RB850Gx2 RouterOS v7.1.1 no TCP Winbox access

RouterOS General
1

After upgrading from v6.47.1 to v7.1.1 I can no longer access the router using Winbox over TCP

Access via MAC works OK
Firewall rules checked and logging “accept” action for WInbox access on input chain:

INPUT DEBUG: input: in:TRUSTED out:(unknown 0), src-mac xx:xx:xx:xx:xx:xx, proto TCP (SYN), 192.168.10.55:9458->192.168.10.1:8291, len 52

Winbox is enabled in the IP Service list

No reply packets seen on Wireshark capture

The following Routerboard services have also broken:

  • SSH


  • Web access


  • WebProxy


  • NTP Client

Any suggestions welcome

2

UPDATE:

Putting a log rule on the output chain shows the RB850 replying to the connection:

OUTPUT to .55 output: in:(unknown 0) out:TRUSTED, proto TCP (SYN,ACK), 192.168.10.1:8291->192.168.10.55:9515, len 52

Nothing seen on WireShark

nmap from multiple hosts shows ports “filtered”, on disabled www port 80 service nmap get RST, ACK and shows closed correctly

3

I have several RB850Gx2 devices. And after upgrading to any v7 version, I can’t log in on these devices.
Version 7.18.2 is currently installed.
The following Routerboard services have also broken: SSH, Web access, WebProxy, NTP Client, SNMP.
I found that this allows you to connect to the device :

/ip packing
add interface=ether1

, - where ether1 is the uplink
I don’t think this is the right solution to the problem.

4

I do seem to recall various threads, very similar to this one, that popped up right around the time the 850Gx2 was released, with people experiencing weird management problems to it.

The thing is, I’ve never been able to reproduce any of those issues myself, with any of my 850s.

I just took one with a blank config, added DHCP client to it, then upgraded it from 6.49 to 7.1.1 (original version referenced when this thread was started years ago). Have zero problems Winboxing to it, or SSHing to it, or anything.

So, upgraded to 7.18.2. Again: works perfectly fine for me.

So obviously there is something different between the failing examples (or the surrounding environ), and mine. Do you have any other config (aside from the /ip/packing workaround you came up with) on yours?

What digit does your 850 serial# start with? There were two versions of this product, and the demarcation point was when the serial#s started with a 5. I’ve never had a problem with either, and I rather doubt it is relevant (the only difference is a SoC rev/variant), but…

5

model: RB850Gx2
serial-number: 5D3D05D3041D
firmware-type: p1023
factory-firmware: 3.22
current-firmware: 7.18.2
upgrade-firmware: 7.18.2