v6.16/v6.17

[normis]

What’s new in 6.16 (2014-Jul-17 13:12):

*) 802.11ac support added in wireless-fp package;
*) winbox - fixed random disconnection over encrypted tunnels;
*) l2tp, pptp, pppoe - fixed possible packet corruption when encryption was enabled;
*) ovpn - fixed ethernet mode;
*) certificates - use SHA256 for fingerprinting;
*) ipsec - fix AH proposal and problem when sometimes policy was not generated;
*) snmp - support AES encryption (rfc3826);
*) l2tp server: added option to enable IPsec automatically;
*) poe-out: added power-cycle-ping and power-cycle-interval settings;
*) gps - increased retry duration to 30 seconds;
*) time - on routerboards, current time is saved in configuration on reboot
and on clock adjustment, and is used to set initial time after reboot;
*) sntp - disabling/enabling client was causing dynamic-servers to be ignored
(bug introduced in 6.14);
*) CCR - fixed rare file system corruption when none
of configuration could be changed or some of it disappeared;
*) ipsec - allow multiple encryption algorithms per peer;
*) email - support tls only connections;
*) smb - fixed usb share issues after reboot
*) snmp - fix v3 protocol time window checks;
*) updated timezone information;
*) quickset - added VPN settings for HomeAP mode;
*) latency improvements on CCR devices;

What’s new in 6.17 (2014-Jul-18 15:14):

*) CCR1009 - fixed crash;

If you already run some RouterOS v6.x version, simply click “Check for updates” in QuickSet, Webfig or Winbox packages menu.

Others: http://www.mikrotik.com/download

WARNING: Seems that currently the v6.16 causes issue in the first 4 ports of CCR1009. No other devices are affected. Fixed version is being released

[tomaskir]

Exciting news, keep up the good work.

Off to do some testing on the new version now.

[fitless]

Hi,

Where I could find the information about new firmware (like what’s new) 3.18 for RB450G which came with the latest OS 6.16 ?

[Chupaka]

@normis

*) l2tp, pptp, pppoe - fixed possible packet corruption when encryption was enabled;

huh, is that to fix those annoying errors?..

jul/15/2014 22:46:10 ppp,error,critical 25585: Encryption got out of sync - disabling
jul/16/2014 13:56:11 ppp,error,critical 45075: Encryption got out of sync - disabling

@normis

*) latency improvements on CCR devices;

any details?

[nz_monkey]

Wow what a release. Great work Mikrotik.

Can you provide more info on the CCR latency improvements?

E.g. is it across all functions, or forwarding or ppp ?

[ropeba]

IGMP proxy is still broken!

[prague]

Winbox disconnection problem still goes on. Like 6.15 version which i login with read account.

[stavincki1]

@ropeba

IGMP proxy is still broken!

I can confirm that. Igmp proxy stops to forward multicast traffic after upstream interface goes down/up. RB2011, ROS 6.16. Upstream inteface on RB2011 is on port 1…

[mangust]

Shoould i use wireless or wirless-fp package on RB2011UiAS-2Hnd?
Once I enable wireless-fp and reboot wireless goes to disable state.
Is that OK ?

[normis]

@mangust

Shoould i use wireless or wirless-fp package on RB2011UiAS-2Hnd?
Once I enable wireless-fp and reboot wireless goes to disable state.
Is that OK ?

yes, wireless-fp replaces the regular package, this is why regular gets disabled

[rextended]

THIS BUG ALREADY SIGNALED ON 6.12 STILL PRESENT AND NOT SOLVED:

Primary BUG: Webfig created script or schedule do not have ftp, winbox, api rights and are impossible to set that rights on Webfig

Secondary BUG: Winbox do not have the possibility to change ftp, winbox, api rights on script or schedule

VERSION AFFECTED: ALL VERSION OF ROUTEROS where webfig are present.

When one script are created on Winbox or on CLI, the default right applied are:
ftp,reboot,read,write,policy,test,winbox,password,sniff,sensitive,api

But when the script are created by webfig, the only right can be applied are:
reboot,read,write,policy,test,password,sniff,sensitive
MISSING ftp,winbox,api

Without ftp right some command like “/export file=filename;” are not doable on script / schedule created with WebFig.

Walkthrought: obviously using the CLI you can set the missing rights.

Is clear what is the problem, without any other investigation.

[normis]

[quote=“rextended”][/quote]

Clarify why is this important? It is not a bug, but lack of feature due to security. Why would you need these permissions in the GUI editor ?

[paoloaga]

@paoloaga

@normis

are they switched? did you send an traffic, or just connect the cable to somewhere (where)?

It happens on ports 5 and 7, routed ports, with a straight configuration: one ip address and ospf configured (so yes, the router makes some traffic when the cable is connected). On the other side there is a CCR1016-12G.

BTW: I tried to upgrade also the CCR1016-12G (connected on the other end of the cable). This one works correctly (the 1016), but the ports on the 1009 keep flapping. I already tried to reset and re-apply configuration, I tried net-install and I tried it on another 1009, the results are the same. Need to revert back to 6.15.

[rextended]

@normis

Clarify why is this important?
It is not a bug, but lack of feature due to security.
Why would you need these permissions in the GUI editor?

Simply because on same user used to access webfig, by winbox, you can be able to create script with full right.
Winbox correctly assign ftp,winbox,api right to a new maded script/scheduler.
Webfig (on the same security level) can not.

On second istance, if one script has ftp,winbox,api right, is impossible to remove them from winbox or webfig.

Is obvious all can be do by CLI, but I’m not the only user complaining about missing interface for set/unset that rights.

Without assign ftp right, is impossible to create script on webfig can do automatic backup / export by mail, read file contents, check file existance, restore backup, import script etc.etc.etc.

[ojsa]

Nice feature with this “fast vpn” setup. Is it possible to enable fast and easy from either command prompt or winbox regardless of quickset?

[ojsa]

Changing profiles in quickset you get a warning that you could loose connectivity, no matter what i answer it just pops back to my original quickset profile.

Running Chromes and windows 7.

[opalit]

Where is 6.17, not on downloads page, also can not find VPN wizard in 6.16 as claimed in newsletter

[WirelessRudy]

Wow, after all my excitement abt the newsletter this puts me right back on earth… ample hours after release of 6.16 it already has to be replaced by 6.17… Lucky I just did upgrade may CCR to 6.15 so didn’t immediately plan to go for .16… saved by the bell I guess…

A new employee just upgrades 30 SXT’s fm 6.15 into 6.16. Lets see what happens with these… I halted all upgrades for now…

[honzam]

What´s new in routerboot 3.18 ?

I know → support for new AC products.
But another changes?
Please update old changelog on wiki - http://wiki.mikrotik.com/wiki/RouterBOOT_changelog

[normis]

We just published v6.17, which includes CCR1009 fix for port issues that caused crash. No other changes included, thanks everybody for quick reports that allowed us to immediately release a fix!