What is this? Post info here, not a link..
It’s instructions for setting up an IKEv2 client to a VPN service. It generates a dynamic NAT rule to route traffic for addresses in an address list.
In 6.47+, it basically kills all routing for some reason.
Link to post in the 6.47 release thread about the same problem: http://forum.mikrotik.com/t/v6-47-stable-is-released/140100/1
Hi
thanks for the hint. Not sure if you have seen my former post. It worked even with the limited amount of storage.
Im wondering why mikrotik doesnt make custom images per HW. What i mean. There is no need for the wireless package on a hex3.
Updated cAP ac (RBcAPGi-5acD2nD). Upgrade seemed to work fine. Then performed a reset using the reset switch and now it won’t boot. I’m about to try netinstall to see if it’s bricked or not.
Update: Can’t get netinstall to work. Not sure if the device is bricked or if it’s because I’m connecting through a mikrotik switch for PoE. Any advice?
Update2: Finally got netinstall working under Windows XP. Windows 7 & 10 didn’t work for me. Reflashed and reset the device and its working again.
Update from 6.47 (38d uptime) to 6.47.1 on CCR1009-7G-1C-1S+ was flawless
-faxxe
CAPsMAN is a part of the wireless@ package.
Is transmit power back for the AC2?
I’m I’ve seen issues with Bridge Hardware offloadfing causing packet loss on 6.47.1 (that didn’t exist in 6.47).
I’m still investigating the issue currenltly, but so far I have seen…
-Packets between non-hardware accellerated interface and hardware accellerated interfaces are OK.
-Packets between two hardware-accellerated interfaces have severe packet loss.
-Simply turning OFF hardware acceleration on the bridge port fixes the issue, and turning setting back ON brings the issue back
So far I’ve updated about 100 devices, I’ve had complaints / noticed this issue on 2 devices.
1 x HAP AC Lite 952Ui-5ac2nD and 1 x 2011iL.
Has anyone else noticed this issue?
Cheers,
Jono.
@jsadler: Do you have some switch chip configuration on those particular devices with faults? It might be relevant because quite a while ago, I had an experience with RBD52G (using Atheros 8327 switch chip) that some features from switch-chip menu were causing serious packet loss to a degree I had to power-cycle the device because I couldn’t even access it. the RB2011 is using two switch chips (Ath8327 for 1Gbit ports and Ath8227 for 100Mbit ports). The RB952Ui also uses Ath8227.
So… there might be a pattern, or it may be completely unrelated thing 
I got all 3 models sitting around in production so I will see if there is some way to reproduce it.
or… maybe this?
*) switch - fixed MAC address learning on switch-cpu port for Atheros8316, > Atheros8227 > and Atheros7240 switch chips;
Can you identify, whether the RB2011 suffers this issue on both switches or just 100Mbit/1Gbit?
There is really no reason for that because you can make your own selection very easy …
You download “Extra packages” that would be all_packages--.zip with all available packages, then copy only what you need from the zip to routerboard (say system, dhcp, security, advanced-tools) and reboot and system with leave and update only these packages and from that point will update only that …
Did not now that this was possible. Will test it out.
Well since some recent RouterOS version, the download area for the npk is hidden. Maybe there are some files that will be deleted before the upgrade. (/system package update cancel ???)
If you do it manually the npk goes in RAM (above flash)
I can’t understand, why MikroTik put so little flash memory to current devices. 16MB in 2020…
Agreed… Very disappointing fact… Many interesting devices, but 16mb… And causes many troubles with upgrading.
Because the Qualcomm system-on-a-chip designs used for many MT products which hardware limit of max 16 MB SPI flash.
This is also the reason some products have the bizarre combination of fast wireless and 100Mbit ethernet ports - QCA decided to embed a 100Mb switch into the SoC.
I still have the same problem with CRL not being updated with DOH. (I am using Cloudflare)
DoH server connection error: SSL: handshake failed: unable to get certificate CRL.
I do have the DigiCert Global Root CA as trusted.
I even went to the extend to download the root CA of the websites where the CRL were downloaded from but with no luck either.
The DNS queries however seems to work properly with the DOH for all the clients. Just the router CRL update is not working anymore.
I have upgraded multiple devices from 6.46.6 to 6.47.1 (I skipped 6.47 as it was too buggy with the write disk issues that several users reported). I have upgraded:
- 4 x hAP AC2
- 2 x CRS326
- 1 x CRS312
- 2 x RB2011
- 1 x RB4011
- 3 x hEX S
- 1 x RB951Ui
- 1 x hAP Lite TC
Some of them has IPv6, others VPNs (L2TP/IPSec, IKEv2 and OVPN) and I have identified no issues so far.
It’s possible to use small boot SPI flash and then store main filesystem on bigger SPI flash accessed using linux SPI driver.
But Mikrotik keeps doing the same stupid 16MB thing even on devices with chips with no such limitations. For example, RBM11/33 and hEXv3 and hEX S all use MT7621A CPU. It’s very common SOC, you can find list of all devices with it here: https://wikidevi.wi-cat.ru/MediaTek_MT7621
Now look around and you will see many APs with 128MB of flash, that use exactly the same CPU as Mikrotik. So for hEX, it’s down to saving pennies for no good reason. 128MB flash in volume is not even $1… is it REALLY worth it???
is it REALLY worth it???
Yes it is. Lets call it planned obsolescence and whats the first rule of planned obsolescence? We don’t talk about it!
Ok, lets go from conspiracy theories back to the reality: It is well known that this is not a technical limitation. e.g. Mikrotik Audience with IPQ-4019 has 128MB NAND storage. on the other hand, the new Mikrotik hAP ac3 (or the “ultimate home router” chateau", both costs 50% more than Audience) has also IPQ-4019 but only 16MB Flash storage. That’s the reality, deal with it. Its not about the technical limitation, it is not about the price. They just want to mess with us. No need to go into details within this software release topic
Actually there is much simpler explanation ... those RBs don't need more ...
Firstly flash is not used to store firmware upgrade files, RAM is, as can be seen if you check free space before and after copying npk:
system resource print
free-memory: 104.4MiB
total-memory: 128.0MiB
free-hdd-space: 3268.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 487
system resource print
free-memory: 91.4MiB
total-memory: 128.0MiB
free-hdd-space: 3268.0KiB
total-hdd-space: 16.0MiB
write-sect-since-reboot: 487
After reboot system is only then writing to flash deleting old system files and replacing them with new versions (or old in downgrade) ...
And since standard RouterOS package is currently around 12MB there is roughly 3MB free flash space which means there is enough reserve for future versions as it is ...