ROS 6.43.2 export config BUG

RouterOS General
1

There is a bug at ROS 6.43.2 with export Ethernet interfaces speed settings. I have all interfaces setting to “Auto Negotiation” and never changed any default settings, but the export config file contains:

/interface ethernet
set [ find default-name=ether1 ] comment=WAN speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] comment=LAN speed=100Mbps

MikroTik team - please repair that bug.

2

Not a bug: http://forum.mikrotik.com/t/v6-43-1-stable-and-v6-43-2-stable-are-released/123429/109
tl;dr: setting is not used if auto-negotiation is enabled. Before 6.43, default value was 100Mbps. Since 6.43 default value is 1Gbps. Export shows only difference between config and default value. Thats why you never saw it before despite the fact it was always set up that way.

3

I found another bug that could quality as a security problem:

[admin@MyMikroTik] > /interface 6to4 export  hide-sensitive
# oct/17/2018 12:40:30 by RouterOS 6.43.2
# software id = 07CG-QIMK
#
# model = RouterBOARD 962UiGS-5HacT2HnT
# serial number = NNNNA123NNN
/interface 6to4
add ipsec-secret=REALLY-SECRET-THIS-TMIE local-address=NN.NN.NN.NN name=sit1 remote-address=NN.NN.NN.NN

i.e. it exports the ipsec secret in spite of me trying to hide sensitive info. No wonder that the /ip ipsec peer complains
about unsafe configuration :slight_smile:

4

Indeed it looks like export hide-sensitive does hide the secret= config for IPsec peers, but not the ipsec-secret= config for tunnel interfaces with automatic IPsec peer.
That should be considered a bug. It appears in earlier versions as well.