MikroTik

DjM

Version 6.35rc5 has been released.

Changes since previous version:
*) ssh - fixed connection stalling.

Hello MikroTik support team,

Can you please share more details of this bug?
- In which version was the bug introduced?
- In which cases is the login process stalling?

Thank you

DjM

@strods:
Thank you for confirmation.
I'm aware about the official communication channel, but I have tried is also here to share this information also with community.

@Genkun:
Thank you for sharing the results of your tests.

@MikroTik:
Thank you for implementing bugfixes to this version

DjM

@honzam:
Good hint

@macgaiver:
I hope the same, but I would like to have some official answer from MikroTik.

Finally I will have to do some internal testing, but it would be nice to have an official answer from support team.

DjM

Hello MikroTik support team, Is mipsle platform (RB5xx) supported by this version, please? Or the last supported version for this platform is 6.32.3. Thank you New download page explains that nicely. and What's new in 6.34 (2016-Jan-29 10:25): *) mipsle - architecture support dropped (last fully su...

DjM

Hello MikroTik support team,

Is mipsle platform (RB5xx) supported by this version, please? Or the last supported version for this platform is 6.32.3.

Thank you

DjM

Please get fixed:

[Ticket#2015032266000169] Unable to set comment on dhcp-server alert via CLI
[Ticket#2015062266000743] Double slashes in tool fetch URL

Thank you

DjM

More case studies (for example L2 connectivity via VPLS between multiple sites, multiple customers).

DjM

Hello MikroTik support team,

is bug below fixed, please?

Ticket#2015032266000169 Unable to set comment on dhcp-server alert via CLI

Thank you

DjM

Hello MikroTik support team,

[Ticket#2015032266000169]

I'm still not able to add a comment for /ip dhcp-server alert via CLI, please see ticket for details.

DjM

Just to let you know. This problem was confirmed by mikrotik to be an error finally. After my further investigation, it is not linked to PFS nor to ros versions mismatch nor to SSTP only, as it also happens to L2TP. The basic of the problem lies in the dynamically assigned IP to the client device t...

DjM

Hello MikroTik support team, [Ticket#2015032266000169] It is not possible to add comment for "/ip dhcp-server alert" object via CLI. Adding comment via Winbox is working fine, but comment added via Winbox is also not visible via CLI. Tested on: ROS 6.27, RB2011, RB951 Update: Based on info...

DjM

:o Dear DjM, I was looking for it since long. Can you please provide more information? What ROS version you are using? Can you please provide any sample script in which we can pass variable? Hello cicserver, I'm using ROS 6.27, try to use the code which I have provided in my previous post - just th...

DjM

After years it seems that we get this working: 1) Make sure that there is no ":local" or ":global" definition of used variables in the script code (variable name used in SMS text cannot be declared/initialized in script source code) 2) Make sure that the variables are not defined...

DjM

DjM - Please try to do the following: 1) Delete your variable from "/system script environment"; 2) Remove ":global myvar" definition from script and leave only log and beep functions. It works for me like that. Please let us know how it goes. Hello strods, great, it is working....

DjM

Normis, MikroTik support team, what is the reason of no-reply or no-answer to my question related to SMS bug, please? @normis: What about setting variable in script via SMS - multiple year bug? http://forum.mikrotik.com/viewtopic.php?f=9&t=58934 Multiple support tickets created for this bug. Tha...

DjM

Oh. This was unexpectedly fast release. It is true. Mikrotik Support is there any known serious problem in 6.26? since there were no other big issues, we wanted to fix the health very badly :D zero bugs left @normis: What about setting variable in script via SMS - multiple year bug? http://forum.mi...

DjM

FYI v6.25 was the problematic version for me. I even reported that to support. I was fixed in v6.26 Make sure that you have both ends of the tunnel with latest version. I just upgraded both ends of my SSTP tunnels tp 6.27 - all is working as expected @macgaiver: Thank you for hint, upgrade of both ...

DjM

Hello community, results after quick test: 1) SSTP stop working - RB (RB2011UAS-2HnD, firmware 3.19) is not able to connect to SSTP server 6.25 (RB750) - SSTP clients 6.25 (RB750, RB951-2n) are not able to connect to 6.27 SSTP server (RB2011UAS-2HnD) - in /tool profile there are CPU peaks (80%) for ...

DjM

Hello MikroTik suppor team,

multiple-year bug - initialize variable via SMS:

http://forum.mikrotik.com/viewtopic.php?f=9&t=58934
Ticket#2012083066000462
Ticket#2013010766000731

DjM

*) ntp - fixed vulnerabilities;

Any details on this point, please?
- Is the fix related to NTP server?
- Which bugs were fixed?

Thank you

DjM

I can also report all devices are running fine with 6.23 (multiple RB4xx, RB951xxx, RB2011xxx).

@MikroTik support team:
Have you overlooked my question related to setting variable via SMS bug?
http://forum.mikrotik.com/viewtopic.php ... 01#p459282

Thank you

DjM

Please test the igmp proxy multicast. I'm currently running the version 6.7. This is the procedure. But why does not work after the 6.7? to fix this problem IGMP proxy is working fine - one listener behind IGMP proxy, switching between mcast streams without any issues. RB2011UAS-2HnD, ROS 6.23, fir...

DjM

There is something strange about SSTP client in this version: if there is just one SSTP connection from router, no problem; if there is one SSTP and one PPTP connection from router, no problem; if I manually connect router to two SSTP connections, no problem; if there are two SSTP connections, afte...

DjM

Hello MikroTik support team, thank you for starting more active communication between releasing new version and after releasing it. I would like to ask you about one old topic (from 08/2012) - setting variable via SMS - what is the chance that this bug will be fixed? Is there any ETA for fixing of t...

DjM

Question is answered here:
http://forum.mikrotik.com/viewtopic.php ... 73#p459061

DjM

DjM, we have our own OPENVPN code, that does not have any relations to ovpn mentioned in the link.

Thank you for the answer.

DjM

Hello MikroTik support team,

is the OpenVPN server vulnerable to bug reported some days ago? - it was already asked here: http://forum.mikrotik.com/viewtopic.php?f=2&t=91776

Thank you

DjM

Hello MikroTik support team, it's a quite old topic, but the idea is still actual I think :-) 1) Are there any plans to implement compression tools (tar, gzip, etc.) in /file menu in ROS, please? 2) Due to keeping a minimal size of ROS, will be the form of different .npk package acceptable? I know t...

DjM

Thanks, that helped when loading directly through winbox, do I need to open and close it successfully a few times to clear the "last session" information from loading it in the dude? K+1? :-) For loading from Dude I'm not sure how is the winbox internally called from this inteface, but yo...

DjM

ROS 6.13 the situation is even worst with the stability of my windows sstp clients. the connection drops after some 2-5min. seems like it's known problem: What's new in 6.14rc10 (2014-May-26 14:52): *) sstp - fixed problem where session was closed every 2min; Yes, it's confirmed bug - SSTP is broke...

DjM

Is anyone else seeing their Winbox crash when they double click to open the WLAN1 interface on the interfaces tab on the first tab of the Wireless window? I have noticed this on some Sextant G models when updated to ROS6.13 and with the latest firmware for it. Looking to see if others have experien...

DjM

@MikroTik: is this fixed in 6.14? @enc: I was able to replicate the issue with firewall rules only in case that sstp-client binded into sstp-server interface and sstp-interface used in firewall rule was ROS in versions range 6.8 - 6.13 (including). SSTP clients 6.7, 5.26, 6.14rc10 are working fine ...

DjM

In this case I can see two options: 1) Wait for 6.14 release, there are also some SSTP bug fixes 2) Generate support file and send it to MK support The third possible option can be selecting a different interface in firewall rule, apply configuration, then select back the sstp-server interface and ...

DjM

@liquidcz: K+1? :-) I have tested the 6.14rc6 in my lab environment and based on first tests with SSTP I'm not able to replicate the SSTP timing out issue, so it seems that it was really fixed. So the final result is probably: SSTP is broken in ROS 6.8 - 6.13 (including), if there is sstp-server int...

DjM

Workaround with script is not a good option, I think. Ask for 6.14rc version, where are sstp-server interface bindings fixed (related to another SSTP issue), and if the issue will be active also in the RC version, then the last step is to generate support file and send it to MK, I think. For me are ...

DjM

In this case I can see two options: 1) Wait for 6.14 release, there are also some SSTP bug fixes 2) Generate support file and send it to MK support The third possible option can be selecting a different interface in firewall rule, apply configuration, then select back the sstp-server interface and a...

DjM

It seems that we have a good news from MK support team:

Thank you for the report. We were able to repeat the issue and fix it. Please wait
for v6.14 release.

So let's wait for version 6.14 and then we should be able to close this forum thread

DjM

Something I just noticed after updating two routers to 6.13: When I connect via SSTP from one ROS client to one ROS Server, the firewall rule associated with this SSTP connection stays red on the server after connection. It was working before on previous versions. Is there a new parameter that I di...

DjM

I was able to capture the issue between ROS 6.13 -- ROS 6.13, I have generated a support files and send to MK support via [Ticket#2014051266000793], let's see if it will move forward

DjM

@liquidcz:
Thank you for answer. In this case we are having a similar scenario where the issue is visible.

I was also able to get this issue ongoing also with version 6.13, so I will try to repeat it and send support information to MK support. Have you already provided information to MK support?

DjM

@Disassembler, liquidcz:
Are you using sstp-server interface bindings on server's side, or do you have dynamic sstp-server interfaces only?

I will do a deeper tests in my environment and if I will be able to capture the issue, I will let it know here and to support, too.

DjM

It seems that 6.13 has fixed the issue with SSTP timing out. Based on my tests the issue was connected with sstp-server interface bindings, after upgrade from 6.12 to 6.13 check you firewall rules, where sstp-server interface bindings were used, as they was marked as invalid after upgrade (disable +...

DjM

My issue with SSH client was solved in ROS 6.13rc23 via [Ticket#2014051266000668]. In case that there will be still an issue with MK SSH client, send output from "debug ssh" on MK side and from SSH server side to support@mikrotik.com, if requested.

DjM

I have the same issue - connection to some SSH servers is working, to same not. [Ticket#2014051266000668] has been created.

DjM

I'm having the same issues with "negotiation timeout" in SSTP VPNs. Used RBs: RB951Ui-2HnD RB433UAH RB750 ROS version: 6.12 - issue is ongoing 6.7 - no issues with SSTP VPNs There was no configuration change before and after upgrading from 6.7 to 6.12 . I have already created [Ticket#20140...

DjM

As a reference I have had issues with 6.12 and using the SSTP VPN. After upgrading clients can connect but it will not pass VPN traffic (No changes to the configuration at all). I have since rolled back to 6.10 and it is working again perfectly. If anyone wants me to send logs feel free to send a m...

DjM

Your bug is still open, and is being investigated. Sorry if that wasn't clear. We answer ALL emails. If you didn't get an answer, either it's in your junk folder, or we are still looking into it. Hi normis, I think that "Thank you, we are working on it, update is awaited in next XX days" ...

DjM

Is there a reason the client cannot be updated? I have SSTP working site-to-site with 6.10 on both ends. You could validate what is going on with Wireshark to see why the TLS negotiation fails by looking at the handshake. I suspect you will end up having to update both ends. Hello nicklowe, yes, in...

DjM

"Encryption negotiation rejected" on SSTP server (6.10) when SSTP client (6.7) was trying to connect. After rolling back to 6.7 everything is working fine.

Is there any fix/solution for this issue, please?

Thank you

DjM

>OpenVPN server doesn't work! Clients log off immediately after connection establishing. Downgrade to 6.7. Can confirm. Same goes for PPTP. I can also confirm issue with VPNs: - SSTP from MK 6.9 -> MK 6.7 (server) is working - SSTP in other cases = not working - OVPN = not working Downgrade back to...

DjM

>OpenVPN server doesn't work! Clients log off immediately after connection establishing. Downgrade to 6.7. Can confirm. Same goes for PPTP. I can also confirm issue with VPNs: - SSTP from MK 6.9 -> MK 6.7 (server) is working - SSTP in other cases = not working - OVPN = not working Downgrade back to...

DjM

Issue: Unable to initialite a system variable via SMS Description: It is not possible to initialite or change a system variable via SMS as it is described on: http://wiki.mikrotik.com/wiki/Manual:Tools/Sms#Syntax Bug is confirmed also by MikroTik, forum thread: http://forum.mikrotik.com/viewtopic.p...

DjM

MikroTik support team,

any news on this topic, please?

DjM

The bug was officially reported by my ticket on 08/2012, from this time I don't have any information about bug fix. I also don't know about any other way how to pass argument via SMS to script.

DjM

Hi tomaskir,

unfortunatelly the bug is still here, there is no update from MikroTik support team about ETA or fixing of reported issue

Bug is confirmed, all technical details were provided in ticket mentioned at the beginning of this topic.

DjM

Hi vipe,

can you, please, share more details about your ticket?

Thank you

DjM

Hello MikroTik support team,

what is the current status of solving this bug, please?

Thank you

DjM

There is still no update from MikroTik support team's side on [Ticket#2013010766000731]. There was no reply on reminders send on 29/May and 21/May, also no information in releaselog of ROS that the issue has been fixed. I have send another reminder to support team on 03/June, let's hope that there w...

DjM

Hello MikroTik team,

is the issue with setting script variable via SMS solved, please?

Ticket#2013010766000731, opened in 01/2013.

Thank you

DjM

Hello MikroTik support team,

any update on [Ticket#2013010766000731] - setting variable in script via SMS is not working, please? When we can await the fix, please?

Thank you

DjM

Hello MikroTik support team,

any update on Ticket#2013010766000731, please?

Thank you

DjM

Hello support team,

any update on SMS script value issue, please?

http://forum.mikrotik.com/viewtopic.php?f=9&t=58934
Ticket#2013010766000731
Ticket#2012083066000462

I haven't receive any update from your side for more than 2 months.

Thank you

DjM

Unfornatelly nothing - no information in changelog of ROS 5.x or 6.x, also no asnwer on both support tickets.

@MikroTik support team: Please provide update on this issue which is open for more than 2 months.

Thank you

DjM

There was no update from MikroTik support team for more than month, I have opened a new ticket for this bug - Ticket#2013010766000731

DjM

Last reply from MikroTik support is that the bug will be fixed in 6.x version, in next release from 6.0r2, I'm keeping the ticket opened for this

DjM

Hello MikroTik forum members,

there was a bug confirmed by MikroTik team, it should be fixed in next release.

DjM

Hello MikroTik forum,

it is not working also for me with suggested examples. I created Ticket#2012083066000462 for this, let's hope that we will get the solution.

DjM

Hello,

try to use "~" instead of "=".

DjM

Hi futuretech,

finally there was changed VPN peer with OVPN support, so I haven't tested IPSec VPN between MikroTik -- Juniper SSG5.

DjM

Hello MikroTik support team,

was both DDoS issues solved in released 5.16 version, please? I can't see information related to this topic in changelog.

Thank you

DjM

Hi ditonet,

thank you for information, I will try to configure it in this way.

DjM

Thank you, ditonet, for configuration sharing. I will be able to test the configuration next week, so friday is very great date for me

I will look forward for information from you

DjM

Hello,

can you, please, share the configuration from both sides? - just the part needed from IPSec configuration, it will be very usefull.

Thank you

DjM

I can confirm an issue with SSTP server described above "self signed certificate in certificate chain" after upgrading from 5.12 to 5.13 . Try to remove CA certificate used for SSTP server and then import it back, for me it started working again (SSTP server side).

DjM

Voting for VRF aware services instead of making magic through policy routing

Also statefull failover in HA will be really appreciated.

DjM

I'm also interested if somebody get this VPN screnario working. In my case on the Juniper's side will be SSG5 firewall.

Thank you

DjM

The first tests shows that the issue with interface ARP mode reply-only and IPv6 stateless autoconfiguration is solved in ROS 5.12, let's wait for a final release

DjM

The first tests shows that the issue with interface ARP mode reply-only and IPv6 stateless autoconfiguration is solved, I'm looking forward for final release of 5.12

DjM

Mentioned topic was about that when I configure arp=reply-only, the IPv6 stateless autoconfiguration was not working to clients, also neighbour discovery was not working.

Is there any schedule when will be the final version of 5.12 relased, please?

Thank you

DjM

Will be also this issue related to IPv6 ND and ARP mode on interface fixed, please?

http://forum.mikrotik.com/viewtopic.php?f=2&t=56374

Thank you

DjM

I'm running ROS 5.8 on RB433AH with actual firmware and there is no problem. Send support file to MikroTik support for analyst.

DjM

Yes, it seems that it is related to the same issue. Let's hope that it will be solved

DjM

Ok, thank you for update, I wish you a good luck and I will be waiting for fixing the issue

In case of testing release with fix of this bug, please let me know and I can test it, if it will be needed.

Thank you

DjM

Thank you for information.

What is the estimated date for fixing this issue, please? - next ROS 5.9?

Thank you

DjM

Hello all, I have a problem with IPv6 ND (neighbour discovery) and interface configured in ARP mode reply-only. Scenario: RB433AH [ether2] ----- [eth] Windows client RB433AH - tested ROS 5.7, 5.8 Windows client - tested Windows XP SP3, Windows 7 - configuration on Windows XP is stateless IPv6 (only ...

DjM

I'm also voting for one of these options:

1) Session idle timeout
- I got negative answer from MikroTik support about adding this feature at this moment

2) Remove active user session
- the same as option (1)

DjM

Hello support team,

how much time is "after time" please? I have a "dead" sessions which are taking more than 7 days. It is possible to configure the idle timeout for SSH/webfig session?

Thank you

DjM

Hello all, could you, please, help me, how can I remove inactive (death) SSH/webfig user session on ROS? For example - I connected to ROS via SSH/webfig, but during this session the connection was broken and the user/session is still visible in: /user active print The connection is also not existing...

DjM

Hello MikroTik support, discussion forum,

any update, please?

Thank you

DjM

Hello MikroTik support team, forum, is IPv6 protocol supported to go through OpenVPN tunnel in OpenVPN implementation in MikroTik? I have the scenarion: routerA -----VPN----- routerB If VPN is created via SSTP, both of routers automatically get local IPv6 IP addresses (fe80::xx/64) on tunnel interfa...

DjM

"Bad data received" issue is fixed in final 5.3 .

DjM

Upgraded RB433AH to 5.3 and "bad data received" issue is fixed.

Just fix other OVPN issues and I will be happy

DjM

I successfully upgraded RB433AH (firmware 2.29) to 5.3 and I don't have any issue with ethernet flapping. Also OVPN client "bad data received" is solved.

DjM

I got update from Mikrotik support team, that the issue with "bad data received" should be fixed, it will be released in next versions.

I'm putting update here for keeping interested people updated

DjM

I got update from Mikrotik support team, that the issue with "bad data received" should be fixed, it will be released in next versions.

I'm putting update here for keeping interested people updated

DjM

I already tested pre-release 5.3 and based on my testing there are still 3 open issues in OVPN: 1) ROS [OVPN client] --> Linux [OVPN server] - after 1 hour OVPN disconnected, in log there is a message: "bad data has received" - authentification via certificates 2) Windows XP [OVPN client] ...

DjM

Encapsulate your traffic to some tunnel which is supported on ROS and other side.

DjM

In pre-released version ROS 5.3 the problem is still active. I reported it back to support.

DjM

I think you can't track my ticket as the communication is going over email. I will try to keep you updated in this post if I will receive any update, but for support should be better if you will send them support.rif file from time, when the issue was occur. It can make faster progress on investigat...

DjM

Hello, I have the same problem - OVPN client ROS 5.2, connecting to Linux OVPN server. After around 1 hour of connected state all OVPN client interfaces are disconnected and in log I can see the same error message. I already reported this to support by a ticket [Ticket#2011042866000672] . After down...

DjM

Thank you, support files was send to support email.

DjM

Hello Mikrotik team, I upgraded RB750 to ROS 5.2, configured OVPN client and CPU is going for 100% - most CPU is taked by PPP. My configuration: 1) OVPN server - RB433AH, ROS 5.2, actual firmware - OVPN server working with working clients (RB750 with ROS 4.17, WXP, ...) 2) OVPN client - RB750, ROS 5...

DjM

Great, thank you, it is what I exactly needed

DjM

Hello all, I'm using a dynamic interface (OVPN client) in firewall rule as incomming/outgoing interface. When OVPN client is connected, it is working correctly. When the same OVPN client is disconnected and connected again, in the firewall rule there is invalid interface. It is probably caused becas...

DjM

There is a lot of issues with version 5.1 - please go through the forum. For example 100% CPU load for some commands, some problems with chipsets, ...

Last stable and working version is 4.17, for 5.x wait for 5.2, where should be a lot of bugs fixed (based on information on the forum).

DjM

Hi Mikrotik team, I have a problem with OpenVPN between 2 Mikrotik routers - scenario: Not working: OVPN server: RB433AH, ROS 5.0 OVPN client: RB750, ROS 5.0/5.1 Working: OVPN server: RB433AH, ROS 5.0 OVPN client: RB750, ROS 4.17 Configuration is totally the same in both of scenarios. In the no-work...

DjM

Hello Mikrotik team,

another idea can be to implement VRF to netwach tool. It is possible, please?

Thank you

DjM

Hello Mikrotik team,

any update for this topic? If it is not possible, can you, please, share some background information why it is not possible?

Thank you

DjM

Hello Mikrotik team,

i have one suggestion to Netwatch tool - to add parameters for watched IP:

- source interface
- source IP

Reason - for example router with 2 or more WAN links can test destination IP through all ISP (if one fail).

What do you think about this?

DjM

Hello,

no ideas how to solve this, please?

Thank you

DjM

Hello, I have a problem with getting output from command "/tool traceroute x.x.x.x" and saving it into a variable. I want to make a script, which will run a command "/tool traceroute x.x.x.x" and send it to email by a commad "/tool email send ..". For example, this is w...

Search found 111 matches