Issue:
CCR1009-8G-1S-1S+ non-functioning IP Services after upgrading to v6.18
Description:
We have several CCR1036-12G-4S routers in service as well as four newly purchased CCR1009-8G-1S-1S+ routers.
I've upgraded several CCR routers from version 6.15 to version 6.18 without any problems. However, after upgrading to 6.18, I had noticed that I was no longer able to connect to the four newly purchased CCR1009-8G-1S-1S+ routers via any method (ie. ssh,www,winbox, etc.), except via mac-telnet. After being able to connect again to the CCR1009-8G-1S-1S+ routers via mac-telnet, I discovered that the /IP/Services list was showing "invalid" on all services that use "Available from" addresses. When trying to change them in any way (ie. trying to remove the IP restrictions) I was just getting an error to contact support.
Versions affected:
6.18
How to reproduce:
upgrade from 6.15 to 6.18
Notes:
Here is the /IP/Services list we use:
/ip> service print
Flags: X - disabled, I - invalid
NAME PORT ADDRESS CERTIFICATE
0 X telnet 23
1 ftp 21 192.168.1.8/32
192.168.26.26/32
2 www 8000 192.168.96.0/20
192.168.224.0/20
192.168.200.0/21
3 ssh 8022 192.168.96.0/20
192.168.224.0/20
192.168.200.0/21
4 X www-ssl 443 none
5 api 8728 192.168.105.18/32
6 winbox 8291 192.168.96.0/20
192.168.224.0/20
192.168.200.0/21
7 X api-ssl 8729 none
(for privacy the IP addresses has been changed to 192.168.x.x addresses.)
After upgrading to 6.18 I will see the "Invalid" flag next to any service that uses IPs restrictions. This ONLY happens on CCR1009-8G-1S-1S+ routers.
The only way to access the routers again was to downgrade to 6.15 again.
Support TicketID:
2014080766000645