I have just upgraded my system from 2.9.42 to 3.0 rc2 including user manager.
My 2.9 Hostspot was working fine before the upgrade. ROS 3 rc2 installed without problems but my Hotspot customers cannot connect to the net.
The log-on screen appears on the customer computer by freezes after typing the user name and password with no traffic from the server.
I have noticed the following:
There is an invalid dynamic entry with a jump-target= pre-hotspot on # 1
0 D chain=dstnat action=jump jump-target=hotspot hotspot=from-client
1 I chain=hotspot action=jump jump-target=pre-hotspot
2 D chain=hotspot action=redirect to-ports=64872 dst-port=53 protocol=udp
3 D chain=hotspot action=redirect to-ports=64872 dst-port=53 protocol=tcp
4 D chain=hotspot action=redirect to-ports=64873 hotspot=local-dst dst-port=80
protocol=tcp
5 D chain=hotspot action=redirect to-ports=64875 hotspot=local-dst
dst-port=443 protocol=tcp
6 D chain=hotspot action=jump jump-target=hs-unauth hotspot=!auth protocol=tcp
7 D chain=hotspot action=jump jump-target=hs-auth hotspot=auth protocol=tcp
8 D chain=hs-unauth action=return dst-address=210.4.17.233 in-interface=ether2
9 D chain=hs-unauth action=redirect to-ports=64874 dst-port=80 protocol=tcp
10 D chain=hs-unauth action=redirect to-ports=64874 dst-port=3128 protocol=tcp
11 D chain=hs-unauth action=redirect to-ports=64874 dst-port=8080 protocol=tcp
12 D chain=hs-unauth action=redirect to-ports=64875 dst-port=443 protocol=tcp
13 I chain=hs-unauth action=jump jump-target=hs-smtp dst-port=25 protocol=tcp
14 D chain=hs-auth action=redirect to-ports=64874 hotspot=http protocol=tcp
15 I chain=hs-auth action=jump jump-target=hs-smtp dst-port=25 protocol=tcp
Then on the /ip firewall filter:
There is another invalid dynamic entry with jump-target=pre-hs-input on #3
0 D chain=forward action=jump jump-target=hs-unauth hotspot=from-client,!auth
1 D chain=forward action=jump jump-target=hs-unauth-to hotspot=to-client,!auth
2 D chain=input action=jump jump-target=hs-input hotspot=from-client
3 I chain=hs-input action=jump jump-target=pre-hs-input
4 D chain=hs-input action=accept dst-port=64872 protocol=udp
5 D chain=hs-input action=accept dst-port=64872-64875 protocol=tcp
6 D chain=hs-input action=jump jump-target=hs-unauth hotspot=!auth
7 D chain=hs-unauth action=return dst-address=210.4.17.233 in-interface=ether2
8 D chain=hs-unauth action=reject reject-with=tcp-reset protocol=tcp
9 D chain=hs-unauth action=reject reject-with=icmp-net-prohibited
10 D chain=hs-unauth-to action=return src-address=210.4.17.233
out-interface=ether2
11 D chain=hs-unauth-to action=reject reject-with=icmp-host-prohibited
I have deleted all dynamic entries and rebooted the system but the invalid dynamic entries are still present.
If a customer attempts to login no traffic passes through the firewall filter filter hs-input chain Hotspot servelet (ports 64872, 64873-64875). Traffic coming in from firewall filter input chain is forwarded to the hs-input chain but the first entry on the hs-input chain is the invalid entry with the jump target=pre-hs-input witch does not have any entry on it. Same is true for the NAT entries from dstnat chain jumping to the hotspot chain which jumps to the invalid pre-hotspot chain witch has no entry on it.
I recommend downgrading back to the 2.9.
That said; You should firstly do a system reset-configuration, prior to downgrade.
Then just to be sure you will not encounter any problems, do another system reset-configuration after downgrading.
Re-configure your AP from the ground up using mac-access winbox, or using serial console.
There are alot of diffences in the settings from 3.0 to 2.9.
Same problem for me, after upgrade from 2.9.46 to 3.0rc2 all cpe loosing connection with AP and hotspot stop to work. I’ve tried to reconnect some cpe (site survey recognize AP but when I try to connect it the surprise “Connect fail”).
I’ve upgraded to 3.0rc3, same problem and 5 GHz link are much slow, with 2.9.6 and 3.0rc2 the link it’s so fast!
With all 3.0 releases often the processor work at 100% without activity (tested on RB532 and RB153).
I’ve tried to downgrade to 2.9.46 and all wireless settings are lost. (ONLY wireless config… ?).
Maybe you can connect using serial console and copy that kernel panic ans send it to support@mikrotik.com so we could know what exatly crashes. You can send us the support output file from v2.9.46 (before the upgrade to v3.0).
Hi Uldis,
I’m sorry for delay, some day ago we have had a small hurricane and my wireless network has been damaged from it. (many antennas destroyed…) “Kernel Panic - Not Syncing: No init Found. Try passing init= option to kernel”
this is the error after upgrade. With 3.02 or 3.03 upgrade.
I have the same error ONLY if I make upgrade from 2.9.x(?).
If I try to load 3.03 OS from netinstall I haven’t boot errors…
(PS I’ll try to repeat all steps and I’ll send You supout file of 2.9.46 before upgrade…)
could you send us the support output file from your router when it is running v2.9 and also the backup file so we could try to upgrade the router with similar configuration to reproduce this problem.
Send both files to support@mikrotik.com
.