veth deleted, cannot create new interface

RouterOS General
1

I upgraded to 7.11.1 and my veth1 interface disappeared. When I try to re add it I get

[admin@RB5009UG+S+] > interface/veth/add name=veth1 address=10.21.65.2/32 gateway=10.21.65.1            
failure: veth setup failed

I can add the interface without a gateway and then add the gateway later but it doesn’t route, nor does it survive reboot. Help!

BTW everything worked great before the upgrade. I tried downgrading to 7.11 and restoring my backup but the problem persists.

2

It may be enforcing that your gateway is outside the subnet’s range (e.g. container IP is /32 but should be /24). I’m guess the validity check is new, and upgrade removed it since it was “invalid” and why you can’t add either.

e.g.
address=10.21.65.2/32
like should be…
address=10.21.65.2/24

3

Thank you!

4

The same pattern occurs in 7.11 with gateway6 parameter. This fails:

/interface veth add address=192.168.45.200/24 gateway=192.168.45.1 gateway6=2001:470:8248:2d::e name=vbind9

This works:

/interface veth add address=192.168.45.200/24 gateway=192.168.45.1 name=vbind9
/interface veth set [ find where name=vbind9 ] address=192.168.45.200/24 gateway=192.168.45.1 gateway6=2001:470:8248:2d::e

and the export looks like:

/interface veth
add address=192.168.45.200/24 gateway=192.168.45.1 gateway6=2001:470:8248:2d::e name=vbind9

then veth add fails at reboot.

5

Oy, this works:

/interface veth
add address=192.168.45.200/24,2001:470:8248:2d:c086:31ff:fe24:851a/64 gateway=192.168.45.1 gateway6=2001:470:8248:2d::e name=vbind9

Intuitively obvious but only if known.

Similar parameter check behavior for add and set would be nice.

6

Yeah, VETH used not check anything, and now it does check “more” but not everything… But does seem like it should be handled better/bug. e.g. not break on upgrade & gateway/gateway6 outside the container’s address= subnets should not be allowed

7

@Amm0 sigh
Create Network is so incomplete https://help.mikrotik.com/docs/display/ROS/Container#Container-Createnetwork
Tips and Tricks is only place IPv6 is shown https://help.mikrotik.com/docs/display/ROS/Container#Container-Tipsandtricks
IMO address parameter worst; it accepts (A) multiple addresses, (B) both IPv6 and IPv6, and neither is obvious.
I am so grateful your contributions here inspired that discovery. Thank you, thank you, thank you.