6.3 Released

RouterOS General
41

Verbose export still a problem.
/ip firewall mangle> export verbose

/ip firewall mangle
add action=set-priority chain=forward !connection-bytes !connection-limit
!connection-mark !connection-rate !connection-state !connection-type
!content disabled=no !dscp !dst-address !dst-address-list !dst-address-type
!dst-limit !dst-port !fragment !hotspot !icmp-options !in-bridge-port
!in-interface !ingress-priority !ipv4-options !layer7-protocol !limit
new-priority=from-dscp-high-3-bits !nth !out-bridge-port out-interface=
all-wireless !p2p !packet-mark !packet-size passthrough=yes
!per-connection-classifier !port !priority !protocol !psd !random
!routing-mark !routing-table !src-address !src-address-list
!src-address-type !src-mac-address !src-port !tcp-flags !tcp-mss !time !ttl

42

The new mtr-like traceroute is buggy.
In draws only 50 bars and then stops updating the histogram.

43

Hello!

The correct md5sum for file all_packages-mipsbe-6.3.zip is, in fact, 54dcacfa0f027be8f21071ab21a46793 as it is stated on our website. Please use official sources for your upgrades.
Thanks.

44

In draws only 50 bars and then stops updating the histogram.

I prefer it that Bandwidth tests, pings, tracert, etc. time out after a while, but maybe 50 is to quick.
To many times did someone leave a test running and forgot about it.

45

If there are “known issues”, please state them in your change_log or at least make a known issues thread !

46

what is the problem here? verbose is “more”, if you want only what you changed, don’t use “verbose”

47

+1

48

*) pptp, l2tp, sstp - allow to specify server via dns name;
Please add OpenVPN to that list. Seriously, that’s just unfair for users.
pptp - insecure.
sstp - supported only in windows.
l2tp - requires ipsec+l2tp combo, hard to configure by user.

49

l2tp - hard to configure by user.

You mean OpenVPN is easier to configure by user? Personally, I strongly disagree.

50

Viscosity on Mac and Windows can simply import config with one click. Same for “free” Mac OpenVPN client - Tunnelblick.
Same applies for Ubuntu with NetworkManager.
Not sure about “OpenVPN GUI” for windows.
So yeah, not a problem at all.

51

Rivera

sstp - supported only in windows.

SSTP: sstp-client for linux not working properly?

52

If you so strong against OpenVPN, please provide me with protocol that will be:

  1. Secure. Not PPTP
  2. Cross-platform. Not SSTP. Btw yours SSTP implementation can connect only to Win and mikrotik based VPN servers, not to SoftEther)
  3. Portable, by portable i mean it can be used on both 3G/4G networks. VPNs that was stable on 3G connection was PPTP (but unsecure) and OpenVPN.
  4. Easy to configure. Not IPSec/L2TP, because installing strong/openswan and writing all configs… doh.
    We have mixed environment (both win/lin/mac) in our office network, same for my home network.
53

IPSec/L2TP is fairly easy to configure. You have built-in (or easily installable) support for all the platforms (ex. Windows Phone). We have users using: OSX, Windows 7 and 8, Ubuntu/Mint, Android and iOS. All of them can use graphical tools to connect to VPN server.

Kamil

54

Ubuntu/Mint
NM in ubuntu lacks L2TP/IPsec support.

55

Plain policy-based IPsec. With all the recently added features to support road-warrior configurations this is now my #1 choice to be used with Mikrotik.

Mikrotik still lacks some very-nice-to-have features like Split-DNS support (I only need server-side (i.e. mode-cfg) Split-DNS support, and it should be extremely easy to implement) and RADIUS integration, though. But what we have at the moment is already usable.

56

Yes, but IPSEC was not working well in 6.1 and 6.2. Were all issues with it fixed in 6.3?
Is it working?

Thanks,

T.P.

57

The problem with both WinBox and WebFig misreporting the IPsec SA expiration time is not fixed yet in 6.3. The reported value is a) incorrect and b) counts up (but should count down). Everything is fine on console, the “/ip ipsec installed-sa print” command reports correct value.

Original report is here: http://forum.mikrotik.com/t/radius-server-not-working-in-2-8-11/127/1

58

IPsec is working in v6.1 and v6.2, what did you mean by this?

59

It was working just fine for me in 6.2, and works fine in 6.3 now. The only problem is that SA expiration time is misreported in WinBox and WebFig (see 2 posts above), but that is definitely not a show-stopper.

60

This will be fixed in v6.4