...
by osc86
Tue Mar 05, 2019 6:38 pm
Forum: Announcements
Topic: v6.45beta [testing] is released!
Replies: 305
Views: 106616

Re: v6.45beta [testing] is released!

*) bridge - fixed possible memory leak when using "ingress-filtering=yes" on bridge interface; How did this bug manifest itself?? Been using this setup for a while and didnt notice any issues, on the other hand I dont really monitor that closely. I reported this problem to mt support. It ...
by osc86
Thu Feb 28, 2019 12:02 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 57531

Re: v6.44 [stable] is released!

Another "bug" from version to version, form stable to stable release

"Future" time on GRE tunnels in (up\down) status field
May be someone know how it resolve?
Thanks!
Check System / Clock

All tunnel interfaces show the correct date and time on my devices.
by osc86
Tue Feb 26, 2019 3:26 pm
Forum: Announcements
Topic: v6.44 [stable] is released!
Replies: 219
Views: 57531

Re: v6.44 [stable] is released!

updated a CCR1009 from 6.43.12 to 6.44 -> Lost connectivity on all eoip (ipsec) interfaces. Update: so it seems that this update broke ipsec completely on my device. The router locks up every time I try to access any menus under ip / ipsec. I only have about 5 tunnels configured with very basic sett...
by osc86
Mon Feb 25, 2019 5:57 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 21425

Re: v6.43.12 [stable] is released!

I noticed a memory leak when bridge is set to frame-types=admit-only-vlan-tagged.
What is the device model affected?
CCR1009-7G-1C-1S+
by osc86
Mon Feb 25, 2019 4:30 pm
Forum: Announcements
Topic: v6.43.12 [stable] is released!
Replies: 49
Views: 21425

Re: v6.43.12 [stable] is released!

I noticed a memory leak when bridge is set to frame-types=admit-only-vlan-tagged. Winbox and cli are unable to display interfaces / vlan / firewall rules etc after a few hours. A supout file takes like forever to generate and is corrupt when done.
by osc86
Thu Dec 20, 2018 11:06 pm
Forum: General
Topic: Tapatalk SQL error
Replies: 2
Views: 841

Re: Tapatalk SQL error

are they still working on a fix?
IMG_0658.jpg
by osc86
Wed Dec 19, 2018 10:47 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 117993

Re: v6.44beta [testing] is released!

Most likely a supout.rif file is already generating in the backgound. Is there an autosupout.rif file in the Files menu? No, there are no files at all in the files menu. I had rebooted and tried again. It is still trying to generate the supout 5 hours later. If I go to the command line and type &qu...
by osc86
Wed Dec 12, 2018 11:43 pm
Forum: General
Topic: IPSec from OSX isn't working [SOLVED]
Replies: 2
Views: 1956

Re: IPSec from OSX isn't working [SOLVED]

thanks FransUrbo!
This also fixed the problem with iOS devices.
by osc86
Tue Dec 04, 2018 10:40 pm
Forum: Announcements
Topic: v6.44beta [testing] is released!
Replies: 365
Views: 117993

Re: v6.44beta [testing] is released!

I still see SAs are not removed when they expire. Why isn't it possible to remove single SAs?
by osc86
Fri Sep 14, 2018 12:09 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 41175

Re: v6.43 [current] is released!

After updating CCR1009 to 6.43 there is a problem with port stability! Has anyone else encountered such a problem?
I doubt this is a software issue. Seems only one port is affected.
I don't have such a problem on my CCR1009.
by osc86
Wed Sep 12, 2018 3:31 pm
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 41175

Re: v6.43 [current] is released!

We have a huge memory leak on the new 6.43 code running on our CRS317's. Some devices seem to be more affected than others, but within 10hrs the device reboots due to low memory. I encountered the same problem on a CCR while it was still rc. MT Support was unable to reproduce / fix it. Only a netin...
by osc86
Wed Sep 12, 2018 10:25 am
Forum: Announcements
Topic: v6.43 [current] is released!
Replies: 148
Views: 41175

Re: v6.43 [current] is released!

The comment column is missing in ipsec peer menu in winbox, and my id is shown twice
by osc86
Fri Aug 24, 2018 8:07 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 152541

Re: v6.43rc [release candidate] is released!

osc86, we are aware of the issue. It will be fixed until 6.43 is released in current release channel.
Something must have been changed with ipsec processing in rc64. No traffic is passing through the tunnels.
I moved back to 56, where everything works fine.
by osc86
Fri Aug 24, 2018 4:04 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 152541

Re: v6.43rc [release candidate] is released!

I lost all ipsec connections after updating to rc64 because of a bug in peer profiles.

Image
by osc86
Tue Jul 24, 2018 5:46 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 152541

Re: v6.43rc [release candidate] is released!

even more important, the memory leak is still not fixed
by osc86
Sun Jul 22, 2018 1:04 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 152541

Re: v6.43rc [release candidate] is released!

Yesterday I set up an ipsec connection between 2 devices, one running 6.42.6 the other 6.43rc44. All IKE related settings were the same on both devices, but I wasn't able to establish a connection, unless I changed the hash algorithm to sha256 on the one running 6.42.6 and sha1 on the other. When I ...
by osc86
Sat Jul 21, 2018 1:39 pm
Forum: Announcements
Topic: v6.43rc [release candidate] is released!
Replies: 557
Views: 152541

Re: v6.43rc [release candidate] is released!

anyone noticing a memory leak that ends with a kernel panic? this is on a CCR1009-7G-1C-1S+ running v6.43rc44

Image
by osc86
Sat Feb 17, 2018 2:36 pm
Forum: Announcements
Topic: v6.42rc [release candidate] is released!
Replies: 538
Views: 128476

Re: v6.42rc [release candidate] is released!

CPU hog issue is still not fixed in rc28
(Ticket#2018010522007579)

Image
by osc86
Thu Dec 28, 2017 10:08 pm
Forum: General
Topic: Help with IKEv2/IPsec client configuration
Replies: 37
Views: 17419

Re: Help with IKEv2/IPsec client configuration

any updates on this, did you get it working?
by osc86
Tue Dec 26, 2017 5:36 am
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 102001

Re: v6.41 [current]

Adding or removing vlans in MSTI makes my 1009 unreachable on all interfaces, have to power cycle to regain access.. 100% reproducible
by osc86
Sun Dec 24, 2017 4:14 pm
Forum: Announcements
Topic: v6.41 [current]
Replies: 304
Views: 102001

Re: v6.41 [current]

How to correctly add virtual interfaces like eoip tunnels to the bridge? I tried 2 ways to get this working, without any luck. 1. When I add the tunnel interface as port to the bridge and create vlans on the bridge, the interface never comes up because of constant STP Learning/Discarding. I didn't f...
by osc86
Wed Aug 09, 2017 1:47 pm
Forum: Announcements
Topic: v6.41rc [release candidate] is released! New bridge implementation!
Replies: 561
Views: 153975

Re: v6.41rc [release candidate] is released! New bridge implementation!

*) ipsec - allow to specify remote peer address as DNS name (CLI only);
does this mean ipsec tunnels can be established between 2 sites with dynamic ip addresses, so I can get rid of the additional L2TP Tunnel?